This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7566E68AF05C11F0A386ED90DAE4EC9C.roa
File:                     7566E68AF05C11F0A386ED90DAE4EC9C.roa (raw, json)
Hash identifier:          VhkVoqvXJIBoM+toQ2NkOlWZHmdTQZp/yc7EIGlf20M=
Subject key identifier:   90:DE:7A:07:CD:F1:BD:B1:EB:23:8A:A8:8F:D0:0F:A3:4C:1E:F7:83
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B46D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7566E68AF05C11F0A386ED90DAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 08:47:15 +0000
ROA not before:           Tue 13 Jan 2026 08:47:10 +0000
ROA not after:            Tue 17 Feb 2026 08:47:10 +0000
asID:                     54801
IP address blocks:        154.81.136.0/24 maxlen: 24
                          154.81.166.0/24 maxlen: 24
                          154.82.18.0/24 maxlen: 24
                          154.82.20.0/24 maxlen: 24
                          154.83.158.0/24 maxlen: 24
                          154.83.187.0/24 maxlen: 24
                          154.83.190.0/24 maxlen: 24
                          154.83.191.0/24 maxlen: 24
                          154.83.209.0/24 maxlen: 24
                          154.83.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111725 (0x1b46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 13 08:47:10 2026 GMT
            Not After : Feb 17 08:47:10 2026 GMT
        Subject: CN=69660693-bf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c3:26:a8:f3:2b:75:e8:45:63:70:91:39:b3:
                    71:c1:5d:ec:ef:cf:69:2c:7f:73:42:4c:f1:15:1e:
                    42:d7:7c:e5:46:7e:83:b9:63:c7:f9:91:61:83:67:
                    50:72:69:2d:4c:ae:30:4e:72:1d:45:45:6a:77:5e:
                    3f:eb:3e:a2:58:db:d6:d0:b7:48:d0:ed:b9:27:b4:
                    28:db:ab:aa:fd:24:b9:08:17:49:0b:23:b6:e0:6e:
                    2b:12:84:6c:6f:47:bc:42:cb:b1:4d:84:68:47:78:
                    a4:84:ea:da:e0:c1:19:33:27:fb:05:f2:f2:e7:19:
                    0d:33:a3:ef:5d:24:3b:75:d0:98:92:77:3c:5a:a1:
                    ed:d2:12:a8:d3:cd:48:d3:9e:7d:6f:68:5e:72:14:
                    0d:5a:8a:f2:77:8f:8b:8e:00:df:32:78:24:c9:f3:
                    4a:79:bb:f9:2a:c9:cb:a9:31:4e:4d:8c:fe:52:59:
                    d5:97:26:84:8d:53:0a:fe:f8:f8:6b:8f:48:d3:50:
                    dc:13:32:ed:d7:e5:1c:85:14:25:1e:56:82:8a:36:
                    7d:57:d0:a1:c6:1f:ba:3d:4d:4c:35:27:cb:af:7c:
                    fe:7c:85:63:d8:31:13:70:fe:29:5d:a9:7a:b1:7b:
                    22:14:52:d9:5d:0c:e2:1d:90:0b:a0:a2:95:e7:ab:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DE:7A:07:CD:F1:BD:B1:EB:23:8A:A8:8F:D0:0F:A3:4C:1E:F7:83
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7566E68AF05C11F0A386ED90DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.136.0/24
                  154.81.166.0/24
                  154.82.18.0/24
                  154.82.20.0/24
                  154.83.158.0/24
                  154.83.187.0/24
                  154.83.190.0/23
                  154.83.209.0/24
                  154.83.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:29:84:e6:77:9f:82:f8:a3:f6:b6:30:ba:ba:01:0b:34:d8:
         d8:65:f4:16:2d:e5:d1:5f:f4:11:e5:1b:5a:2a:02:6e:01:86:
         cd:eb:09:15:a4:f0:a9:95:a0:d5:71:fd:87:e8:6c:d6:70:4e:
         76:c0:5c:96:38:ad:a4:c2:42:a0:63:a2:d7:fe:ca:f8:59:42:
         fc:c9:5a:00:63:9f:62:fd:4d:37:09:ad:a7:ae:f0:8a:34:72:
         10:57:70:f8:64:a7:8f:4f:a0:28:86:8a:7b:d1:f0:52:e8:42:
         58:e8:67:6c:e0:8f:56:90:3b:7a:70:73:34:ec:cb:a2:2b:87:
         11:e6:bd:72:7b:d8:1d:6c:e9:5c:04:dc:60:5f:1f:a7:17:be:
         4a:11:36:a0:1f:a5:76:01:06:81:07:54:08:9c:70:5e:65:66:
         a5:8f:b5:c7:a1:11:a2:d0:97:00:39:27:cd:6a:98:00:55:2e:
         d3:98:b9:a4:34:b1:55:bd:be:e2:79:44:9b:83:55:00:04:1a:
         0c:a0:77:96:60:97:b2:be:9b:81:28:19:e8:04:87:cd:1f:2f:
         9d:85:4b:a2:c1:d7:e0:49:82:46:b0:89:17:61:4a:9f:91:dd:
         bf:35:62:54:d0:0d:e7:e7:83:8c:10:48:ea:be:c4:5f:27:81:
         56:36:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:20 2026 by rpki-client