This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB91F77CF5E811F0A1344B84DAE4EC9C.roa
File:                     AB91F77CF5E811F0A1344B84DAE4EC9C.roa (raw, json)
Hash identifier:          Bl4A0bRsBCq0EJ3YwyAJkHfuVv04aPBzg5ivVA/UsxM=
Subject key identifier:   97:EE:5E:85:59:F3:33:9B:64:9C:20:6E:57:59:72:BE:37:95:97:72
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB91F77CF5E811F0A1344B84DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 10:13:31 +0000
ROA not before:           Tue 20 Jan 2026 10:13:26 +0000
ROA not after:            Tue 24 Feb 2026 10:13:26 +0000
asID:                     138915
IP address blocks:        154.203.142.0/24 maxlen: 24
                          154.203.143.0/24 maxlen: 24
                          154.203.144.0/23 maxlen: 24
                          154.203.163.0/24 maxlen: 24
                          154.203.164.0/24 maxlen: 24
                          154.203.165.0/24 maxlen: 24
                          154.203.166.0/24 maxlen: 24
                          154.203.178.0/24 maxlen: 24
                          154.203.181.0/24 maxlen: 24
                          154.203.191.0/24 maxlen: 24
                          154.205.128.0/24 maxlen: 24
                          154.205.129.0/24 maxlen: 24
                          154.205.130.0/24 maxlen: 24
                          154.205.131.0/24 maxlen: 24
                          154.205.132.0/24 maxlen: 24
                          154.205.133.0/24 maxlen: 24
                          154.205.134.0/24 maxlen: 24
                          154.205.135.0/24 maxlen: 24
                          154.205.136.0/23 maxlen: 24
                          154.205.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112064 (0x1b5c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 10:13:26 2026 GMT
            Not After : Feb 24 10:13:26 2026 GMT
        Subject: CN=696f554b-06b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:31:53:59:51:61:2e:55:56:30:78:1b:54:10:
                    dc:08:2a:e9:a7:ad:91:c0:66:3e:29:04:d3:d3:f9:
                    89:2a:25:3d:45:c1:b7:a3:a4:4e:02:92:96:70:9b:
                    7f:89:02:e8:dc:d5:6d:31:c0:3d:56:a7:70:b7:db:
                    e0:3b:d6:b0:0c:a1:a7:ef:9f:fa:1b:91:e4:e6:36:
                    8b:9f:62:80:00:c9:a2:30:01:e3:a6:d9:57:ab:c3:
                    5d:15:2b:76:c4:b4:e2:b5:83:42:fd:21:09:af:23:
                    c0:62:53:64:e3:dc:9d:6b:ae:9b:46:1f:5b:70:5e:
                    62:9a:99:84:7e:9a:94:bd:48:a5:71:e1:13:3a:55:
                    66:75:76:47:42:66:49:58:a3:16:10:4e:ee:28:0f:
                    e2:fc:cd:64:4f:1b:ed:6b:86:87:a4:11:bd:9e:e3:
                    a9:24:3e:03:d4:e2:da:09:5d:96:f6:d4:5a:36:86:
                    ed:5a:e9:75:df:56:3b:ca:85:57:3a:cc:8d:20:3b:
                    da:a0:20:18:7f:d8:3f:1a:26:bb:b6:74:aa:2c:e1:
                    92:00:61:82:91:e7:68:a0:6f:c3:82:ea:9a:17:d2:
                    8d:8f:1d:15:d9:e6:a3:4f:2e:a4:5b:92:9b:cb:66:
                    61:e2:b8:52:a8:5a:3c:72:b7:b6:cd:3f:73:e0:6e:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EE:5E:85:59:F3:33:9B:64:9C:20:6E:57:59:72:BE:37:95:97:72
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB91F77CF5E811F0A1344B84DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.142.0-154.203.145.255
                  154.203.163.0-154.203.166.255
                  154.203.178.0/24
                  154.203.181.0/24
                  154.203.191.0/24
                  154.205.128.0-154.205.138.255

    Signature Algorithm: sha256WithRSAEncryption
         9f:92:3c:5e:de:f1:5d:9b:91:8a:fc:ff:d7:a2:13:dc:24:5e:
         9d:0f:01:e6:96:98:ec:4a:8c:5d:76:6d:46:3e:27:29:33:93:
         e0:4a:75:8a:39:68:b3:6c:31:1a:d3:17:6e:11:ed:ec:22:ce:
         2f:58:4a:c0:b9:0b:51:24:f4:3c:5a:56:6a:ed:8d:76:c9:ec:
         ed:3e:eb:a6:10:80:5a:38:29:d8:d1:c0:a1:3f:e3:63:21:ff:
         37:32:88:5b:1b:61:a0:85:92:f5:23:d2:83:07:e8:00:32:82:
         6d:4d:40:6b:0f:c4:2f:38:c6:b5:34:c8:f3:3c:ec:36:08:68:
         6a:aa:fe:0a:8b:6b:01:62:6f:ec:9f:73:80:37:83:b3:a9:c2:
         f3:f2:fa:1b:de:e9:32:ab:55:11:15:5d:bd:cb:db:b7:fe:7d:
         89:35:4c:dc:a9:f7:43:ab:3c:8a:84:7f:20:e4:89:e6:ce:bb:
         9c:eb:27:de:51:95:1e:df:64:d0:c9:c3:c0:6c:e2:58:32:0c:
         dc:61:5c:fe:1b:44:31:8d:c4:63:9c:c2:49:0e:6d:1d:d6:23:
         c2:7c:95:66:19:46:88:e4:32:57:d3:a4:de:79:22:61:3e:e3:
         79:e8:bb:bd:5b:85:cc:60:3d:2d:39:0d:00:b6:35:10:2b:af:
         fc:6a:33:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:57:08 2026 by rpki-client