This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1A697BCF9A211F0939DF2F4DAE4EC9C.roa
File:                     C1A697BCF9A211F0939DF2F4DAE4EC9C.roa (raw, json)
Hash identifier:          QUxV/pu5q5P2c4Tin0AnRMxDXWAJjqLdX0Gnt0toQJ0=
Subject key identifier:   7A:56:49:48:26:B6:32:A9:C6:E6:C6:2B:DA:5D:0F:6C:97:DB:A7:3B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B6BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1A697BCF9A211F0939DF2F4DAE4EC9C.roa
Signing time:             Sun 25 Jan 2026 04:03:08 +0000
ROA not before:           Sun 25 Jan 2026 04:03:03 +0000
ROA not after:            Wed 04 Mar 2026 04:03:03 +0000
asID:                     44559
IP address blocks:        154.203.224.0/24 maxlen: 24
                          154.203.230.0/24 maxlen: 24
                          154.203.231.0/24 maxlen: 24
                          154.205.234.0/24 maxlen: 24
                          154.205.235.0/24 maxlen: 24
                          154.205.236.0/24 maxlen: 24
                          154.205.237.0/24 maxlen: 24
                          154.205.238.0/24 maxlen: 24
                          154.205.239.0/24 maxlen: 24
                          154.205.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112317 (0x1b6bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 25 04:03:03 2026 GMT
            Not After : Mar  4 04:03:03 2026 GMT
        Subject: CN=697595fc-fe20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:99:eb:f4:17:73:1a:1b:b2:1d:b9:00:15:
                    81:47:a1:8f:30:79:aa:b6:c8:46:a2:d7:d2:06:52:
                    2b:e4:da:12:7f:d7:bf:14:22:30:9f:f8:9d:3e:2a:
                    77:87:a5:1f:33:e5:31:29:4f:72:13:c7:56:a9:c5:
                    c9:88:6d:ac:1c:e1:21:1e:47:86:c0:61:d2:37:c5:
                    2b:f7:d1:ab:0f:b1:31:28:f7:cd:a4:f8:2f:75:b3:
                    03:57:51:50:b0:88:5b:eb:34:78:73:55:e8:bc:1c:
                    61:7b:98:ab:e7:d5:08:84:6d:a1:87:09:54:c4:39:
                    10:30:54:df:3f:e3:1c:51:4d:5a:aa:66:17:a7:b5:
                    d4:51:cf:0a:26:bd:a8:44:2a:88:08:c1:f8:90:8d:
                    32:40:06:8f:5c:0f:de:56:a0:cc:a1:72:62:9f:11:
                    7a:e2:79:8c:21:dd:8b:33:5a:a6:66:ba:78:a9:47:
                    f5:f7:df:07:50:ab:f5:de:97:fd:ee:33:3e:f8:35:
                    0a:9f:0d:ab:82:a8:d0:8a:a0:c2:9c:4a:39:88:51:
                    71:0f:ed:66:48:2f:77:31:65:52:5b:c9:4c:d1:0a:
                    28:86:0c:49:56:a6:65:61:62:40:71:73:64:97:be:
                    5f:2d:61:50:af:6b:f7:e4:7b:1b:e7:ca:fc:c0:57:
                    fd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:56:49:48:26:B6:32:A9:C6:E6:C6:2B:DA:5D:0F:6C:97:DB:A7:3B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1A697BCF9A211F0939DF2F4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.224.0/24
                  154.203.230.0/23
                  154.205.234.0-154.205.240.255

    Signature Algorithm: sha256WithRSAEncryption
         ae:53:5d:d0:5f:01:2a:ce:3f:e7:d5:49:a6:4c:19:44:e6:62:
         70:0d:76:fe:02:df:e9:c2:15:ff:46:01:cf:24:0e:07:c5:a7:
         2e:2b:df:f4:b3:ce:1d:a9:d3:63:a6:5c:e6:3f:58:03:d5:a1:
         27:3d:bb:3f:67:58:86:72:9c:dc:7f:1f:56:89:8c:e1:b6:ec:
         c2:e5:36:13:09:30:04:67:e6:9b:d4:4a:f8:1d:69:37:b5:26:
         84:ec:f1:a4:84:f0:6e:de:d6:11:29:04:97:90:5b:2d:81:da:
         f2:d4:dd:5e:06:4c:98:f5:81:4d:32:29:18:21:c5:e8:49:71:
         e8:f1:00:64:f9:a8:53:d0:af:6c:c0:aa:31:68:ad:10:0a:fd:
         0e:70:37:31:14:e5:85:75:be:c5:9a:4d:cd:80:34:a1:8a:40:
         70:41:e1:7f:f3:3d:8b:80:c2:7d:c5:2b:f1:c7:49:04:c7:88:
         fd:9e:51:4b:b5:6f:44:b2:27:f0:15:59:ed:da:23:f6:ea:09:
         97:1c:28:41:ff:36:7f:b3:5e:ec:ce:f7:f1:cb:71:64:dc:82:
         57:75:86:aa:c2:04:e5:fc:09:e1:13:4d:c2:e6:17:86:10:a7:
         bd:70:94:8c:55:80:8b:69:b5:33:59:77:d3:5d:a9:6b:bf:63:
         bf:f4:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:42 2026 by rpki-client