This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F94A644F5D311F08A0E4E85DAE4EC9C.roa
File:                     6F94A644F5D311F08A0E4E85DAE4EC9C.roa (raw, json)
Hash identifier:          6+0gFu+3DNFw6/k9tDQXog7oFfslonaQ0Ko81Wiu+mg=
Subject key identifier:   B8:99:85:C6:22:B7:FE:A9:F1:76:CA:CD:12:0C:9F:0D:FE:6F:EE:F0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B57D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F94A644F5D311F08A0E4E85DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 07:41:31 +0000
ROA not before:           Tue 20 Jan 2026 07:41:26 +0000
ROA not after:            Thu 19 Feb 2026 07:41:26 +0000
asID:                     11404
IP address blocks:        154.193.112.0/20 maxlen: 24
                          154.196.192.0/20 maxlen: 24
                          154.199.80.0/20 maxlen: 24
                          154.200.112.0/20 maxlen: 24
                          154.205.48.0/20 maxlen: 24
                          154.206.32.0/20 maxlen: 24
                          154.207.144.0/20 maxlen: 24
                          154.207.160.0/20 maxlen: 24
                          154.208.96.0/20 maxlen: 24
                          154.211.192.0/20 maxlen: 24
                          154.214.16.0/20 maxlen: 24
                          154.215.16.0/20 maxlen: 24
                          154.216.16.0/20 maxlen: 24
                          154.222.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 24 Jan 2026 00:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111997 (0x1b57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 07:41:26 2026 GMT
            Not After : Feb 19 07:41:26 2026 GMT
        Subject: CN=696f31ab-8311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:3b:ab:4e:b7:07:be:59:b9:fa:95:c6:8b:
                    37:68:63:4a:c2:33:a1:7b:5c:23:6a:a3:01:eb:6c:
                    7b:61:9d:28:0d:df:e5:d0:ac:f3:5b:25:6d:cf:32:
                    15:fe:93:44:3f:95:67:80:8a:90:e9:0d:73:d6:c0:
                    2c:61:de:56:55:08:6a:9b:52:b0:95:0d:9d:b0:09:
                    0f:28:fd:83:50:04:3f:86:4a:82:ee:6a:fb:11:5c:
                    ff:69:18:d1:6e:b4:a1:40:5b:e5:8b:d0:7a:66:94:
                    ec:9c:a0:3c:5a:df:c0:39:36:17:50:4e:c9:9a:39:
                    a2:d8:b5:87:e0:46:0a:c3:bf:7b:85:01:cb:ef:da:
                    f8:01:c4:30:f1:21:b9:b1:d0:6f:b1:b1:33:c4:79:
                    ab:ef:2d:e8:a8:aa:76:b9:2d:75:5e:27:b8:70:1b:
                    59:02:c2:61:ac:f0:ce:2c:8f:16:87:8f:4f:73:cf:
                    4b:78:74:e1:9c:fc:4d:f9:b9:76:f7:9e:1d:37:03:
                    0d:6d:8a:a7:4c:3d:1e:9a:6d:9f:6c:60:38:77:2e:
                    09:3b:05:cf:bf:70:54:df:c6:9d:39:87:d7:45:23:
                    2d:7e:e9:52:9d:c9:76:67:d6:36:a8:9a:49:98:60:
                    1e:3a:dc:52:81:25:be:30:bb:09:6c:5c:2f:e3:88:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:99:85:C6:22:B7:FE:A9:F1:76:CA:CD:12:0C:9F:0D:FE:6F:EE:F0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F94A644F5D311F08A0E4E85DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.112.0/20
                  154.196.192.0/20
                  154.199.80.0/20
                  154.200.112.0/20
                  154.205.48.0/20
                  154.206.32.0/20
                  154.207.144.0-154.207.175.255
                  154.208.96.0/20
                  154.211.192.0/20
                  154.214.16.0/20
                  154.215.16.0/20
                  154.216.16.0/20
                  154.222.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:b6:de:95:24:ff:7d:45:9a:63:f7:26:93:cc:80:e2:a4:62:
         e8:e6:7b:fb:04:f7:cf:8f:a1:22:fd:c6:8f:cc:7f:76:6c:39:
         3b:ed:53:1d:e2:43:e3:94:13:9c:f4:4d:1c:22:e3:8e:a2:d8:
         90:31:23:6d:d7:40:7d:d4:48:64:52:b9:52:93:86:c5:9c:52:
         99:a9:72:8c:47:77:98:8a:54:4e:79:45:54:80:9c:82:5b:29:
         bd:05:ff:77:fc:97:b0:36:49:7e:b1:3a:4a:1a:1e:1e:a9:d6:
         d8:0d:6c:ca:6a:7e:e0:78:8b:08:0f:41:6b:af:30:95:1f:46:
         98:68:c8:98:ad:7e:bd:a9:c7:1a:11:47:49:57:f7:df:c0:3f:
         c1:95:a9:7e:19:42:0b:d8:29:d2:50:6c:e7:cd:d1:cc:93:88:
         94:e0:0e:27:09:ea:c4:22:6a:70:39:cd:7c:e8:7d:d4:2b:05:
         7a:bd:2b:6f:29:b2:20:f7:b7:fd:5c:6c:87:7e:45:e3:d2:2c:
         bb:53:78:ac:31:0e:65:72:1c:fe:08:24:b9:36:5e:0c:a8:f3:
         ea:41:21:cb:b7:6a:c0:99:07:58:68:1f:b2:ac:f2:5f:67:f2:
         f9:e1:5e:b3:1f:e0:ef:ec:a1:4e:88:3d:d7:31:b3:95:66:47:
         3c:f7:39:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 07:30:06 2026 by rpki-client