This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4806877EE6F511F0B47707B1DAE4EC9C.roa
File:                     4806877EE6F511F0B47707B1DAE4EC9C.roa (raw, json)
Hash identifier:          GGm4cQYMmaYkKfrXj1H/pl94edUS97X3kZSCiWSqcKk=
Subject key identifier:   F5:18:AE:10:43:1C:35:22:94:EB:2A:C3:50:D5:C1:54:9E:56:B0:39
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B27A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4806877EE6F511F0B47707B1DAE4EC9C.roa
Signing time:             Thu 01 Jan 2026 09:36:00 +0000
ROA not before:           Thu 01 Jan 2026 09:35:56 +0000
ROA not after:            Thu 05 Feb 2026 09:35:56 +0000
asID:                     48031
IP address blocks:        154.213.6.0/24 maxlen: 24
                          154.213.7.0/24 maxlen: 24
                          154.222.248.0/24 maxlen: 24
                          154.222.249.0/24 maxlen: 24
                          154.222.250.0/24 maxlen: 24
                          154.222.251.0/24 maxlen: 24
                          154.222.253.0/24 maxlen: 24
                          154.222.254.0/24 maxlen: 24
                          154.222.255.0/24 maxlen: 24
                          154.223.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 13:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111226 (0x1b27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  1 09:35:56 2026 GMT
            Not After : Feb  5 09:35:56 2026 GMT
        Subject: CN=69564000-65a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:06:50:3c:24:b4:5d:a8:b7:02:0f:3d:b9:7f:
                    83:4b:e6:9c:74:a2:bc:82:ee:40:5e:e9:a2:8a:9c:
                    98:ba:1a:06:0c:64:3a:ed:37:d0:c3:76:27:cc:16:
                    84:8c:7e:28:32:6f:94:a8:a0:d2:75:b1:d5:d0:1c:
                    28:e3:eb:31:cf:db:49:48:5a:5c:69:0a:57:43:e4:
                    b1:5a:2f:a7:40:8a:d0:a3:67:eb:36:6d:d4:19:28:
                    c2:52:10:bb:e8:79:89:ce:7a:59:55:c2:10:10:01:
                    44:90:c2:bb:d8:2f:16:52:c3:f6:15:54:65:cb:14:
                    50:47:ca:9f:8f:9d:50:f1:27:f3:71:2a:5a:0c:da:
                    d5:d9:8f:ed:81:84:46:d2:0c:ec:af:1e:6b:eb:c6:
                    fd:f1:bc:da:87:62:7d:cb:83:c6:0f:00:27:21:72:
                    35:f8:9f:a3:f2:34:e1:05:c8:84:2e:cb:99:0d:1b:
                    4b:14:22:37:77:69:fe:8a:6b:72:fe:ce:d2:2b:73:
                    46:24:84:18:0f:d0:81:f5:11:ba:0c:b8:79:e7:87:
                    81:89:9f:46:d0:00:e0:37:77:16:5e:21:74:23:45:
                    bf:1c:55:15:c6:46:f5:01:41:c2:2c:9b:6b:26:1a:
                    f0:bf:4e:07:cf:c9:f0:cb:f2:fa:7e:d5:ea:77:e5:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:18:AE:10:43:1C:35:22:94:EB:2A:C3:50:D5:C1:54:9E:56:B0:39
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4806877EE6F511F0B47707B1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.6.0/23
                  154.222.248.0/22
                  154.222.253.0-154.222.255.255
                  154.223.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:85:3e:da:fe:7e:ba:67:2a:71:f4:12:50:24:b7:09:20:5d:
         29:c8:2f:8b:6d:85:72:88:64:6f:08:8e:bf:85:39:79:42:c0:
         7d:18:02:eb:14:64:12:02:5d:cd:8f:5b:9c:ae:99:d6:aa:eb:
         18:29:aa:4f:ad:3e:d5:9f:dd:78:15:10:d6:98:bf:30:b2:d6:
         c1:8a:12:d1:49:18:15:6d:64:3b:05:6e:0a:ba:d2:ea:a7:b2:
         69:7a:23:ce:65:56:de:1a:94:84:26:4a:47:de:fd:5a:33:9e:
         ff:eb:03:b5:85:8f:f5:89:36:40:7f:e6:8b:98:72:8f:96:51:
         f9:6f:56:de:79:da:15:87:78:b5:d0:5b:34:6c:2c:fd:f6:9d:
         63:80:da:fe:02:b2:a1:25:b9:ac:13:7d:23:e3:bb:40:9a:11:
         9a:dd:43:c0:12:1a:fb:ce:a7:71:22:0a:05:96:36:f3:42:57:
         6a:55:bb:48:93:0b:ef:e9:93:5a:e6:c6:9e:39:46:03:36:f6:
         87:46:6b:46:f8:d4:5d:bc:8e:e5:41:ab:d7:9a:41:0c:59:8f:
         17:b8:63:62:9c:b7:c0:a7:73:49:14:89:10:55:27:0b:e8:1c:
         27:c7:6b:e6:ec:f1:db:c0:06:51:db:52:1e:e3:77:87:f6:24:
         64:a5:1e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 00:01:10 2026 by rpki-client