This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E864FC8F93811F09AA8EFDDDAE4EC9C.roa
File:                     7E864FC8F93811F09AA8EFDDDAE4EC9C.roa (raw, json)
Hash identifier:          yUvkC1qmlHevOWUyijKsUqqtadSY/PG7GodJWHgyBvA=
Subject key identifier:   A0:62:19:BC:3D:39:CB:88:3A:01:1B:02:1B:74:2A:F1:8C:55:53:8B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B628
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E864FC8F93811F09AA8EFDDDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 15:22:29 +0000
ROA not before:           Sat 24 Jan 2026 15:22:24 +0000
ROA not after:            Sun 01 Mar 2026 15:22:24 +0000
asID:                     214143
IP address blocks:        154.200.72.0/21 maxlen: 24
                          154.200.109.0/24 maxlen: 24
                          154.205.248.0/22 maxlen: 24
                          154.206.4.0/22 maxlen: 24
                          154.208.72.0/22 maxlen: 24
                          154.222.72.0/23 maxlen: 24
                          154.223.232.0/21 maxlen: 24
                          154.223.248.0/21 maxlen: 24
                          154.223.248.0/22 maxlen: 24
                          154.223.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112168 (0x1b628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 15:22:24 2026 GMT
            Not After : Mar  1 15:22:24 2026 GMT
        Subject: CN=6974e3b5-1a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:cd:f9:fd:5e:98:d5:ce:6e:1a:c3:d1:56:
                    d4:cb:5f:4f:9b:55:0e:e0:32:9e:d4:cb:48:d8:bd:
                    ac:95:69:2c:54:9c:02:8b:46:36:b6:e1:6d:f7:39:
                    55:6e:8a:81:f2:bd:16:f9:d9:6a:58:1e:58:99:4e:
                    62:18:ea:6e:96:de:26:52:4a:e2:22:c5:3d:c0:bf:
                    34:80:e4:d8:2a:58:91:3e:eb:6f:0c:96:d7:44:5e:
                    22:04:bf:c8:c1:26:84:e3:14:0e:f1:7e:ba:e5:78:
                    ba:46:12:61:da:d3:8a:07:a8:0a:20:15:fc:f8:41:
                    11:f9:3b:7b:e8:7d:bf:0c:e6:59:c5:4a:a6:fe:9b:
                    8c:37:78:92:60:2c:8f:d3:40:39:49:b6:54:ae:7d:
                    1e:eb:a3:df:35:7c:c0:53:89:1a:f2:b2:92:3f:0c:
                    62:63:27:b4:a4:df:f8:fb:ce:05:4e:6a:f8:d8:9b:
                    f6:3e:ec:f9:d2:09:81:bb:41:2a:7f:82:6f:0c:75:
                    35:66:32:13:1c:16:0b:b1:d0:77:ee:8e:48:89:8b:
                    98:c6:60:11:a6:90:7d:ed:6e:64:a7:d0:08:31:8f:
                    fc:8a:20:47:ac:06:65:25:7b:e7:a1:19:7f:e5:c1:
                    3b:5b:9e:66:f3:cd:e4:ab:64:39:03:00:6e:8f:b8:
                    19:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:62:19:BC:3D:39:CB:88:3A:01:1B:02:1B:74:2A:F1:8C:55:53:8B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E864FC8F93811F09AA8EFDDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.72.0/21
                  154.200.109.0/24
                  154.205.248.0/22
                  154.206.4.0/22
                  154.208.72.0/22
                  154.222.72.0/23
                  154.223.232.0/21
                  154.223.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:36:9f:82:d2:33:a5:c7:ff:98:29:8c:df:47:87:22:04:ca:
         84:d4:42:81:0e:41:64:84:4d:58:df:4b:f6:c0:ed:7e:bc:35:
         ea:00:16:66:2e:99:92:e9:96:8c:eb:20:84:05:ce:8d:28:0f:
         f6:09:f1:47:8b:17:e6:d7:a5:19:b4:7d:1d:62:a5:a0:aa:49:
         50:04:cb:98:4a:a6:78:55:c7:ec:68:88:f7:af:ef:d9:27:d1:
         ce:f9:b0:8f:db:44:dd:a8:f4:80:25:82:6f:b0:3f:31:77:45:
         36:0d:86:ac:0a:f2:62:20:a2:65:f9:54:e9:88:b3:7f:66:fe:
         e9:24:47:3f:ae:7c:62:f8:d7:0f:ce:5f:e3:7e:a5:72:45:b5:
         d5:d9:24:05:ca:db:89:b7:bc:9c:31:f7:36:76:92:23:d9:1a:
         b8:64:97:aa:8e:95:04:50:2a:a7:0c:5f:f5:f6:ac:fb:96:6a:
         52:85:99:9d:29:0c:57:9a:2f:fe:e8:58:13:c2:cb:fd:be:98:
         1e:4c:f5:cc:24:0c:c2:5d:61:b8:43:f9:59:1c:ef:4e:09:52:
         17:21:81:b9:67:57:1f:5f:65:61:cc:de:dd:7c:a7:d5:a3:0a:
         1f:2d:c7:f2:96:5b:34:54:31:ef:94:af:5c:22:a5:5c:29:6a:
         4c:0c:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:48 2026 by rpki-client