This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF475260F96211F0907A68DFDAE4EC9C.roa
File:                     DF475260F96211F0907A68DFDAE4EC9C.roa (raw, json)
Hash identifier:          ZtJd2xmM7/YP6sldKTQ089iFGHerFlRoQ3KfCMiNClw=
Subject key identifier:   7A:BA:87:30:35:8B:78:65:85:3F:85:6F:6B:32:E1:5B:C7:81:5C:C7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B69A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF475260F96211F0907A68DFDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 20:25:52 +0000
ROA not before:           Sat 24 Jan 2026 20:25:45 +0000
ROA not after:            Tue 03 Mar 2026 20:25:45 +0000
asID:                     62240
IP address blocks:        154.195.141.0/24 maxlen: 24
                          154.195.142.0/24 maxlen: 24
                          154.196.68.0/24 maxlen: 24
                          154.196.70.0/24 maxlen: 24
                          154.196.76.0/24 maxlen: 24
                          154.196.77.0/24 maxlen: 24
                          154.196.78.0/24 maxlen: 24
                          154.196.79.0/24 maxlen: 24
                          154.196.80.0/24 maxlen: 24
                          154.196.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112282 (0x1b69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 20:25:45 2026 GMT
            Not After : Mar  3 20:25:45 2026 GMT
        Subject: CN=69752ad0-03b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:22:ff:d4:c2:41:0c:48:e5:33:9d:b3:be:
                    3f:03:4c:11:cb:56:c8:e3:ba:6d:9f:3f:42:34:f1:
                    fd:9c:9f:0b:56:2d:40:cd:6a:5b:53:f3:1c:93:37:
                    f8:12:40:c7:10:5e:14:4b:0a:65:fd:37:5e:3a:40:
                    1a:62:be:db:eb:68:70:ff:3e:44:98:50:fb:26:b7:
                    4e:33:99:d2:cb:8f:d6:d1:0d:c5:37:5b:29:8d:56:
                    91:1e:67:ec:6d:fe:5b:39:62:14:48:d3:70:82:35:
                    a3:30:7b:f7:32:44:b1:5a:64:1a:ee:30:84:f9:cc:
                    f1:55:e1:97:0e:51:50:79:b4:9a:1e:19:6d:ad:9e:
                    14:80:3d:5d:00:db:6f:98:f9:68:d8:be:f5:35:97:
                    c7:18:87:18:9d:08:6e:e0:34:a2:a5:b9:9e:63:4e:
                    ac:2b:7e:9b:e7:16:21:68:97:f8:b9:4d:8e:05:66:
                    c9:e2:40:c5:2d:ea:50:c7:8f:43:d8:43:57:21:84:
                    42:9b:eb:da:0e:e8:4d:7d:dc:e8:78:0d:53:75:87:
                    dc:0d:29:f1:47:f1:d1:81:b0:53:16:0f:03:35:21:
                    46:a4:7f:5f:c7:ab:ea:aa:01:45:eb:11:e3:7c:e3:
                    e3:4a:dd:5b:6d:d2:4b:98:c5:66:03:a2:66:b2:31:
                    56:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BA:87:30:35:8B:78:65:85:3F:85:6F:6B:32:E1:5B:C7:81:5C:C7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF475260F96211F0907A68DFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.141.0-154.195.142.255
                  154.196.68.0/24
                  154.196.70.0/24
                  154.196.76.0-154.196.80.255
                  154.196.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:c7:e9:ba:9f:d9:4f:7c:e5:aa:67:7b:c4:ad:ed:b7:65:fa:
         d5:0e:09:1c:14:7d:fb:db:1b:a9:50:9e:0b:3a:9b:2e:4b:95:
         ef:d1:8d:9d:60:e3:02:ef:9d:87:f1:25:27:19:15:60:c9:63:
         9b:a2:cb:64:c5:d8:10:5b:ba:23:3e:31:2a:70:6f:32:85:b8:
         08:c1:96:8a:e7:e1:96:33:cc:71:d6:32:d8:aa:6b:c8:dc:25:
         62:1d:ba:fd:da:96:74:a5:48:c1:9b:27:3f:b9:0c:37:32:8a:
         f2:db:57:40:91:17:e9:63:2f:48:b4:1d:a8:47:e1:8e:e4:e3:
         4a:47:01:8a:c8:3c:ad:a8:a4:8e:b1:7d:1c:e1:ef:ca:f2:ba:
         ef:1a:0f:ae:2b:d9:26:b9:6d:cd:23:37:9d:b9:a7:60:a7:1d:
         23:b2:c1:d3:70:26:68:8d:03:6d:e1:06:38:eb:7c:a0:ee:bb:
         60:fd:1b:11:33:73:42:72:6e:82:92:84:da:bc:5f:96:11:dd:
         28:c3:d1:10:fb:40:24:cb:bd:d2:63:1c:64:ed:31:81:6a:bb:
         c3:f8:9c:7a:cb:b3:72:e7:4e:a6:2c:74:f6:8c:de:c8:3d:61:
         a5:c1:98:ea:9d:97:c3:db:38:95:00:28:71:0c:a8:1a:62:7a:
         3b:da:93:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:09:38 2026 by rpki-client