This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29C7676EE05711F0B002B5E9DAE4EC9C.roa
File:                     29C7676EE05711F0B002B5E9DAE4EC9C.roa (raw, json)
Hash identifier:          6WGLdKwr1DwV/U+bguMqFKRRZxiarxH8yewBieRbeLo=
Subject key identifier:   40:C9:A4:B2:70:84:71:C8:53:86:81:23:DF:7E:33:84:DD:49:B5:E4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B08D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29C7676EE05711F0B002B5E9DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 23:29:04 +0000
ROA not before:           Tue 23 Dec 2025 23:28:56 +0000
ROA not after:            Fri 30 Jan 2026 23:28:56 +0000
asID:                     9304
IP address blocks:        154.194.195.0/24 maxlen: 24
                          154.196.134.0/24 maxlen: 24
                          154.200.37.0/24 maxlen: 24
                          154.200.46.0/24 maxlen: 24
                          154.200.48.0/24 maxlen: 24
                          154.200.53.0/24 maxlen: 24
                          154.200.54.0/24 maxlen: 24
                          154.200.60.0/24 maxlen: 24
                          154.200.154.0/24 maxlen: 24
                          154.211.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110733 (0x1b08d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 23 23:28:56 2025 GMT
            Not After : Jan 30 23:28:56 2026 GMT
        Subject: CN=694b25c0-69d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:03:e7:d6:30:77:ff:93:2f:f4:e5:2a:10:
                    62:1f:8a:f3:b1:73:1e:79:f1:2e:45:59:54:75:a8:
                    6f:9d:68:5e:1b:12:4f:0e:d7:cf:fc:5e:98:b8:eb:
                    3d:90:ae:87:74:5e:1a:aa:6f:32:8b:18:93:bd:73:
                    94:11:e0:4f:ee:56:e3:42:f9:b5:c1:98:0b:c0:4f:
                    50:87:5e:a6:76:8c:64:93:b0:02:40:25:9f:9f:41:
                    79:03:e7:61:90:aa:a7:e5:96:31:da:23:8a:23:89:
                    3a:63:82:bf:bf:60:29:bc:0d:56:6f:9c:85:65:fe:
                    64:49:eb:ec:8a:46:91:9c:e9:cc:f8:7b:50:59:23:
                    1e:40:4c:60:78:0f:49:a2:aa:9c:24:7e:68:ea:69:
                    a1:10:e3:2f:73:35:a1:db:62:e9:ee:98:23:86:0d:
                    9f:96:36:b9:ae:56:57:35:02:74:93:9f:af:7d:34:
                    d0:e8:76:10:35:ed:5b:2f:b9:0b:57:5f:40:e7:af:
                    2d:58:a2:b9:b4:3c:e9:33:42:13:81:b1:f5:60:92:
                    9e:89:d3:99:f0:60:a3:36:92:b2:83:39:fc:44:22:
                    3b:00:a3:9d:7d:49:8c:2b:d9:4d:4a:46:b2:d2:4b:
                    c2:fc:e4:3c:9a:6d:1d:4b:32:20:1b:88:20:a0:39:
                    3c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C9:A4:B2:70:84:71:C8:53:86:81:23:DF:7E:33:84:DD:49:B5:E4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29C7676EE05711F0B002B5E9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.195.0/24
                  154.196.134.0/24
                  154.200.37.0/24
                  154.200.46.0/24
                  154.200.48.0/24
                  154.200.53.0-154.200.54.255
                  154.200.60.0/24
                  154.200.154.0/24
                  154.211.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:ae:bf:59:6b:15:03:ad:a7:a7:14:14:a8:39:19:5e:ac:9d:
         9f:fa:8f:27:9a:d1:a0:1d:c0:62:74:54:61:2f:46:74:75:c9:
         f3:dd:8c:c3:17:8a:58:af:04:a2:4b:c2:9a:fc:c3:30:06:b2:
         f3:fb:f8:85:68:06:d2:f1:7c:ea:48:e3:13:24:6c:36:4d:33:
         7a:e5:92:0a:2b:b6:56:8a:9e:f3:ec:6b:e9:9f:35:3a:81:7c:
         6b:b4:61:ef:82:6b:0c:ca:2d:ff:81:89:5d:56:bc:c2:0a:8b:
         f0:45:a8:d7:6b:ab:23:a0:08:08:bb:3c:3c:0a:af:d8:b8:3e:
         7b:09:c2:a5:8f:ea:f0:03:1f:5c:64:82:92:a7:1b:f3:d6:06:
         00:47:54:f1:7e:82:c8:59:49:02:37:08:1b:88:5a:3a:9b:0f:
         4f:9d:47:03:11:d1:53:b8:16:e2:a6:ef:93:0d:f3:08:51:f9:
         7d:e3:c3:3a:d7:76:76:93:36:e8:df:b4:4f:ea:09:39:17:b0:
         cf:e3:39:af:c0:ed:0a:26:6f:08:18:cf:d4:9e:e9:c8:82:13:
         a8:6d:a3:ae:7a:91:3c:1e:d2:92:bf:8d:cb:25:85:18:2a:1e:
         51:75:e8:39:cb:a3:8e:26:7b:63:c9:ae:d5:28:45:b0:db:ea:
         fa:42:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:55:00 2026 by rpki-client