This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30A3AC22E47211F087B801BFDAE4EC9C.roa
File:                     30A3AC22E47211F087B801BFDAE4EC9C.roa (raw, json)
Hash identifier:          dSrEtcCY7RtqiJ0Gbg8A9tFoP2/+o8peWeQATIoC3/A=
Subject key identifier:   13:D2:F7:D0:9D:A5:65:5F:7E:FB:BE:19:1D:E0:F1:E2:AA:4D:6D:43
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B186
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30A3AC22E47211F087B801BFDAE4EC9C.roa
Signing time:             Mon 29 Dec 2025 04:52:34 +0000
ROA not before:           Mon 29 Dec 2025 04:52:30 +0000
ROA not after:            Sun 01 Feb 2026 04:52:30 +0000
asID:                     984
IP address blocks:        154.82.132.0/24 maxlen: 24
                          154.82.135.0/24 maxlen: 24
                          154.90.133.0/24 maxlen: 24
                          154.95.2.0/24 maxlen: 24
                          154.95.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110982 (0x1b186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 29 04:52:30 2025 GMT
            Not After : Feb  1 04:52:30 2026 GMT
        Subject: CN=69520912-1c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:0c:a1:9e:74:5c:c9:84:21:e9:c2:2d:81:
                    66:8d:a2:a0:9e:ba:e6:94:81:86:cf:78:1d:ff:75:
                    8f:06:e6:12:67:b8:99:0a:4d:c3:91:f7:db:75:05:
                    d4:9e:54:cf:e3:96:46:61:10:88:56:ba:bd:03:1e:
                    6a:12:74:1b:be:50:3b:70:c6:06:ec:ad:ca:c0:97:
                    c8:2b:cf:b5:e2:53:3b:65:56:3f:ab:43:71:4b:fa:
                    ea:27:a0:71:c0:46:e8:71:6b:af:1e:a9:0c:80:d3:
                    bf:0a:a2:35:b4:d0:45:5b:37:0e:dc:46:30:fd:c2:
                    b3:c8:4c:9e:be:c8:b8:41:b9:4e:27:c0:ae:86:cc:
                    f9:bc:74:55:2b:ab:0a:0c:7a:4c:f7:ac:e7:c6:37:
                    3c:eb:d8:f4:c1:b3:86:74:67:5d:bb:68:d3:db:7e:
                    fb:48:41:a0:0b:09:73:1e:2f:c3:be:9c:61:59:e4:
                    1c:78:ab:6f:9e:56:95:fc:5c:bb:82:a1:df:00:e9:
                    ca:40:1f:86:51:3f:f6:25:fd:44:c4:44:64:da:87:
                    2f:4f:60:b3:9d:b1:00:b8:da:d7:f4:ef:22:3c:bf:
                    da:46:e9:06:5d:ae:f7:4b:79:b6:a9:0f:97:31:57:
                    e7:4e:46:56:ba:4e:cd:61:46:8a:6e:5a:0f:6d:f0:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D2:F7:D0:9D:A5:65:5F:7E:FB:BE:19:1D:E0:F1:E2:AA:4D:6D:43
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30A3AC22E47211F087B801BFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.132.0/24
                  154.82.135.0/24
                  154.90.133.0/24
                  154.95.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:0a:dd:9d:31:6e:81:05:35:74:7b:99:c8:ff:2b:29:1a:54:
         ed:7a:a0:ac:46:e8:78:78:45:9d:24:00:89:60:34:f1:3f:23:
         cb:0d:75:a4:45:40:2a:79:55:cc:38:72:ab:57:b7:7d:a8:dd:
         49:d9:94:b2:a5:31:bb:75:fd:34:72:07:b9:9e:fa:02:69:55:
         a5:01:6b:ce:ed:e7:0d:a5:2c:05:04:81:10:e7:c7:c7:55:18:
         ba:3b:2a:13:ba:dd:2a:9d:a0:14:d9:94:51:bd:86:43:8c:24:
         45:be:48:01:e9:8a:c6:20:18:65:36:89:2a:52:30:5e:c9:57:
         ff:bf:36:9b:aa:41:1c:82:9c:46:d8:ae:11:5b:2e:02:2c:2c:
         4f:92:a7:90:8a:66:c0:aa:ba:ea:27:86:a3:9b:2a:96:39:ec:
         c5:b3:24:1f:77:d6:5b:50:86:cc:aa:4c:bd:0f:64:69:7e:28:
         7f:f5:3f:fb:40:c1:87:6c:a2:e5:5f:cf:c6:0e:be:3f:5f:12:
         d0:e9:da:94:e2:52:07:27:1f:fe:b0:7f:f5:1c:8c:08:89:f0:
         59:af:77:69:57:10:d6:47:22:b7:79:c8:e0:6e:ea:86:70:d1:
         27:76:70:9e:2c:56:e9:64:43:89:ef:9a:52:bf:19:b9:fd:17:
         1c:d2:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:14:29 2026 by rpki-client