This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BD792EEF95311F099256C83DAE4EC9C.roa
File:                     7BD792EEF95311F099256C83DAE4EC9C.roa (raw, json)
Hash identifier:          zhV/S/EUG2XEzNzaEd0eNszE7queia9693cq+4OTCN4=
Subject key identifier:   12:C4:18:8A:4F:41:4D:FA:9E:C0:7E:9C:46:0C:D6:DD:9E:D3:0D:59
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B66A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BD792EEF95311F099256C83DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 18:35:41 +0000
ROA not before:           Sat 24 Jan 2026 18:35:36 +0000
ROA not after:            Thu 12 Mar 2026 18:35:36 +0000
asID:                     395793
IP address blocks:        154.81.50.0/24 maxlen: 24
                          154.82.162.0/23 maxlen: 24
                          154.82.164.0/22 maxlen: 24
                          154.83.8.0/24 maxlen: 24
                          154.83.9.0/24 maxlen: 24
                          154.83.10.0/24 maxlen: 24
                          154.83.11.0/24 maxlen: 24
                          154.83.24.0/24 maxlen: 24
                          154.91.152.0/24 maxlen: 24
                          154.91.153.0/24 maxlen: 24
                          154.91.154.0/24 maxlen: 24
                          154.91.155.0/24 maxlen: 24
                          154.91.156.0/24 maxlen: 24
                          154.93.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112234 (0x1b66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 18:35:36 2026 GMT
            Not After : Mar 12 18:35:36 2026 GMT
        Subject: CN=697510fd-4c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ad:21:b4:5b:26:a3:cb:1e:a8:84:e2:c3:d1:
                    76:3d:ff:24:77:2e:8c:5c:42:76:4d:2c:9e:f0:e2:
                    e0:6a:06:70:c4:f2:dc:79:bd:8a:be:95:5f:b0:94:
                    b6:1f:5d:4a:fd:7f:50:fc:8a:de:1d:24:ad:8a:8b:
                    a4:44:61:cc:7e:41:87:8a:fd:80:ef:c0:90:f9:67:
                    68:16:ea:aa:ab:09:23:7e:10:aa:60:11:3b:26:19:
                    87:30:a2:c4:54:ce:bb:50:f0:12:49:38:6d:7b:3b:
                    a0:c2:72:91:99:9f:3e:bd:f2:9f:f7:f4:05:ec:33:
                    39:38:57:ed:fa:40:3b:05:2b:31:9b:29:35:5c:18:
                    be:f5:53:9d:a8:2f:40:15:6b:0d:88:08:19:72:92:
                    85:58:02:a0:71:f7:63:5d:3f:fc:a9:98:61:6c:fc:
                    8d:ee:1e:35:72:ce:65:83:89:db:67:75:99:cc:dd:
                    c0:b9:7c:3f:bd:f7:cc:b4:fd:3c:21:00:3d:48:e0:
                    0b:70:96:31:c9:b5:f6:83:46:b8:b5:c1:5b:38:ad:
                    9f:36:98:c8:21:3d:18:c4:a0:c2:65:bd:c3:d2:58:
                    7d:5e:66:6f:ef:be:fb:92:09:ef:0b:39:af:32:cf:
                    fc:ec:cf:6b:f6:93:64:e6:a6:e9:25:98:7c:d9:d1:
                    d5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C4:18:8A:4F:41:4D:FA:9E:C0:7E:9C:46:0C:D6:DD:9E:D3:0D:59
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BD792EEF95311F099256C83DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.50.0/24
                  154.82.162.0-154.82.167.255
                  154.83.8.0/22
                  154.83.24.0/24
                  154.91.152.0-154.91.156.255
                  154.93.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:56:f0:98:7b:11:03:21:71:ab:e4:57:c7:67:da:f3:8c:30:
         34:6a:e0:18:83:7f:a7:ef:f6:00:e5:73:6e:de:48:49:3e:6d:
         26:03:ff:6d:1f:b8:e1:b4:99:f2:4f:77:97:9f:34:a9:d4:37:
         ad:30:fc:8e:6d:7e:aa:c2:ba:05:04:28:bc:dc:fe:6b:ad:d7:
         b2:8e:f9:47:72:82:4a:a8:bf:e8:ad:18:2e:ec:db:9f:d7:f9:
         8f:1f:41:96:b3:93:b4:5a:11:1f:44:05:06:fc:5e:20:6b:2f:
         5d:29:d7:90:94:5f:ba:51:fa:63:8e:25:a2:f3:23:fe:64:14:
         5e:45:d2:3f:83:bf:a3:32:c1:6f:08:74:12:31:66:9f:16:9f:
         c9:82:ed:aa:1f:3e:22:1a:3e:dd:29:03:e0:e3:be:90:04:47:
         7f:fe:8e:da:6e:1f:90:06:36:17:91:45:9a:e1:f0:05:3e:0c:
         9b:0c:1c:c8:4b:11:30:2d:6a:e8:65:0e:a1:88:65:c1:af:a4:
         e7:19:32:a4:8c:40:62:08:1e:03:c5:b3:d2:69:e1:42:ca:c6:
         2d:6e:21:b1:6d:14:2b:73:fe:3e:c5:3f:c1:bb:5c:46:20:14:
         60:32:08:36:fa:e5:fa:8b:24:9a:72:45:eb:90:c7:25:a8:02:
         64:8f:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:04 2026 by rpki-client