This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B83F8236F5E911F089337F8CDAE4EC9C.roa
File:                     B83F8236F5E911F089337F8CDAE4EC9C.roa (raw, json)
Hash identifier:          GuvCdlAdGigVt3lSjrEAP9zSQkfg+JvIoD1/xucNphE=
Subject key identifier:   57:2E:DC:71:CF:45:C2:E1:B8:90:32:57:4C:A8:8D:AF:47:A9:42:5B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B83F8236F5E911F089337F8CDAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 10:21:02 +0000
ROA not before:           Tue 20 Jan 2026 10:20:57 +0000
ROA not after:            Tue 24 Feb 2026 10:20:57 +0000
asID:                     138915
IP address blocks:        154.203.135.0/24 maxlen: 24
                          154.203.137.0/24 maxlen: 24
                          154.203.138.0/24 maxlen: 24
                          154.203.139.0/24 maxlen: 24
                          154.203.140.0/24 maxlen: 24
                          154.203.141.0/24 maxlen: 24
                          154.203.146.0/24 maxlen: 24
                          154.203.147.0/24 maxlen: 24
                          154.203.148.0/24 maxlen: 24
                          154.203.149.0/24 maxlen: 24
                          154.203.150.0/24 maxlen: 24
                          154.203.151.0/24 maxlen: 24
                          154.203.152.0/24 maxlen: 24
                          154.203.153.0/24 maxlen: 24
                          154.203.154.0/23 maxlen: 24
                          154.203.156.0/24 maxlen: 24
                          154.203.157.0/24 maxlen: 24
                          154.203.158.0/24 maxlen: 24
                          154.203.159.0/24 maxlen: 24
                          154.203.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112068 (0x1b5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 10:20:57 2026 GMT
            Not After : Feb 24 10:20:57 2026 GMT
        Subject: CN=696f570e-eac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:77:1e:3f:2c:53:48:c7:fa:4b:13:69:63:5a:
                    64:81:f4:03:45:ef:89:8f:82:5c:a9:cf:d7:ff:4c:
                    cf:30:1d:ce:2a:9b:2a:ba:47:f7:a2:39:4f:8b:2c:
                    aa:a2:b8:38:3b:90:8a:01:c9:6d:e3:f9:dc:35:09:
                    b3:52:cf:61:d3:94:9d:48:ae:fa:2a:51:df:c6:bc:
                    00:3f:16:76:51:19:f4:ec:9a:4b:6c:37:ac:65:d4:
                    59:07:99:9f:1c:82:4a:ad:64:21:cb:08:07:cb:ac:
                    49:28:bb:a2:f9:73:aa:e3:4a:63:c1:cd:42:f2:be:
                    96:1b:c9:b2:b3:ed:b1:11:f5:74:31:9f:ac:09:08:
                    08:2d:05:53:e9:e9:d6:16:43:52:d5:5b:a0:c1:d1:
                    f2:6c:a4:a9:ce:30:ec:41:45:25:bc:b9:70:af:47:
                    5f:ae:e5:cf:72:cf:00:f9:e0:67:2e:81:bc:aa:67:
                    94:44:6c:ec:79:03:e1:8a:62:68:d0:89:57:89:0b:
                    91:b7:4f:c2:38:9c:9d:e8:74:0b:f8:ba:85:83:76:
                    2d:09:4d:73:f5:02:9c:d7:1e:fd:08:47:c4:cd:59:
                    ba:37:c4:e7:e5:ca:1d:01:6a:a2:21:1f:1c:41:c4:
                    48:7e:60:3d:01:77:c8:ef:be:57:c2:41:87:b5:8a:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2E:DC:71:CF:45:C2:E1:B8:90:32:57:4C:A8:8D:AF:47:A9:42:5B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B83F8236F5E911F089337F8CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.135.0/24
                  154.203.137.0-154.203.141.255
                  154.203.146.0-154.203.159.255
                  154.203.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a7:e1:77:5e:bc:a8:62:50:c0:f1:d5:5d:68:b4:98:06:f5:
         ae:87:ec:78:24:c4:49:6d:31:89:1f:18:ee:93:2e:20:02:31:
         45:dd:8d:4c:40:06:05:7d:6f:1a:90:30:1b:1e:2e:8e:76:20:
         89:5f:83:c4:42:39:ff:56:08:93:1d:f4:a3:dd:85:5a:36:ab:
         ef:66:69:6d:58:5f:e8:44:c0:a2:16:9e:e5:bb:f1:82:2e:ce:
         95:99:87:14:df:c1:5f:d4:b3:61:03:48:3a:0e:d2:ed:19:1e:
         e1:ac:dd:86:09:12:91:55:68:fd:83:65:88:c6:f0:d3:76:6a:
         9b:55:58:a0:6b:f6:58:92:62:33:be:b8:d7:49:01:a8:09:1e:
         04:c5:06:fb:93:07:d2:21:91:9d:81:0f:ea:cd:65:7d:55:7d:
         63:ea:f0:20:87:7c:5d:89:de:8d:d3:ac:1b:22:50:2d:f5:6b:
         09:8d:ab:4a:5d:6c:d3:d7:e0:78:8c:76:5a:5d:69:5f:ae:b2:
         86:87:1e:cf:0d:b7:3d:be:23:ec:9b:f5:1f:22:b2:fe:17:09:
         7c:5b:c7:d3:7d:28:65:53:57:03:4b:93:f7:78:1e:60:88:6d:
         8a:a6:71:33:85:f3:43:69:61:68:a1:79:de:ee:63:ba:46:63:
         20:73:0e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:24:19 2026 by rpki-client