This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C145AE201CA11F19FC4DC93DAE4EC9C.roa
File:                     2C145AE201CA11F19FC4DC93DAE4EC9C.roa (raw, json)
Hash identifier:          bWFUS/Y0HTomeO7CQj1+Sa/DBlgd0UAi1TF3p4AjpH0=
Subject key identifier:   F4:50:8B:1C:AB:DA:DF:8D:38:B5:82:44:45:06:99:F0:3C:51:24:A5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B895
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C145AE201CA11F19FC4DC93DAE4EC9C.roa
Signing time:             Wed 04 Feb 2026 13:05:26 +0000
ROA not before:           Wed 04 Feb 2026 13:05:19 +0000
ROA not after:            Thu 12 Mar 2026 13:05:19 +0000
asID:                     63139
IP address blocks:        154.223.22.0/24 maxlen: 24
                          154.223.25.0/24 maxlen: 24
                          154.223.27.0/24 maxlen: 24
                          154.223.30.0/24 maxlen: 24
                          154.223.31.0/24 maxlen: 24
                          154.223.36.0/24 maxlen: 24
                          154.223.38.0/24 maxlen: 24
                          154.223.39.0/24 maxlen: 24
                          154.223.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Feb 2026 00:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112789 (0x1b895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb  4 13:05:19 2026 GMT
            Not After : Mar 12 13:05:19 2026 GMT
        Subject: CN=69834416-a5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:02:b8:99:82:a5:38:a1:dc:90:46:61:ca:84:
                    26:f2:25:f2:c8:41:04:1d:fb:33:f3:eb:aa:90:7f:
                    25:1b:fd:05:0b:5f:41:64:a8:cf:e9:5a:0e:d6:54:
                    75:a4:52:eb:dc:62:18:b6:6f:38:d0:76:f2:99:a1:
                    5c:47:87:db:37:aa:f0:dc:87:b1:1f:49:67:a6:e0:
                    3e:4f:0b:0e:c7:f0:a6:92:50:3c:47:54:f5:d9:ca:
                    f4:fa:26:f9:68:50:33:08:b5:e5:a1:5b:4f:a5:b1:
                    01:4c:7e:19:b1:f7:38:21:1c:10:91:40:5c:58:72:
                    97:dd:e5:aa:c3:ae:ac:f9:33:47:a3:27:88:c6:61:
                    9d:e6:a3:a3:0b:af:3d:c8:d5:ef:d5:a0:11:72:29:
                    39:52:d0:45:be:1e:e5:ac:52:31:54:6d:2c:13:9d:
                    6c:f2:81:b1:63:44:a9:c6:57:59:16:e8:d1:cf:1b:
                    15:71:09:ce:ee:00:7d:ff:14:c7:63:c3:3c:90:64:
                    1b:59:c1:df:be:41:9b:46:3a:60:ac:fc:a4:07:c7:
                    5a:4a:ee:d1:4b:03:0c:38:c9:7c:51:83:bb:ac:d8:
                    c7:89:af:57:aa:a5:b4:d5:a2:6b:1a:fd:33:5e:c4:
                    eb:f8:9a:d5:bc:06:16:dc:2d:8a:4c:fd:37:50:ac:
                    50:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:50:8B:1C:AB:DA:DF:8D:38:B5:82:44:45:06:99:F0:3C:51:24:A5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C145AE201CA11F19FC4DC93DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.22.0/24
                  154.223.25.0/24
                  154.223.27.0/24
                  154.223.30.0/23
                  154.223.36.0/24
                  154.223.38.0/23
                  154.223.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:b1:4a:2f:cb:f9:aa:f2:85:f7:de:c2:ba:f2:f9:16:bd:5c:
         30:9b:b3:5d:ff:c3:8b:5e:f3:5e:8b:7d:e8:65:b0:01:7b:48:
         3f:f9:20:da:8c:b8:30:c7:62:f8:99:19:d6:bd:7a:af:ef:c1:
         e0:8e:ea:a1:9f:58:fa:e2:0b:6f:57:19:9a:87:d1:02:90:39:
         72:cb:32:b8:48:c6:19:32:7f:54:c4:ce:42:e0:77:ea:68:b0:
         22:49:f4:65:08:78:13:c2:2f:c9:e2:04:37:bf:8d:f5:78:d8:
         b0:e7:6f:79:88:60:2c:52:d4:af:3d:64:4e:16:dd:1e:2d:6c:
         50:22:f7:fa:a1:69:7f:3b:79:88:ff:e1:d3:b0:45:d2:32:8b:
         94:67:e8:57:89:8c:a2:a8:12:37:57:59:09:a7:52:06:d3:a7:
         7d:b5:15:ed:13:a8:a4:01:b5:05:21:be:29:f3:ba:f2:0b:b5:
         24:8e:b0:a6:f7:ce:86:57:91:d5:ed:aa:15:96:0d:d5:bc:20:
         f9:10:ca:72:e2:ec:28:6f:21:29:e2:8e:53:50:a2:89:8d:4f:
         f8:6a:13:2b:a6:32:fa:6c:dc:3e:72:45:27:ae:bd:3b:1d:4a:
         db:09:c9:02:47:04:9e:34:17:c5:a8:fb:32:a9:3d:0f:26:58:
         c3:79:c7:91
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIDAbiVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjA0MTMwNTE5WhcNMjYwMzEyMTMwNTE5WjAYMRYw
FAYDVQQDEw02OTgzNDQxNi1hNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxwK4mYKlOKHckEZhyoQm8iXyyEEEHfsz8+uqkH8lG/0FC19BZKjP6VoO
1lR1pFLr3GIYtm840HbymaFcR4fbN6rw3IexH0lnpuA+TwsOx/CmklA8R1T12cr0
+ib5aFAzCLXloVtPpbEBTH4Zsfc4IRwQkUBcWHKX3eWqw66s+TNHoyeIxmGd5qOj
C689yNXv1aARcik5UtBFvh7lrFIxVG0sE51s8oGxY0SpxldZFujRzxsVcQnO7gB9
/xTHY8M8kGQbWcHfvkGbRjpgrPykB8daSu7RSwMMOMl8UYO7rNjHia9XqqW01aJr
Gv0zXsTr+JrVvAYW3C2KTP03UKxQ/QIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFPRQ
ixyr2t+NOLWCREUGmfA8USSlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQzE0NUFFMjAxQ0ExMUYxOUZDNERDOTNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAmt8WAwQAmt8ZAwQAmt8b
AwQBmt8eAwQAmt8kAwQBmt8mAwQAmt8yMA0GCSqGSIb3DQEBCwUAA4IBAQAlsUov
y/mq8oX33sK68vkWvVwwm7Nd/8OLXvNei33oZbABe0g/+SDajLgwx2L4mRnWvXqv
78Hgjuqhn1j64gtvVxmah9ECkDlyyzK4SMYZMn9UxM5C4HfqaLAiSfRlCHgTwi/J
4gQ3v431eNiw5295iGAsUtSvPWROFt0eLWxQIvf6oWl/O3mI/+HTsEXSMouUZ+hX
iYyiqBI3V1kJp1IG06d9tRXtE6ikAbUFIb4p87ryC7UkjrCm986GV5HV7aoVlg3V
vCD5EMpy4uwobyEp4o5TUKKJjU/4ahMrpjL6bNw+ckUnrr07HUrbCckCRwSeNBfF
qPsyqT0PJljDeceR
-----END CERTIFICATE-----
Generated at Mon Feb 9 07:42:54 2026 by rpki-client