This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C92CC82FC4211F0B8DD2396DAE4EC9C.roa
File:                     4C92CC82FC4211F0B8DD2396DAE4EC9C.roa (raw, json)
Hash identifier:          pyDltz2hzuhNVPhHljcbib5rNdiwrQSmOziYXqw21H8=
Subject key identifier:   FA:E7:5A:C1:79:C4:AB:8F:C7:53:18:39:95:28:05:F0:9A:BC:17:2D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B725
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C92CC82FC4211F0B8DD2396DAE4EC9C.roa
Signing time:             Wed 28 Jan 2026 12:10:13 +0000
ROA not before:           Wed 28 Jan 2026 12:10:08 +0000
ROA not after:            Sun 28 Jan 2029 12:10:08 +0000
asID:                     17561
IP address blocks:        154.202.180.0/24 maxlen: 24
                          154.202.181.0/24 maxlen: 24
                          154.202.182.0/24 maxlen: 24
                          154.202.183.0/24 maxlen: 24
                          154.202.184.0/24 maxlen: 24
                          154.202.185.0/24 maxlen: 24
                          154.202.186.0/24 maxlen: 24
                          154.202.187.0/24 maxlen: 24
                          154.202.188.0/24 maxlen: 24
                          154.202.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Feb 2026 09:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112421 (0x1b725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 28 12:10:08 2026 GMT
            Not After : Jan 28 12:10:08 2029 GMT
        Subject: CN=6979fca5-49e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:23:2f:bf:13:a4:b5:b9:32:4a:05:90:ea:
                    e5:6b:2f:3d:9f:14:a0:89:db:27:a1:eb:0e:6c:fb:
                    47:86:fd:64:85:7b:c0:8e:64:9f:60:d7:9f:1b:9e:
                    b4:26:6e:3e:ad:46:d8:00:5d:0b:dc:a8:17:e2:8c:
                    7a:e7:40:fe:58:23:ac:ad:af:dd:d2:aa:67:bc:74:
                    6e:2f:65:af:8c:02:b5:d7:cb:3a:5b:0c:fa:e1:ab:
                    d4:69:77:32:00:e6:39:44:b2:20:39:6b:d5:9e:21:
                    8b:d1:7a:73:05:60:42:ff:e3:16:3f:8d:16:d5:b4:
                    b1:31:74:67:f9:00:e8:f2:fe:e5:35:df:38:01:bb:
                    be:aa:dd:68:c4:a3:75:0a:fa:cc:51:4f:2f:e1:75:
                    b1:13:6a:b0:55:19:54:95:9d:6f:eb:c6:60:49:d0:
                    0f:c9:58:c2:8f:a3:3e:99:d8:9c:45:42:20:be:b3:
                    78:e5:2c:b2:35:f3:96:5b:0a:3b:19:dc:84:d6:65:
                    e0:e6:6e:2e:3f:79:ff:ea:db:5f:c4:c7:6e:eb:ae:
                    38:66:d3:df:0e:b5:23:9f:1b:7f:89:9b:f3:d7:e6:
                    8a:e6:66:64:a8:ff:5e:ad:1d:22:1d:48:4e:0b:b4:
                    72:09:ed:bf:75:b7:28:ec:46:64:4e:5d:cf:a3:46:
                    48:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E7:5A:C1:79:C4:AB:8F:C7:53:18:39:95:28:05:F0:9A:BC:17:2D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C92CC82FC4211F0B8DD2396DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.180.0-154.202.189.255

    Signature Algorithm: sha256WithRSAEncryption
         5f:b2:85:af:90:26:5e:60:88:de:cc:9e:2e:33:25:0d:b1:4d:
         98:98:aa:0a:dc:56:3a:1e:9e:63:ca:56:20:8a:36:13:54:31:
         1a:86:4f:ba:b8:6f:01:cb:56:e0:fd:e0:04:65:81:25:cb:10:
         5c:e2:15:12:87:68:e6:b0:26:b3:ff:52:f7:ee:7e:25:92:0a:
         ba:7a:71:bc:9e:c9:d6:ea:98:b3:1b:98:20:04:01:75:f8:06:
         1f:5f:ca:88:05:bb:7d:d6:13:3d:43:2e:a6:92:2d:2b:a8:d9:
         2e:ee:3c:3d:45:18:58:70:9b:e5:b1:a4:53:46:6b:18:48:98:
         eb:64:30:00:45:7b:e2:1f:3e:bd:9a:3f:7e:97:80:bb:03:22:
         95:e5:5e:08:3e:c6:e9:10:4a:29:68:10:99:a2:de:fa:7e:38:
         d8:09:f6:3b:59:5f:ab:0a:9f:aa:02:98:a6:33:26:66:53:15:
         86:83:c1:83:2c:eb:80:a0:cb:91:71:eb:03:0b:56:45:c9:39:
         79:09:45:8d:7b:9f:f1:52:7a:ab:95:bf:1d:13:33:c1:e3:f2:
         b7:4f:cd:00:a7:e9:df:ca:8e:ab:bb:ab:f2:b5:01:3a:7d:28:
         ce:cb:06:e1:f9:00:3e:14:54:24:50:c1:89:33:ad:c6:aa:a5:
         8e:99:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:47:23 2026 by rpki-client