This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFB5E19EF2AE11F0B335AAB6DAE4EC9C.roa
File:                     EFB5E19EF2AE11F0B335AAB6DAE4EC9C.roa (raw, json)
Hash identifier:          qlop+4dbdYou9THa2ka38E1WQVsxiGvbLT4mTwGjSUs=
Subject key identifier:   89:B1:52:45:6C:5E:5D:FB:77:8A:0B:4C:EC:E2:B9:97:06:09:A4:9E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B4E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFB5E19EF2AE11F0B335AAB6DAE4EC9C.roa
Signing time:             Fri 16 Jan 2026 07:42:41 +0000
ROA not before:           Fri 16 Jan 2026 07:42:35 +0000
ROA not after:            Mon 16 Feb 2026 07:42:35 +0000
asID:                     22773
IP address blocks:        154.82.2.0/24 maxlen: 24
                          154.82.3.0/24 maxlen: 24
                          154.82.4.0/24 maxlen: 24
                          154.82.5.0/24 maxlen: 24
                          154.82.6.0/24 maxlen: 24
                          154.82.7.0/24 maxlen: 24
                          154.82.8.0/24 maxlen: 24
                          154.82.9.0/24 maxlen: 24
                          154.82.10.0/24 maxlen: 24
                          154.82.11.0/24 maxlen: 24
                          154.82.12.0/24 maxlen: 24
                          154.82.13.0/24 maxlen: 24
                          154.82.14.0/24 maxlen: 24
                          154.82.15.0/24 maxlen: 24
                          154.85.12.0/24 maxlen: 24
                          154.85.22.0/24 maxlen: 24
                          154.85.23.0/24 maxlen: 24
                          154.85.104.0/24 maxlen: 24
                          154.85.105.0/24 maxlen: 24
                          154.85.106.0/24 maxlen: 24
                          154.85.107.0/24 maxlen: 24
                          154.85.108.0/24 maxlen: 24
                          154.85.109.0/24 maxlen: 24
                          154.85.110.0/24 maxlen: 24
                          154.85.111.0/24 maxlen: 24
                          154.85.112.0/24 maxlen: 24
                          154.85.113.0/24 maxlen: 24
                          154.85.114.0/24 maxlen: 24
                          154.85.115.0/24 maxlen: 24
                          154.85.116.0/24 maxlen: 24
                          154.85.117.0/24 maxlen: 24
                          154.85.118.0/24 maxlen: 24
                          154.85.119.0/24 maxlen: 24
                          154.90.2.0/24 maxlen: 24
                          154.90.3.0/24 maxlen: 24
                          154.90.4.0/24 maxlen: 24
                          154.90.5.0/24 maxlen: 24
                          154.90.6.0/24 maxlen: 24
                          154.90.7.0/24 maxlen: 24
                          154.90.8.0/24 maxlen: 24
                          154.90.9.0/24 maxlen: 24
                          154.90.10.0/24 maxlen: 24
                          154.90.11.0/24 maxlen: 24
                          154.90.12.0/24 maxlen: 24
                          154.90.13.0/24 maxlen: 24
                          154.90.14.0/24 maxlen: 24
                          154.90.15.0/24 maxlen: 24
                          154.90.16.0/24 maxlen: 24
                          154.90.17.0/24 maxlen: 24
                          154.90.18.0/24 maxlen: 24
                          154.90.19.0/24 maxlen: 24
                          154.90.20.0/24 maxlen: 24
                          154.90.21.0/24 maxlen: 24
                          154.90.22.0/24 maxlen: 24
                          154.90.23.0/24 maxlen: 24
                          154.90.24.0/24 maxlen: 24
                          154.90.25.0/24 maxlen: 24
                          154.90.26.0/24 maxlen: 24
                          154.90.27.0/24 maxlen: 24
                          154.90.132.0/24 maxlen: 24
                          154.90.141.0/24 maxlen: 24
                          154.90.144.0/24 maxlen: 24
                          154.90.145.0/24 maxlen: 24
                          154.90.146.0/24 maxlen: 24
                          154.90.147.0/24 maxlen: 24
                          154.90.148.0/24 maxlen: 24
                          154.90.149.0/24 maxlen: 24
                          154.90.150.0/24 maxlen: 24
                          154.90.151.0/24 maxlen: 24
                          154.94.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111840 (0x1b4e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 16 07:42:35 2026 GMT
            Not After : Feb 16 07:42:35 2026 GMT
        Subject: CN=6969ebf1-fc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6d:2a:24:0c:f9:32:ff:26:9a:01:1c:f6:a7:
                    c0:20:82:09:b3:53:ca:1f:01:45:e7:97:38:68:86:
                    23:f3:f9:30:4b:4a:b5:e0:1f:92:bc:d9:fd:30:44:
                    e2:09:f3:37:80:21:dd:50:fb:f2:a0:9c:ea:57:54:
                    bd:ca:81:db:f7:08:a8:90:dd:04:af:6d:85:60:5e:
                    05:38:c3:0d:f4:c1:40:af:60:bc:14:8e:b5:90:1b:
                    25:86:dc:ed:2f:02:9d:f2:97:15:e4:d4:6a:7f:6d:
                    b1:08:25:7a:6f:24:d3:ef:2a:0b:39:8e:4b:26:a0:
                    32:78:a5:25:09:d8:39:36:60:5b:c8:58:b0:71:15:
                    37:37:74:31:75:7a:20:c7:15:d7:65:c7:37:5d:36:
                    94:5d:a2:0d:fc:78:fc:ee:38:b1:de:dc:e3:52:c0:
                    5b:97:90:82:3f:c2:b8:2a:0a:d0:69:42:1c:14:2d:
                    c7:8f:43:08:89:ad:8c:0a:4b:b2:6a:ee:e1:aa:e3:
                    37:bc:db:d7:49:b5:fa:cf:22:b6:40:64:16:52:71:
                    58:11:e3:d9:52:4e:2e:10:b6:34:80:ce:4e:08:8c:
                    e7:bb:fe:6f:3b:67:be:d2:d1:a9:2c:60:5d:17:65:
                    bc:1d:e9:af:7a:0d:53:6b:cf:d6:3a:ac:6c:df:aa:
                    ca:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B1:52:45:6C:5E:5D:FB:77:8A:0B:4C:EC:E2:B9:97:06:09:A4:9E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFB5E19EF2AE11F0B335AAB6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.2.0-154.82.15.255
                  154.85.12.0/24
                  154.85.22.0/23
                  154.85.104.0-154.85.119.255
                  154.90.2.0-154.90.27.255
                  154.90.132.0/24
                  154.90.141.0/24
                  154.90.144.0/21
                  154.94.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2f:9c:ea:01:00:27:2a:a0:c9:56:2d:2b:ba:6c:97:d6:27:7a:
         fc:a3:d1:8b:d8:ed:28:b0:2f:ce:5f:58:03:cf:cc:20:4d:ab:
         54:ea:43:36:70:b8:22:6a:c8:34:ba:f8:c3:25:60:59:19:ea:
         45:45:d5:13:76:00:2e:b3:19:92:66:69:2d:42:10:d9:21:a0:
         2c:23:7d:42:e1:93:6d:b9:6d:b3:bd:1d:f4:0b:90:58:c3:78:
         a0:e4:46:be:fa:6b:03:62:7e:1f:4c:ea:49:fc:0c:07:03:8d:
         4e:db:ff:b3:ee:24:89:e1:5a:7f:41:23:ff:1b:01:e1:fd:b2:
         52:84:66:45:78:78:9a:ab:f3:89:19:7f:40:05:b8:52:f2:22:
         54:13:80:f7:a7:2b:ab:2f:2e:27:e0:cb:22:9b:5e:79:45:54:
         f3:08:07:e5:a6:f3:91:a0:5e:1b:fb:83:20:4d:61:1e:df:f1:
         23:e8:81:cf:af:46:35:d6:cf:35:24:5f:e8:0c:ec:e3:f8:da:
         07:4d:ac:60:25:f6:e4:01:e8:4e:f1:46:44:3e:3f:fa:eb:a4:
         e9:6f:32:22:36:7c:95:10:25:99:0b:43:43:cd:b5:ab:84:3c:
         0d:da:da:e0:21:e2:86:14:44:aa:4c:e1:d5:d3:d6:8e:9b:65:
         35:1f:3a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:39 2026 by rpki-client