This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DAC728CF21011F0A0233987DAE4EC9C.roa
File:                     7DAC728CF21011F0A0233987DAE4EC9C.roa (raw, json)
Hash identifier:          sgyTkWOYAJePduyxZReygNjDbQkFhzH+O3sZ6G1FLW4=
Subject key identifier:   45:29:D3:1F:92:FF:E0:38:77:CC:E2:AD:9C:1C:2C:CD:6F:7C:3F:02
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B4C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DAC728CF21011F0A0233987DAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 12:48:29 +0000
ROA not before:           Thu 15 Jan 2026 12:48:22 +0000
ROA not after:            Mon 09 Feb 2026 12:48:22 +0000
asID:                     139646
IP address blocks:        154.204.0.0/24 maxlen: 24
                          154.208.12.0/22 maxlen: 24
                          154.208.16.0/20 maxlen: 24
                          154.212.128.0/24 maxlen: 24
                          154.215.0.0/24 maxlen: 24
                          154.218.0.0/24 maxlen: 24
                          154.221.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111815 (0x1b4c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 15 12:48:22 2026 GMT
            Not After : Feb  9 12:48:22 2026 GMT
        Subject: CN=6968e21d-6bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:75:de:08:b1:67:ef:ba:ab:27:22:32:8b:
                    dc:6e:5e:dd:1f:46:ba:bd:f0:34:7e:10:c1:bf:1f:
                    21:71:1d:02:77:4d:e6:ef:5f:58:0e:62:19:32:c2:
                    4e:c5:f1:2b:6d:66:02:0d:94:84:d1:87:9f:c5:e2:
                    35:ed:a5:e5:12:57:ed:c4:76:26:a8:bd:16:8d:8f:
                    e5:68:83:84:ea:7f:88:75:0b:6d:6e:7b:4e:00:a2:
                    66:e9:f6:46:00:83:8e:a0:86:47:ba:41:65:cd:5e:
                    b0:75:9b:7a:b6:c0:77:de:f6:ff:93:85:7f:74:96:
                    61:e4:48:fc:83:bc:d3:10:ea:37:60:6d:a0:59:c8:
                    0d:9a:cc:55:22:29:04:48:74:43:86:66:01:4c:56:
                    c8:a4:b5:40:6f:71:28:8f:1b:82:fc:eb:e0:35:10:
                    36:83:8d:41:74:c6:e1:ae:43:5a:5d:7f:7f:05:d7:
                    16:d3:77:66:8e:f3:4e:5c:28:3b:7b:33:d3:78:dc:
                    05:ed:70:aa:08:6f:3b:cd:b0:fb:d9:5d:d2:32:84:
                    e8:cb:17:6a:fb:7d:01:c2:a6:f7:33:60:fb:25:9f:
                    51:71:ee:a0:43:1e:f7:9a:fb:f7:39:11:2b:5c:c7:
                    81:ea:7e:d8:e7:7f:ef:61:58:85:c3:e5:2c:86:5f:
                    6e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:29:D3:1F:92:FF:E0:38:77:CC:E2:AD:9C:1C:2C:CD:6F:7C:3F:02
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DAC728CF21011F0A0233987DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.0.0/24
                  154.208.12.0-154.208.31.255
                  154.212.128.0/24
                  154.215.0.0/24
                  154.218.0.0/24
                  154.221.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:82:78:cc:fc:9d:bc:6a:06:5c:37:c4:7e:70:e9:f8:b7:c1:
         3a:94:e1:85:03:13:44:92:74:34:99:2a:6a:b4:f8:88:41:4f:
         12:47:75:cd:df:df:34:d7:5b:5f:c0:29:3e:17:c7:0d:ef:45:
         fb:c5:c3:32:05:c4:df:f3:00:99:f7:6a:ee:d3:e0:36:65:88:
         8d:97:1b:42:11:4d:db:95:ae:89:bb:0b:6a:3b:89:a8:6a:a5:
         f5:4d:26:a1:c8:c7:27:18:2e:dc:d8:5b:9c:7c:80:1a:e7:16:
         fe:b6:78:e9:db:b9:d8:74:26:0d:60:8e:f3:f8:69:f7:a1:7e:
         fa:63:ee:f2:f0:1c:02:d3:48:ff:fc:35:e2:f1:e0:49:09:eb:
         f7:3a:5c:91:cd:d4:0e:ae:72:ef:29:df:bd:34:95:1f:12:70:
         ff:18:51:20:09:8a:06:40:2c:b7:ee:73:9a:84:7b:26:84:9f:
         5b:a4:1c:67:e0:3e:88:5e:67:25:e2:a3:97:ac:88:c6:ed:a1:
         fe:5d:b2:00:37:d9:8d:99:4d:b1:c1:74:a4:a8:5b:63:a3:05:
         cc:58:26:bd:ee:94:8f:3a:17:67:49:f0:71:ef:11:96:76:33:
         d6:0e:eb:8f:a2:ca:3c:84:41:1c:e6:9f:5d:7c:1e:9e:8f:c8:
         6f:fa:fb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:06:45 2026 by rpki-client