This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/982E008EEB9F11F0847104E7DAE4EC9C.roa
File:                     982E008EEB9F11F0847104E7DAE4EC9C.roa (raw, json)
Hash identifier:          +XJs36RmddIJ6ixUVOnNxhXZay7O7UD8rHztMS/t48Y=
Subject key identifier:   BA:81:C7:40:4A:80:C9:55:C6:32:0A:4F:80:0D:19:EB:39:33:AD:98
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B35D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/982E008EEB9F11F0847104E7DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 08:05:14 +0000
ROA not before:           Wed 07 Jan 2026 08:05:09 +0000
ROA not after:            Mon 09 Feb 2026 08:05:09 +0000
asID:                     138915
IP address blocks:        154.95.88.0/24 maxlen: 24
                          154.95.89.0/24 maxlen: 24
                          154.95.90.0/24 maxlen: 24
                          154.95.91.0/24 maxlen: 24
                          154.95.92.0/24 maxlen: 24
                          154.95.93.0/24 maxlen: 24
                          154.95.94.0/24 maxlen: 24
                          154.95.96.0/22 maxlen: 24
                          154.95.100.0/22 maxlen: 24
                          154.95.104.0/22 maxlen: 24
                          154.95.108.0/22 maxlen: 24
                          154.95.112.0/22 maxlen: 24
                          154.95.116.0/22 maxlen: 24
                          154.95.120.0/23 maxlen: 24
                          154.95.122.0/23 maxlen: 24
                          154.223.16.0/24 maxlen: 24
                          154.223.17.0/24 maxlen: 24
                          154.223.18.0/23 maxlen: 24
                          154.223.20.0/24 maxlen: 24
                          154.223.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111453 (0x1b35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  7 08:05:09 2026 GMT
            Not After : Feb  9 08:05:09 2026 GMT
        Subject: CN=695e13ba-68cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6d:84:95:20:d6:dd:0b:ac:ee:3a:d5:a0:a5:
                    8b:55:2f:b4:7e:a9:0a:46:a8:66:f9:a4:fc:ce:73:
                    73:d0:38:1a:a9:a0:0c:ad:f9:2e:4e:13:4e:9e:84:
                    22:92:8e:64:81:12:f1:a9:4c:b3:3d:d2:86:f9:59:
                    40:97:04:54:3b:9e:05:d9:e3:35:ec:c2:c2:f6:4c:
                    68:6a:0f:e4:de:46:35:05:43:f5:22:df:f7:16:d6:
                    74:da:6e:87:b0:96:73:85:7e:e2:e6:73:c0:18:62:
                    c9:41:31:b2:1c:2a:db:ac:1b:52:ba:62:d7:e5:ea:
                    30:3b:2c:c4:6b:f4:f7:c4:de:f1:25:70:51:8d:5b:
                    86:e4:bb:98:f0:df:82:2a:79:d4:6b:91:da:61:55:
                    b0:59:d7:91:ad:e9:24:6f:e9:8b:4f:f6:a3:65:61:
                    2b:2d:60:53:90:4e:f9:ca:e4:f9:63:7d:e3:12:f4:
                    7b:8b:f0:04:1c:ca:10:08:6d:bb:84:40:b6:90:25:
                    2e:f9:22:11:87:4d:9e:e7:9d:11:c8:57:a3:1d:a5:
                    41:7b:5f:98:45:c5:6e:42:ba:a6:01:cf:54:e2:03:
                    61:8e:4a:60:c6:52:d5:d3:23:75:a5:89:32:bb:0a:
                    21:11:ce:9a:fd:48:16:64:2b:2c:0a:64:36:d9:5d:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:81:C7:40:4A:80:C9:55:C6:32:0A:4F:80:0D:19:EB:39:33:AD:98
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/982E008EEB9F11F0847104E7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.88.0-154.95.94.255
                  154.95.96.0-154.95.123.255
                  154.223.16.0-154.223.21.255

    Signature Algorithm: sha256WithRSAEncryption
         9a:f0:bc:e3:c3:4a:a9:06:dd:ae:f1:30:8a:73:4a:47:ae:68:
         26:b6:fb:6a:00:8c:bc:0b:77:d8:0a:73:fc:05:69:d4:45:bc:
         85:39:d2:69:72:1e:e0:33:ec:8e:2d:9f:9e:85:35:f4:23:a6:
         cf:4a:80:48:bd:c5:10:ed:42:a7:0d:c9:4d:5e:ad:f9:46:d5:
         02:15:85:18:11:92:ee:22:bd:77:0b:b9:1c:0d:fb:bd:e6:4a:
         4e:e0:ee:50:47:58:09:e9:83:db:e1:93:92:69:cf:7e:91:3a:
         1d:73:8d:42:61:f3:7d:f1:fd:45:89:54:83:04:be:b8:15:74:
         b2:0d:8c:10:f0:d2:55:81:62:1d:0b:c3:c0:c7:67:02:f6:d9:
         e4:59:ce:fe:87:99:e0:0f:a3:b9:b6:82:1a:17:27:68:90:45:
         ae:86:3d:68:18:78:47:82:8b:92:be:77:99:4e:27:a3:bd:88:
         77:95:31:4e:72:6e:c1:9f:6c:9f:82:98:27:61:46:ca:ca:b6:
         d5:e4:dc:11:0c:90:5d:09:d2:76:ce:8f:41:ee:9c:d1:d0:d3:
         28:62:ff:c9:bb:ca:53:76:53:a2:87:8a:87:f0:ef:c5:c5:34:
         a1:e8:a4:bf:fe:c5:f3:0b:cf:17:11:46:3a:e9:65:34:5f:80:
         ff:a3:02:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 09:03:55 2026 by rpki-client