This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD92C86AEBE011F0B234B9EFDAE4EC9C.roa
File:                     AD92C86AEBE011F0B234B9EFDAE4EC9C.roa (raw, json)
Hash identifier:          JPx0Z8Ml3Pq1o1E7eUDFxT46Rraie4rcmFqUyK1SyTs=
Subject key identifier:   36:DA:E7:79:C1:02:7B:12:1F:14:6E:96:98:21:AF:45:5E:A3:41:CD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B3A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD92C86AEBE011F0B234B9EFDAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 15:51:07 +0000
ROA not before:           Wed 07 Jan 2026 15:51:02 +0000
ROA not after:            Tue 27 Jan 2026 15:51:02 +0000
asID:                     63139
IP address blocks:        154.81.1.0/24 maxlen: 24
                          154.93.67.0/24 maxlen: 24
                          154.93.68.0/24 maxlen: 24
                          154.93.69.0/24 maxlen: 24
                          154.93.70.0/24 maxlen: 24
                          154.93.71.0/24 maxlen: 24
                          154.93.72.0/24 maxlen: 24
                          154.93.73.0/24 maxlen: 24
                          154.93.74.0/24 maxlen: 24
                          154.93.75.0/24 maxlen: 24
                          154.93.76.0/24 maxlen: 24
                          154.93.77.0/24 maxlen: 24
                          154.93.78.0/24 maxlen: 24
                          154.93.79.0/24 maxlen: 24
                          154.93.80.0/24 maxlen: 24
                          154.93.81.0/24 maxlen: 24
                          154.93.82.0/24 maxlen: 24
                          154.93.83.0/24 maxlen: 24
                          154.93.95.0/24 maxlen: 24
                          154.93.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111523 (0x1b3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  7 15:51:02 2026 GMT
            Not After : Jan 27 15:51:02 2026 GMT
        Subject: CN=695e80eb-6521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:7b:95:86:8c:e1:b2:0c:58:7d:1d:0d:c4:
                    59:5d:31:f6:b1:3c:43:35:11:7b:3e:7c:9a:b8:a4:
                    2b:75:94:bf:1b:67:53:63:da:18:63:ea:93:58:1e:
                    13:c3:5e:df:c5:c1:6c:19:ed:2f:15:c0:55:f1:59:
                    1c:49:e5:c9:af:5a:be:13:f0:e2:7b:e4:21:c8:8f:
                    79:f1:ce:b0:0c:78:5f:d6:f1:d9:27:c5:d1:ca:30:
                    9d:9b:ea:81:b9:47:d6:79:1c:53:b6:79:27:41:84:
                    77:3b:9b:92:8c:2f:07:4b:7f:20:d7:62:6a:f5:f3:
                    a2:ed:8e:5f:a5:cf:d3:85:ca:7b:82:25:cc:89:3c:
                    71:61:33:18:3a:48:0c:da:b9:c7:6e:c5:a9:14:8b:
                    35:5b:72:45:65:50:a6:7a:77:d0:d6:54:e9:3e:8d:
                    a4:a7:40:21:8c:89:32:a0:b5:30:f5:1a:ba:58:23:
                    d1:af:4f:99:c9:2d:17:4a:e3:8a:5f:e3:c9:d6:83:
                    95:fb:ec:2b:be:72:e0:7f:86:08:4a:b4:24:7e:78:
                    9e:3c:54:4b:6e:73:7e:6d:3e:3b:93:73:49:48:67:
                    70:9d:b8:45:64:9d:37:78:24:c0:b8:04:48:2f:49:
                    68:26:05:24:48:ec:2c:83:8f:fc:af:96:f0:3c:bb:
                    cc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DA:E7:79:C1:02:7B:12:1F:14:6E:96:98:21:AF:45:5E:A3:41:CD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD92C86AEBE011F0B234B9EFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.1.0/24
                  154.93.67.0-154.93.83.255
                  154.93.95.0/24
                  154.93.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:33:ea:67:be:2f:9e:bd:e8:8a:db:ec:a5:07:d4:17:0c:25:
         f5:9a:fe:db:0e:c2:ea:59:a6:f0:14:9f:60:0a:07:b0:fa:80:
         dd:0c:50:9f:3a:b2:7d:95:47:74:00:32:30:15:f3:dd:32:e6:
         75:8a:e7:cd:8a:7f:66:2e:4e:d4:c0:eb:61:b3:e1:76:91:42:
         47:81:81:95:bd:fe:d7:fc:b0:ce:d5:23:6a:b2:95:8f:44:a5:
         ce:c0:f5:1c:19:7d:e4:ac:41:74:01:fd:d1:96:54:f0:14:3e:
         3f:6a:3a:d4:75:c7:12:ec:13:a4:53:b8:cc:d0:17:07:71:36:
         3d:a6:99:ec:f7:8d:d3:0e:6f:4e:b0:34:74:f3:a8:40:9a:40:
         7e:02:38:51:c3:63:c4:7c:f1:9c:0d:0d:0d:c2:d0:c5:e1:89:
         d2:10:0f:bf:b8:92:76:51:06:42:bf:a1:2d:15:1c:e3:6f:1a:
         42:73:43:9f:e4:8c:54:96:8f:93:ef:d5:fc:3f:a3:e4:60:c3:
         e5:7f:16:12:03:34:4e:4c:72:89:51:36:20:ad:42:9a:50:7e:
         e5:11:48:e3:b4:50:7b:fb:c9:82:30:36:2e:72:d2:c1:8d:4e:
         e4:fd:29:51:02:fa:08:f5:bf:39:4f:de:f9:b9:22:1f:d7:7a:
         8a:1e:a2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:51 2026 by rpki-client