This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BDF7C08EBE611F0BB5DBA95DAE4EC9C.roa
File:                     8BDF7C08EBE611F0BB5DBA95DAE4EC9C.roa (raw, json)
Hash identifier:          I+cjgzf/0lvvFJghvDIGiDBgAZVswsMuZxyOCYQuUI0=
Subject key identifier:   58:22:00:D7:65:D3:B4:62:95:D3:0D:AA:F3:F9:FF:83:8D:D2:56:6B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B3B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BDF7C08EBE611F0BB5DBA95DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 16:33:07 +0000
ROA not before:           Wed 07 Jan 2026 16:33:02 +0000
ROA not after:            Tue 27 Jan 2026 16:33:02 +0000
asID:                     138915
IP address blocks:        154.93.84.0/23 maxlen: 24
                          154.93.86.0/24 maxlen: 24
                          154.93.92.0/24 maxlen: 24
                          154.93.93.0/24 maxlen: 24
                          154.93.100.0/23 maxlen: 24
                          154.93.104.0/23 maxlen: 24
                          154.93.109.0/24 maxlen: 24
                          154.93.110.0/24 maxlen: 24
                          154.93.111.0/24 maxlen: 24
                          154.93.114.0/24 maxlen: 24
                          154.93.115.0/24 maxlen: 24
                          154.93.116.0/22 maxlen: 24
                          154.93.120.0/24 maxlen: 24
                          154.93.121.0/24 maxlen: 24
                          154.93.122.0/24 maxlen: 24
                          154.93.124.0/23 maxlen: 24
                          154.93.124.0/24 maxlen: 24
                          154.93.125.0/24 maxlen: 24
                          154.93.126.0/24 maxlen: 24
                          154.93.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111537 (0x1b3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  7 16:33:02 2026 GMT
            Not After : Jan 27 16:33:02 2026 GMT
        Subject: CN=695e8ac3-4eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:77:9f:99:d8:b4:0b:fa:12:5a:e5:cc:0f:22:
                    29:1b:db:49:8b:72:a8:d7:78:98:87:c7:e9:bb:60:
                    dd:8a:a9:67:a9:33:07:e9:e7:d7:f0:f7:74:f7:4f:
                    ca:d7:48:eb:8c:22:79:f2:55:46:6e:c9:1a:0f:11:
                    04:8c:2c:2b:99:43:77:54:54:43:a5:7c:43:3b:f1:
                    d3:86:2a:f8:4a:80:54:e4:47:9b:8b:88:37:60:b4:
                    d1:ff:81:58:0c:03:e4:87:0a:22:2c:35:8a:e7:e3:
                    2e:93:e2:d1:91:0d:f4:44:6a:18:b7:bb:37:c3:d9:
                    36:e0:07:71:23:74:0f:19:e1:b5:4e:41:ba:de:f8:
                    b9:1a:36:e5:a2:e9:90:8a:a8:27:65:fc:e4:e2:a0:
                    77:d3:27:e8:8b:32:ce:73:05:5d:27:63:6a:54:41:
                    67:a0:d4:32:d0:d3:26:d9:e1:5e:84:da:7c:23:17:
                    8c:e2:01:e4:12:72:b7:92:d6:93:f6:22:e9:7f:8c:
                    50:f1:9c:c3:ac:38:23:4f:10:f1:e5:a9:f5:89:b1:
                    f9:ae:7a:52:aa:01:66:18:45:c0:ad:cb:03:af:5f:
                    50:23:d9:31:b3:a7:d7:a7:3f:01:60:d0:d7:5e:39:
                    37:f3:bc:90:8d:ad:40:d3:f9:15:34:d9:bf:c1:9b:
                    1b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:22:00:D7:65:D3:B4:62:95:D3:0D:AA:F3:F9:FF:83:8D:D2:56:6B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BDF7C08EBE611F0BB5DBA95DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.84.0-154.93.86.255
                  154.93.92.0/23
                  154.93.100.0/23
                  154.93.104.0/23
                  154.93.109.0-154.93.111.255
                  154.93.114.0-154.93.122.255
                  154.93.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:8c:dd:4b:38:f0:9a:af:5d:d8:29:12:27:b5:db:4b:e2:df:
         d0:7e:3e:9c:f9:fd:d9:98:59:19:0c:bc:62:53:eb:91:e9:f2:
         cf:8a:fa:a8:6d:70:6d:d1:8e:97:17:fc:9a:9c:66:67:9e:f3:
         3c:f8:47:62:a5:e9:47:99:dd:cd:83:a9:0f:93:dc:5a:41:2c:
         91:2d:4d:88:47:10:51:04:6c:29:08:bc:6f:4b:68:29:1d:dd:
         20:95:6f:7b:d8:b2:62:19:47:6c:a9:9d:e7:42:7f:43:99:38:
         fc:9f:dc:f7:3f:5e:1a:57:e5:13:1c:e0:28:77:a3:2b:12:00:
         44:0b:01:8e:5a:11:0e:9d:67:3c:91:d2:6b:28:4f:08:cb:00:
         36:ec:f2:eb:0b:46:bc:0a:6d:5a:83:e4:f5:13:fc:31:4a:a4:
         17:f7:92:cf:20:18:7d:5b:13:72:ea:97:dc:77:22:b2:10:a5:
         07:77:8e:c0:e1:bc:43:a0:14:5c:4d:06:98:a5:07:72:09:9d:
         15:e0:95:56:56:e8:4c:9b:1b:25:89:4c:cb:17:96:0c:16:30:
         75:db:cd:78:d4:70:4a:2a:0e:06:32:59:ca:6d:c4:85:11:4e:
         c8:20:6b:e5:84:9a:41:5d:0c:42:b6:64:1d:e2:44:05:24:db:
         4b:b0:95:94
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIDAbOxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTA3MTYzMzAyWhcNMjYwMTI3MTYzMzAyWjAYMRYw
FAYDVQQDEw02OTVlOGFjMy00ZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxXefmdi0C/oSWuXMDyIpG9tJi3Ko13iYh8fpu2DdiqlnqTMH6efX8Pd0
90/K10jrjCJ58lVGbskaDxEEjCwrmUN3VFRDpXxDO/HThir4SoBU5Eebi4g3YLTR
/4FYDAPkhwoiLDWK5+Muk+LRkQ30RGoYt7s3w9k24AdxI3QPGeG1TkG63vi5Gjbl
oumQiqgnZfzk4qB30yfoizLOcwVdJ2NqVEFnoNQy0NMm2eFehNp8IxeM4gHkEnK3
ktaT9iLpf4xQ8ZzDrDgjTxDx5an1ibH5rnpSqgFmGEXArcsDr19QI9kxs6fXpz8B
YNDXXjk387yQja1A0/kVNNm/wZsbjwIDAQABo4IC4TCCAt0wHQYDVR0OBBYEFFgi
ANdl07RildMNqvP5/4ON0lZrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QkRGN0MwOEVCRTYxMUYwQkI1REJBOTVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCMAwDBAKaXVQDBACaXVYDBAGa
XVwDBAGaXWQDBAGaXWgwDAMEAJpdbQMEBJpdYDAMAwQBml1yAwQAml16AwQCml18
MA0GCSqGSIb3DQEBCwUAA4IBAQBPjN1LOPCar13YKRIntdtL4t/Qfj6c+f3ZmFkZ
DLxiU+uR6fLPivqobXBt0Y6XF/yanGZnnvM8+EdipelHmd3Ng6kPk9xaQSyRLU2I
RxBRBGwpCLxvS2gpHd0glW972LJiGUdsqZ3nQn9DmTj8n9z3P14aV+UTHOAod6Mr
EgBECwGOWhEOnWc8kdJrKE8IywA27PLrC0a8Cm1ag+T1E/wxSqQX95LPIBh9WxNy
6pfcdyKyEKUHd47A4bxDoBRcTQaYpQdyCZ0V4JVWVuhMmxsliUzLF5YMFjB12814
1HBKKg4GMlnKbcSFEU7IIGvlhJpBXQxCtmQd4kQFJNtLsJWU
-----END CERTIFICATE-----
Generated at Mon Jan 19 09:00:03 2026 by rpki-client