This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E3EE772FC4111F094D73B8EDAE4EC9C.roa
File:                     6E3EE772FC4111F094D73B8EDAE4EC9C.roa (raw, json)
Hash identifier:          ukYk9fS6zNHKtgp+mq/wrx0fbCoaYDWWdCRn0voYs2M=
Subject key identifier:   FA:60:13:79:49:17:E6:24:CA:16:B7:B1:52:27:E2:C9:83:F3:E6:3E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B723
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E3EE772FC4111F094D73B8EDAE4EC9C.roa
Signing time:             Wed 28 Jan 2026 12:04:00 +0000
ROA not before:           Wed 28 Jan 2026 12:03:56 +0000
ROA not after:            Sun 28 Jan 2029 12:03:56 +0000
asID:                     17561
IP address blocks:        154.202.170.0/24 maxlen: 24
                          154.202.171.0/24 maxlen: 24
                          154.202.172.0/24 maxlen: 24
                          154.202.173.0/24 maxlen: 24
                          154.202.174.0/24 maxlen: 24
                          154.202.175.0/24 maxlen: 24
                          154.202.176.0/24 maxlen: 24
                          154.202.177.0/24 maxlen: 24
                          154.202.178.0/24 maxlen: 24
                          154.202.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Feb 2026 09:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112419 (0x1b723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 28 12:03:56 2026 GMT
            Not After : Jan 28 12:03:56 2029 GMT
        Subject: CN=6979fb30-3891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:56:3e:99:eb:ce:0c:67:ea:55:69:6e:bd:
                    95:f5:47:5d:7d:e5:a6:ff:a1:6e:6b:42:37:4d:0b:
                    91:99:c5:22:7c:5f:82:7f:18:78:8c:57:69:3d:63:
                    0d:0a:17:a5:f7:61:93:c8:a7:dd:b9:f3:d8:e1:06:
                    99:13:f3:df:8e:7e:9f:71:2e:a7:27:d1:2b:79:14:
                    78:0f:4b:41:f1:8b:dc:06:f3:48:d7:89:ab:48:1d:
                    cb:71:ba:f7:43:cd:b9:2d:fe:65:4b:17:64:8d:d4:
                    17:0b:78:33:ca:9f:63:50:12:19:a0:a7:56:42:58:
                    66:1f:69:a8:42:0d:62:52:bb:0d:52:05:f7:10:98:
                    47:d3:45:c7:dd:2f:3a:db:41:79:b8:66:fe:74:a2:
                    e1:0e:43:ad:c0:10:0e:3a:3e:3b:84:c3:76:23:d7:
                    1a:e3:44:9f:26:1f:c1:66:c5:a1:01:af:b7:cf:3b:
                    03:5c:e1:95:2c:83:cd:47:d5:a8:39:9b:04:d4:09:
                    ea:0d:50:ad:a0:c7:5a:65:6e:d3:75:32:95:05:80:
                    ce:07:6d:bf:6a:ce:e2:91:dd:6a:8f:8a:61:00:11:
                    21:b3:ba:a6:7b:26:80:8a:cc:eb:9e:7e:8f:f6:dc:
                    91:9c:e7:d9:3f:74:4d:ba:7d:d3:f3:43:66:d0:72:
                    63:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:60:13:79:49:17:E6:24:CA:16:B7:B1:52:27:E2:C9:83:F3:E6:3E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E3EE772FC4111F094D73B8EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.170.0-154.202.179.255

    Signature Algorithm: sha256WithRSAEncryption
         24:64:a7:8b:87:41:30:35:5e:7d:cc:98:bf:8a:1b:38:c4:a8:
         78:70:0d:06:ee:24:79:a5:06:b9:95:46:21:25:2d:36:0c:2e:
         af:e1:b2:13:f1:bc:29:9d:33:d5:26:ce:e0:b3:24:ec:be:3e:
         76:e1:96:05:02:30:b1:4f:d6:58:47:6c:8c:eb:e2:96:b1:73:
         d0:27:cb:0e:11:a3:6f:61:59:64:b1:f9:58:85:ee:de:81:83:
         32:56:fd:ef:13:ed:3e:cc:2e:fb:16:ec:e5:d4:f5:64:41:34:
         76:97:25:c5:7a:48:9d:0c:9d:69:15:20:f1:a6:a7:bc:88:33:
         89:0a:ea:20:43:92:7e:28:a4:28:e9:f5:9f:99:a1:d3:4e:b3:
         3b:71:d7:9b:cf:9b:0c:d3:3e:c4:ac:4a:f9:d2:ad:e9:10:40:
         e7:43:60:78:5b:f6:70:16:4b:6d:21:d8:73:79:20:6e:6e:24:
         a2:ee:c7:3e:0d:3f:0a:71:3e:eb:57:de:d7:5b:f3:7a:9c:b1:
         fa:0f:e3:b7:ca:05:e9:2f:b5:c5:eb:a8:6b:38:3d:3d:60:b5:
         8d:12:b5:17:d1:be:3c:f9:5a:bf:87:9d:15:95:d3:9a:17:99:
         15:6b:1a:a9:dd:5e:fa:f2:e0:73:ea:d2:3f:b1:7b:41:5a:48:
         61:28:34:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:14 2026 by rpki-client