This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF9D52EAF94E11F0A723FFE4DAE4EC9C.roa
File:                     EF9D52EAF94E11F0A723FFE4DAE4EC9C.roa (raw, json)
Hash identifier:          kBrQfXebGfbZbmqDjVPhjr5gJVW5HZ4X9Wc2TDRaC4g=
Subject key identifier:   5E:CA:CE:CA:91:08:59:01:79:B1:1D:53:6C:C0:47:DC:B4:2B:30:90
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B65C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF9D52EAF94E11F0A723FFE4DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 18:03:08 +0000
ROA not before:           Sat 24 Jan 2026 18:03:03 +0000
ROA not after:            Tue 03 Mar 2026 18:03:03 +0000
asID:                     62240
IP address blocks:        154.194.127.0/24 maxlen: 24
                          154.196.29.0/24 maxlen: 24
                          154.196.32.0/24 maxlen: 24
                          154.196.34.0/24 maxlen: 24
                          154.196.35.0/24 maxlen: 24
                          154.196.37.0/24 maxlen: 24
                          154.196.38.0/24 maxlen: 24
                          154.196.39.0/24 maxlen: 24
                          154.196.89.0/24 maxlen: 24
                          154.196.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112220 (0x1b65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 18:03:03 2026 GMT
            Not After : Mar  3 18:03:03 2026 GMT
        Subject: CN=6975095c-c09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:08:09:0a:3f:77:82:92:a0:48:9a:29:d6:
                    cc:3e:b8:8d:52:47:29:1e:49:de:9b:a4:e0:c5:7b:
                    5e:b8:38:0b:31:cc:cb:c3:86:4f:10:5e:03:4c:51:
                    be:e8:64:50:f6:43:12:6c:82:67:ec:3a:b7:93:5b:
                    27:da:f3:5f:f2:84:1a:b6:cd:96:7a:58:85:7b:6f:
                    19:2d:96:a8:fe:03:3f:34:79:2f:f2:db:9a:f5:4c:
                    cd:0c:91:7b:2b:b5:e6:8a:d0:66:56:b6:98:ba:d9:
                    16:d7:da:c9:80:e7:b5:ab:cc:71:71:73:c6:6c:f5:
                    61:bb:7b:f4:ed:02:c6:71:af:c7:49:35:b9:ee:6b:
                    ce:79:b8:bf:a9:73:6b:23:1e:05:21:64:66:ab:cf:
                    25:83:9f:d3:b9:ea:1a:94:fe:8b:0a:9c:46:d4:7f:
                    73:33:23:c6:2a:e1:c3:82:d6:ee:ea:d2:dc:65:a0:
                    8a:5b:d4:5e:5c:f5:3a:f7:4a:b2:6b:d6:ba:9f:f3:
                    3f:4c:8b:ef:e1:c3:7a:a0:55:86:c5:4b:23:0d:59:
                    9b:e8:33:21:44:22:f3:6c:87:a1:62:16:4e:c1:8c:
                    92:70:b4:f8:94:22:58:8a:34:da:81:b6:3c:40:47:
                    73:53:f1:b6:83:2f:0b:16:d9:f8:5d:05:65:17:33:
                    80:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CA:CE:CA:91:08:59:01:79:B1:1D:53:6C:C0:47:DC:B4:2B:30:90
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF9D52EAF94E11F0A723FFE4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.127.0/24
                  154.196.29.0/24
                  154.196.32.0/24
                  154.196.34.0/23
                  154.196.37.0-154.196.39.255
                  154.196.89.0-154.196.90.255

    Signature Algorithm: sha256WithRSAEncryption
         c5:64:c3:46:21:61:42:52:72:86:e5:96:26:37:69:aa:df:8a:
         08:d1:08:b3:18:88:51:58:e8:e7:1b:4b:ab:4d:be:29:c8:70:
         17:89:56:41:6a:89:be:ce:88:21:ab:72:0d:5b:08:59:88:97:
         6a:08:82:59:22:ab:b2:d3:82:c9:f0:c3:f9:04:de:81:26:b9:
         db:15:36:4e:d5:52:9a:01:bf:64:33:2e:03:0f:82:85:7e:66:
         ab:54:81:d5:94:1f:53:af:22:9d:9c:fc:d9:34:d1:6d:a0:56:
         5d:ae:0d:5a:f2:b5:6e:7b:0a:25:cb:98:5c:25:91:16:90:23:
         57:8f:85:f4:bc:6d:f8:5e:bf:97:85:1a:3b:af:fe:03:82:eb:
         23:de:68:04:8c:02:f5:36:ad:33:47:6e:52:38:5a:3c:e8:07:
         f6:35:27:a8:12:92:24:96:e5:bc:57:33:08:89:9f:6d:c5:c2:
         f3:93:a2:04:ac:7d:49:f6:7e:33:19:55:52:00:47:09:1c:a1:
         b4:f1:5c:04:37:e5:e8:2a:a6:1e:ec:5c:66:31:ff:5d:ca:5d:
         03:c8:85:fa:5a:96:09:8c:59:62:7c:27:d8:f1:4f:19:7c:4d:
         8e:bd:5c:9a:f9:fc:eb:7f:6e:f5:7c:df:42:d4:b3:c6:ac:5e:
         59:fe:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:46 2026 by rpki-client