This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/895136F4E56811F0B8D7D5A6DAE4EC9C.roa
File:                     895136F4E56811F0B8D7D5A6DAE4EC9C.roa (raw, json)
Hash identifier:          oW3xRR4SVBaM8gF2u3tCFVLPQsrJpRH3Y/vgYxIuZ/Y=
Subject key identifier:   DF:7B:88:CC:8D:FC:04:20:00:D5:CA:96:7D:6A:48:EF:27:17:CC:00
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B1E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/895136F4E56811F0B8D7D5A6DAE4EC9C.roa
Signing time:             Tue 30 Dec 2025 10:16:00 +0000
ROA not before:           Tue 30 Dec 2025 10:15:55 +0000
ROA not after:            Fri 30 Jan 2026 10:15:55 +0000
asID:                     401696
IP address blocks:        154.201.64.0/19 maxlen: 24
                          154.201.94.0/23 maxlen: 24
                          154.201.94.0/24 maxlen: 24
                          154.201.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111080 (0x1b1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 30 10:15:55 2025 GMT
            Not After : Jan 30 10:15:55 2026 GMT
        Subject: CN=6953a65f-009c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:0b:86:42:e6:9e:0f:11:b2:a3:f0:39:02:
                    eb:4d:b0:ef:d0:3e:fa:9e:4f:60:eb:1d:f6:93:63:
                    61:42:d3:1b:5a:f6:b4:6f:91:8c:3b:a3:9e:51:12:
                    42:44:64:0b:47:e4:35:0c:d3:e5:6f:e4:43:5e:ef:
                    1c:a7:ea:53:dd:32:6d:6f:34:c3:77:5b:06:a3:d5:
                    30:7a:87:cc:8a:ce:b2:8b:f5:15:c6:71:ab:6d:b4:
                    70:39:55:fc:54:67:c5:8f:78:4d:de:35:4d:e5:5e:
                    cf:18:8a:93:29:11:4e:4c:91:80:95:b1:9e:84:c4:
                    dd:5b:00:95:35:b8:03:49:7b:6b:2b:f2:02:47:31:
                    d1:df:ad:b1:4b:01:85:51:a6:31:7c:f5:f6:f9:50:
                    df:db:3c:9b:3b:a3:9b:fe:20:71:ff:16:4a:8d:72:
                    6c:ba:7b:bc:4c:49:ff:83:7f:bb:40:e7:8f:92:b1:
                    e8:02:f9:67:00:22:14:cd:f3:99:8a:a1:18:84:c8:
                    f4:4a:35:ce:1f:ad:ff:61:ee:f5:56:a7:03:db:a5:
                    97:02:17:11:c7:a2:e3:b5:e7:38:1e:2f:15:aa:97:
                    e8:bd:c7:d7:32:f1:ad:15:dd:b4:03:dd:f8:83:bd:
                    23:05:db:cc:f0:08:72:41:7a:13:60:8c:15:89:b8:
                    43:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7B:88:CC:8D:FC:04:20:00:D5:CA:96:7D:6A:48:EF:27:17:CC:00
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/895136F4E56811F0B8D7D5A6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:08:05:a3:c5:e6:00:48:c1:be:a1:1d:38:e1:10:91:59:02:
         5d:2f:c0:1b:71:2f:46:61:f7:21:7a:a5:60:23:c1:08:23:65:
         1b:0a:47:f3:61:88:cd:1a:94:64:7c:31:49:e4:7a:33:7e:a6:
         66:85:07:7c:7e:a5:d7:af:c3:ce:83:8c:50:ad:5c:b1:f4:52:
         ac:e4:94:5f:db:19:d8:de:4d:8a:19:3d:10:c6:60:40:86:d1:
         39:73:ed:86:3a:7a:1e:1b:e6:c7:99:35:97:05:e7:f9:99:fb:
         2e:f5:75:b5:97:6b:84:88:58:cf:e8:22:d4:5c:5f:a8:f1:2c:
         80:dc:70:53:72:98:d7:91:37:b3:ac:44:cd:02:cd:36:89:12:
         27:d2:ac:d6:fb:d8:63:82:f6:80:de:ee:d3:b2:d8:e7:55:f7:
         53:77:d9:6b:f7:69:f8:f0:8b:45:71:73:23:e5:91:00:16:b6:
         a3:da:04:fa:d4:71:8b:2b:37:80:90:f9:6f:f4:60:ef:92:ce:
         aa:5f:97:02:fb:f1:11:a6:fc:af:ea:1c:55:ff:82:88:ff:c6:
         07:5f:de:06:dc:b5:6b:27:81:1c:77:df:0f:e5:a7:fe:3b:79:
         93:9c:70:49:53:c5:52:ed:43:b1:17:73:f6:1d:99:a7:ae:7e:
         bc:4d:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:54:48 2026 by rpki-client