This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB4E5A72F5D811F0AC83A2A7DAE4EC9C.roa
File:                     FB4E5A72F5D811F0AC83A2A7DAE4EC9C.roa (raw, json)
Hash identifier:          7I2bycgakDj0Vv8hlWMFA1ShoqgEjto0KQqDpWsg7XQ=
Subject key identifier:   90:7F:EE:E0:85:28:6D:C5:6A:36:FE:67:0C:7D:F1:E5:5F:57:29:D7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B590
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB4E5A72F5D811F0AC83A2A7DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 08:21:13 +0000
ROA not before:           Tue 20 Jan 2026 08:21:08 +0000
ROA not after:            Tue 24 Feb 2026 08:21:08 +0000
asID:                     138915
IP address blocks:        154.93.84.0/23 maxlen: 24
                          154.93.86.0/24 maxlen: 24
                          154.93.92.0/24 maxlen: 24
                          154.93.93.0/24 maxlen: 24
                          154.93.100.0/23 maxlen: 24
                          154.93.104.0/23 maxlen: 24
                          154.93.124.0/24 maxlen: 24
                          154.93.125.0/24 maxlen: 24
                          154.93.126.0/24 maxlen: 24
                          154.93.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112016 (0x1b590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 08:21:08 2026 GMT
            Not After : Feb 24 08:21:08 2026 GMT
        Subject: CN=696f3af9-3f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:16:f7:d7:79:a1:e4:9a:0d:d3:31:fe:1d:
                    00:7f:57:49:5c:83:eb:32:2d:36:da:ad:c8:7e:97:
                    9d:da:7f:06:29:27:2e:95:ac:1e:0d:11:d1:da:fa:
                    a1:17:56:81:3d:2a:4f:03:e9:b6:e2:85:60:46:a4:
                    c5:57:31:d9:7d:d7:ff:ac:e9:b1:d5:0f:28:c6:37:
                    28:55:db:98:9d:d7:0f:f2:1b:76:49:9f:ea:91:78:
                    aa:15:13:43:79:e3:a0:75:7a:73:7d:11:54:86:70:
                    25:c3:1d:56:31:c2:c9:cc:df:e5:77:58:50:ae:2e:
                    24:df:21:6e:95:ca:74:5b:f3:d4:ab:81:55:84:b2:
                    57:66:74:c6:bb:1a:37:9d:56:02:50:01:df:fa:48:
                    2e:e0:90:af:8c:47:d3:c8:c5:a4:04:dd:b6:a1:80:
                    37:55:be:fe:78:ea:70:97:f7:eb:65:a3:24:89:52:
                    90:e3:45:c6:6a:a2:05:52:d9:28:93:64:47:09:d5:
                    f8:90:0c:ca:e3:60:28:a8:cf:c1:1a:50:20:06:50:
                    2f:b8:08:27:58:cf:a6:4d:59:ee:4d:9f:d6:07:19:
                    83:33:59:8f:90:3e:46:ce:68:4c:45:5b:bb:9c:9a:
                    49:bb:62:d8:22:a0:ed:c1:f6:3a:30:f1:89:d2:3b:
                    94:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7F:EE:E0:85:28:6D:C5:6A:36:FE:67:0C:7D:F1:E5:5F:57:29:D7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB4E5A72F5D811F0AC83A2A7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.84.0-154.93.86.255
                  154.93.92.0/23
                  154.93.100.0/23
                  154.93.104.0/23
                  154.93.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:c5:77:61:a8:79:50:04:18:a0:60:e9:58:75:15:35:7b:12:
         0d:4a:17:d3:d0:23:0d:59:38:4a:7a:89:38:cb:06:70:77:4d:
         8d:03:f2:a6:ca:d1:e3:7a:b9:ef:32:2d:2e:b7:a5:87:57:b4:
         e2:52:72:61:fa:9e:0d:cb:02:05:0f:ef:fa:0f:23:48:f6:cc:
         ce:5f:70:8f:59:3d:a5:47:0b:7f:69:73:f4:bb:9e:5b:12:0b:
         e7:46:54:7e:ac:97:5b:86:3d:2a:c6:c0:05:e8:e1:9a:f2:da:
         2c:ce:76:61:76:e6:bb:6b:62:71:7d:4d:0f:dd:c8:c2:a5:af:
         0a:fd:a2:13:c6:df:cf:20:81:d7:67:be:ad:4b:62:a5:13:3c:
         d1:1d:de:cb:f9:30:8b:2a:cb:28:2d:95:5a:7d:04:00:af:b2:
         b9:ca:83:00:83:99:d6:9c:e0:c4:db:7b:5f:d4:ad:d9:0b:79:
         b3:61:9f:50:5a:30:2f:9e:1a:ab:fd:a8:36:0b:9b:81:33:1c:
         41:a1:3b:22:da:63:4e:9c:5d:84:4f:67:7c:c5:ad:17:1d:ec:
         f2:95:4d:91:de:1f:da:74:c4:53:ca:22:6e:aa:89:2d:37:3a:
         2b:95:54:86:fa:b0:e8:cc:f0:9a:bd:29:8c:80:dd:19:65:fe:
         5f:ca:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:24:11 2026 by rpki-client