This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C372D87EF94011F0892B6892DAE4EC9C.roa
File:                     C372D87EF94011F0892B6892DAE4EC9C.roa (raw, json)
Hash identifier:          /mXNWNiVrbp3WeS+9tbQLJiYtz8jaPkI22VQe/nQkwY=
Subject key identifier:   BB:D5:14:68:27:CC:A5:99:1D:A7:0D:58:84:6A:75:E8:FB:9E:E0:1A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B640
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C372D87EF94011F0892B6892DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 16:21:40 +0000
ROA not before:           Sat 24 Jan 2026 16:21:36 +0000
ROA not after:            Sun 01 Mar 2026 16:21:36 +0000
asID:                     32043
IP address blocks:        154.194.5.0/24 maxlen: 24
                          154.197.104.0/22 maxlen: 24
                          154.200.22.0/24 maxlen: 24
                          154.200.38.0/23 maxlen: 24
                          154.200.40.0/24 maxlen: 24
                          154.200.47.0/24 maxlen: 24
                          154.200.110.0/24 maxlen: 24
                          154.203.8.0/22 maxlen: 24
                          154.203.12.0/22 maxlen: 24
                          154.203.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112192 (0x1b640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 16:21:36 2026 GMT
            Not After : Mar  1 16:21:36 2026 GMT
        Subject: CN=6974f194-2180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:8c:b8:38:3f:4d:aa:13:44:ba:49:be:27:
                    9e:57:76:5e:d4:ae:43:53:9b:e5:b8:d3:03:93:d9:
                    f8:33:50:b8:51:7f:44:5e:d2:aa:1d:9b:1e:e7:09:
                    64:7b:80:61:dc:d7:5d:db:91:a5:82:8a:da:47:4f:
                    72:d8:8d:3e:c3:5d:ee:b0:84:be:d8:6b:12:9c:19:
                    33:0b:bc:46:ca:10:d2:44:42:64:34:e5:ce:87:52:
                    21:1d:aa:6a:8e:5a:77:a3:b7:58:6f:80:94:61:ca:
                    40:d3:7e:78:5e:9c:d8:50:7a:a7:3f:98:e2:6e:75:
                    36:b7:bd:ee:0c:6e:e6:16:13:37:11:b3:17:b4:d0:
                    70:dc:8d:8d:22:bd:8f:f3:07:8b:5a:41:c1:77:ca:
                    13:65:a9:7b:4a:4d:16:93:cf:cd:ce:25:45:79:cd:
                    8e:ea:f0:48:47:f9:c7:3a:ba:81:89:30:91:0a:f1:
                    91:ea:67:88:58:ce:98:9b:3e:00:00:30:a4:fb:cd:
                    e0:61:40:46:de:e9:b6:58:35:f3:87:25:a3:66:eb:
                    45:35:90:27:fd:7a:ad:bd:79:e9:89:b9:58:bb:f8:
                    4e:80:f6:89:72:b5:2e:b2:5c:93:99:bb:83:65:56:
                    5a:38:90:c9:c7:89:46:6d:40:67:e8:30:36:0e:a7:
                    ac:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D5:14:68:27:CC:A5:99:1D:A7:0D:58:84:6A:75:E8:FB:9E:E0:1A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C372D87EF94011F0892B6892DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.5.0/24
                  154.197.104.0/22
                  154.200.22.0/24
                  154.200.38.0-154.200.40.255
                  154.200.47.0/24
                  154.200.110.0/24
                  154.203.8.0/21
                  154.203.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:d8:0a:87:a8:fe:92:49:47:7e:8c:94:c6:e4:36:28:c6:2a:
         4e:5b:20:ac:cd:09:b4:80:81:3b:a8:bc:10:20:82:47:ee:62:
         1a:96:43:9e:c2:11:e1:b4:5f:cf:06:b4:8e:cd:55:22:ff:52:
         3a:e5:ce:01:73:64:aa:fd:cb:c0:a7:9e:b2:72:fe:be:4c:b3:
         7a:12:73:b8:6e:30:67:a4:8e:a2:72:d5:fc:b9:60:e8:04:18:
         26:c9:76:c9:9c:be:68:c7:b9:6c:2e:7d:de:01:14:64:7f:d8:
         2b:27:86:3e:fd:2c:ba:6a:9b:fa:7b:82:d8:43:e6:67:b6:5a:
         47:85:3b:03:d9:8c:87:87:5d:66:79:0d:81:f4:55:b5:10:ee:
         1c:7e:4c:32:ac:36:05:89:78:40:fb:40:86:c8:8e:d8:e6:d1:
         5c:28:93:49:b0:7e:ea:e5:69:af:5d:e4:8d:61:28:42:bc:f8:
         6a:eb:20:0d:25:c3:1b:52:2a:f4:d2:14:21:57:3a:e7:48:a8:
         7a:81:5a:6b:08:c3:45:a6:14:e1:58:e2:c6:36:f2:2a:db:6b:
         8d:39:b2:66:29:a2:6a:bd:51:7d:ce:28:ce:0b:46:be:5c:18:
         4e:22:67:dc:25:89:12:2c:75:5d:65:fa:d5:16:1c:8f:8a:79:
         ea:92:2e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:04 2026 by rpki-client