This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54076614F3D011F0AA34929ADAE4EC9C.roa
File:                     54076614F3D011F0AA34929ADAE4EC9C.roa (raw, json)
Hash identifier:          RAWvW8W2YFDry2S6Grij93VfkebjdCKl+VQsUd8+czs=
Subject key identifier:   9D:0D:9C:41:E4:75:3B:4A:3D:23:D7:84:7F:11:23:49:28:53:D8:A5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B513
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54076614F3D011F0AA34929ADAE4EC9C.roa
Signing time:             Sat 17 Jan 2026 18:14:14 +0000
ROA not before:           Sat 17 Jan 2026 18:14:09 +0000
ROA not after:            Tue 24 Feb 2026 18:14:09 +0000
asID:                     139923
IP address blocks:        154.89.151.0/24 maxlen: 24
                          154.89.152.0/23 maxlen: 24
                          154.89.157.0/24 maxlen: 24
                          154.95.24.0/24 maxlen: 24
                          154.217.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111891 (0x1b513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 17 18:14:09 2026 GMT
            Not After : Feb 24 18:14:09 2026 GMT
        Subject: CN=696bd176-75c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:27:d6:09:13:1e:23:d1:0a:6b:96:13:95:
                    10:f2:64:a1:5f:50:6f:f2:92:1f:26:19:94:ea:40:
                    45:26:82:d5:0c:c7:3b:c6:ec:19:0f:3e:2d:50:0c:
                    f4:b0:5e:52:0c:04:65:9c:14:a5:2e:40:90:d4:61:
                    20:76:f4:9c:40:d7:32:9d:fa:da:e1:b6:6b:9e:41:
                    32:85:3f:c1:b1:5a:22:a0:28:cd:86:d3:b6:8d:6a:
                    46:4e:ef:ff:eb:27:0e:ed:65:c8:fa:fe:3f:6a:2d:
                    40:5c:54:e7:73:ba:41:a7:e6:63:17:a0:5b:bf:9c:
                    47:90:7a:26:2c:a1:3f:bb:ce:07:73:7c:8f:60:0f:
                    3d:38:f8:af:cf:25:2a:16:8e:10:ff:03:f8:36:64:
                    c5:03:cc:10:73:82:32:10:6f:50:52:ad:b3:82:e7:
                    86:a7:ba:41:c7:fc:c8:61:db:3b:60:79:d5:67:ff:
                    66:b3:a8:16:b7:d3:fd:41:59:ee:a4:84:fa:17:7c:
                    24:b6:20:4a:6e:2b:7f:93:36:3a:a9:7f:e7:a4:76:
                    5d:7c:b9:fc:f1:61:e1:cd:23:17:a7:ba:f7:1e:4a:
                    5e:de:fd:c1:8c:3d:60:25:5e:28:ad:51:09:77:68:
                    27:cb:03:36:9e:c9:93:e9:f2:7d:06:58:55:c6:1e:
                    d6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0D:9C:41:E4:75:3B:4A:3D:23:D7:84:7F:11:23:49:28:53:D8:A5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54076614F3D011F0AA34929ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.151.0-154.89.153.255
                  154.89.157.0/24
                  154.95.24.0/24
                  154.217.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c6:96:7d:b6:a9:98:48:68:81:30:11:2e:c1:0e:55:da:4b:78:
         a7:82:04:f7:b2:b4:c9:36:22:44:7c:5d:4b:94:67:37:f8:f4:
         af:64:74:3b:da:75:ff:b0:ef:25:63:4c:99:c3:86:5d:db:f7:
         6c:69:2b:0d:5d:75:33:95:f3:16:32:95:2c:3b:4a:8d:58:92:
         6f:73:fd:50:cf:d7:2e:ff:2e:5f:e7:ad:ba:6d:ae:63:62:95:
         28:97:a3:05:0b:26:fe:79:1e:04:20:0b:a7:5a:0c:ff:d3:8a:
         06:1b:43:ff:f6:fb:a7:d0:e3:2e:44:84:fc:29:ac:b7:27:b4:
         df:92:45:5b:46:f0:e7:2f:20:70:d8:be:e5:ed:80:1e:f6:a1:
         85:eb:83:f0:85:8c:83:0d:78:19:c6:02:dd:cb:80:f3:fc:f7:
         e8:af:3f:1a:71:d9:74:8c:cd:72:ad:7d:0a:f9:52:69:d3:14:
         12:f3:69:75:0e:e2:c3:1c:33:72:8a:23:d3:b7:0d:82:a1:fa:
         df:5a:f1:f2:7d:83:e0:42:66:02:ff:76:22:e7:c2:29:d1:dd:
         ac:6d:30:25:b9:41:c1:4e:a2:32:f7:bd:e0:55:41:cd:25:ed:
         be:ee:c8:87:87:1a:31:9a:ef:2a:d7:a1:94:04:84:a4:51:33:
         b8:35:3d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:10:10 2026 by rpki-client