This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C860C996E58011F0A3B07FB9DAE4EC9C.roa
File:                     C860C996E58011F0A3B07FB9DAE4EC9C.roa (raw, json)
Hash identifier:          uTYRrb92Jd/pd7QiakjeK5tfzIBYfZ71ARQ7KmuQ1z8=
Subject key identifier:   91:30:52:3E:30:B0:61:0D:1B:2E:6D:D3:BD:FE:DB:69:1E:79:C4:1F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B1F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C860C996E58011F0A3B07FB9DAE4EC9C.roa
Signing time:             Tue 30 Dec 2025 13:09:33 +0000
ROA not before:           Tue 30 Dec 2025 13:09:28 +0000
ROA not after:            Mon 18 Jan 2027 13:09:28 +0000
asID:                     138965
IP address blocks:        154.222.48.0/24 maxlen: 24
                          154.222.49.0/24 maxlen: 24
                          154.222.50.0/24 maxlen: 24
                          154.222.51.0/24 maxlen: 24
                          154.222.52.0/24 maxlen: 24
                          154.222.53.0/24 maxlen: 24
                          154.223.8.0/24 maxlen: 24
                          154.223.9.0/24 maxlen: 24
                          154.223.10.0/24 maxlen: 24
                          154.223.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111092 (0x1b1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 30 13:09:28 2025 GMT
            Not After : Jan 18 13:09:28 2027 GMT
        Subject: CN=6953cf0d-520f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:82:37:69:61:1d:c3:96:71:f1:92:63:4c:
                    fb:6b:90:5a:c5:ed:a8:b2:2f:2a:3b:00:9c:0e:9d:
                    77:15:bb:26:e7:26:c0:34:42:c5:60:b5:f6:17:62:
                    09:58:72:ee:51:7a:dd:d9:31:f6:c6:2d:73:77:ca:
                    bf:c4:cc:e9:e8:f6:fa:be:25:15:d4:2b:ca:e1:dc:
                    96:f2:f3:89:5e:7e:1c:15:dc:61:72:c6:e5:11:57:
                    84:37:47:b5:44:35:e5:ce:28:20:8a:9a:5d:4e:ae:
                    fa:a9:60:ce:b8:bb:7f:2b:cf:81:96:c3:33:29:fe:
                    13:c5:68:ab:6c:b8:c8:83:63:01:41:4c:fb:95:2d:
                    ca:19:d6:c9:cd:c7:b6:c5:05:84:86:97:1d:3f:fc:
                    ba:6a:d9:f5:7d:d2:41:b9:ae:c7:4f:99:24:22:5b:
                    1a:bd:2d:7e:a6:a6:8d:ff:04:3e:74:0c:16:b4:9c:
                    dd:a3:4c:aa:b0:35:f4:bf:0d:48:21:c8:8c:bd:7b:
                    11:3a:ba:06:f4:34:23:50:9d:ca:f4:78:42:6c:80:
                    0e:eb:f8:4c:49:ec:84:aa:84:8f:5c:29:89:93:f8:
                    d8:0e:78:2b:99:af:8a:5d:2c:d8:ba:a6:18:a7:ca:
                    a9:13:fd:52:43:9f:a5:0c:6e:45:5d:8c:fc:7e:05:
                    4d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:30:52:3E:30:B0:61:0D:1B:2E:6D:D3:BD:FE:DB:69:1E:79:C4:1F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C860C996E58011F0A3B07FB9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.48.0-154.222.53.255
                  154.223.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:a7:ea:c5:66:25:ab:4c:1e:63:e6:17:3a:00:ef:86:57:21:
         12:d1:ea:06:35:af:8e:97:c1:b5:72:d8:83:6b:aa:b3:36:b4:
         38:7d:cc:84:6a:24:40:cb:37:b1:42:9d:b6:88:c4:25:84:27:
         87:67:7b:7c:d2:e7:e4:ba:51:35:29:0d:ad:ec:ae:7e:ef:ec:
         9c:4e:28:16:1f:1b:a8:20:5a:fc:ae:28:c1:de:ea:5e:ce:ca:
         82:6b:8e:6e:ff:01:9f:9c:c3:d9:5a:8b:25:c5:27:c2:9d:61:
         37:da:0f:6a:bd:94:99:70:e4:12:88:be:ad:d9:f0:38:82:c6:
         d9:85:13:2c:9b:28:52:e1:a6:0e:e6:14:e6:8f:09:fc:42:97:
         60:0f:0f:85:b1:25:f3:43:d9:54:d8:8a:75:e9:7f:f2:ba:52:
         97:36:ce:94:51:ba:bc:db:2d:ab:09:90:51:f5:92:6f:fc:05:
         f6:8d:53:18:c8:dd:15:97:f3:0f:e6:31:a0:e0:21:11:78:32:
         fe:b1:3d:2b:1b:8c:3c:73:38:59:d5:96:7f:9d:02:ce:08:6f:
         55:11:2d:28:72:bc:59:bb:18:42:59:78:60:02:86:02:c2:c8:
         b1:33:76:b7:eb:83:8c:3a:18:35:72:6e:2d:66:b8:ca:d5:35:
         ca:31:f9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:32 2026 by rpki-client