This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ADE3FE2E0AF11F09DF929A7DAE4EC9C.roa
File:                     9ADE3FE2E0AF11F09DF929A7DAE4EC9C.roa (raw, json)
Hash identifier:          FyJxbWe/wYiA9/88IoDGcmmfDVw5CPA8MFNEhNquF50=
Subject key identifier:   09:F6:8A:9B:8A:7E:6B:E5:2E:09:2A:50:CB:AE:9E:C7:C3:52:BF:CC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B0A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ADE3FE2E0AF11F09DF929A7DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 10:02:07 +0000
ROA not before:           Wed 24 Dec 2025 10:02:02 +0000
ROA not after:            Fri 30 Jan 2026 10:02:02 +0000
asID:                     9304
IP address blocks:        154.82.134.0/24 maxlen: 24
                          154.82.148.0/24 maxlen: 24
                          154.82.153.0/24 maxlen: 24
                          154.82.158.0/24 maxlen: 24
                          154.82.196.0/24 maxlen: 24
                          154.90.134.0/24 maxlen: 24
                          154.90.136.0/24 maxlen: 24
                          154.90.137.0/24 maxlen: 24
                          154.90.140.0/24 maxlen: 24
                          154.92.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110757 (0x1b0a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 24 10:02:02 2025 GMT
            Not After : Jan 30 10:02:02 2026 GMT
        Subject: CN=694bba1f-99eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:30:23:8d:6f:fb:8f:74:21:3c:5c:2f:cf:
                    31:89:f4:27:79:98:5e:31:97:f9:73:1f:0a:c0:d1:
                    f5:06:88:37:f1:9b:8d:d1:d6:f6:b3:c7:f8:b7:8a:
                    8a:dc:1c:69:d5:70:fe:26:e1:3b:94:05:3d:3d:cb:
                    31:1e:c0:7b:3e:c5:1b:9f:5e:0b:23:19:f9:bc:d2:
                    0c:f6:94:e2:cb:c3:d8:b3:bb:33:dc:d1:5e:88:74:
                    e3:c3:2d:d9:f0:7e:a7:5b:0e:e0:98:07:91:b9:19:
                    d8:77:ff:65:06:6c:ac:7c:d3:85:ac:f4:01:f8:42:
                    f4:27:ed:5b:d8:7a:ca:3d:b7:9b:be:9c:e4:0f:0e:
                    69:c3:2f:e2:ff:33:67:74:6c:81:a0:d0:14:a1:39:
                    5c:a4:e5:68:ac:32:75:d1:cb:48:62:ba:c4:89:42:
                    77:e7:53:49:09:16:15:47:d7:e6:f3:24:6d:81:14:
                    c6:4f:db:85:25:84:d5:8a:6b:c6:8e:b3:f3:a9:95:
                    fb:f6:bd:68:a0:98:39:16:bf:ff:26:48:9c:cf:83:
                    f8:87:20:91:5b:44:72:2f:66:9e:c8:21:b1:79:80:
                    45:f9:3e:73:bf:d7:6d:83:30:79:98:56:8f:1e:24:
                    5c:07:8a:70:89:9c:b4:f9:25:31:ce:d2:e9:75:0e:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F6:8A:9B:8A:7E:6B:E5:2E:09:2A:50:CB:AE:9E:C7:C3:52:BF:CC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ADE3FE2E0AF11F09DF929A7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.134.0/24
                  154.82.148.0/24
                  154.82.153.0/24
                  154.82.158.0/24
                  154.82.196.0/24
                  154.90.134.0/24
                  154.90.136.0/23
                  154.90.140.0/24
                  154.92.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:f0:96:dc:bf:52:d1:d6:65:3c:9c:bb:19:a2:64:66:bd:ce:
         e0:01:99:28:20:89:23:cd:af:73:f9:00:1a:d7:ba:7b:54:c9:
         07:c5:60:90:6f:97:de:f7:44:be:d9:d9:9f:ad:18:0e:b6:4c:
         92:ec:27:0f:a8:21:99:13:0c:6e:30:73:c0:4c:ba:c3:90:5f:
         29:f6:91:ca:a2:35:0b:8f:bf:06:ec:8e:42:8d:4b:d9:7a:80:
         28:aa:04:a4:7d:cc:55:0f:aa:2b:1f:2d:9b:1f:f9:d7:59:d4:
         86:93:e1:ca:06:51:a6:fa:55:12:ec:fc:13:2a:f9:bb:40:58:
         aa:ee:8c:1e:a9:38:9a:bf:c4:a5:00:6e:6f:82:bd:6e:c8:15:
         c4:ec:0c:dd:c2:17:bf:2b:d7:3d:3f:7d:c3:98:11:5a:f3:4d:
         9a:d7:be:e9:37:e6:ec:86:a3:eb:ee:f2:ac:1b:4c:5c:c9:7b:
         5c:0b:e3:6e:7d:34:94:33:33:20:76:13:19:19:81:dd:ff:0b:
         7a:e6:08:7f:a4:69:d3:34:bb:a7:9e:08:27:c4:53:bf:25:38:
         fa:9f:53:fc:71:4a:44:dc:9f:92:09:aa:9d:91:b3:a9:b5:8d:
         e1:a1:21:0f:15:32:1f:51:00:07:4f:84:b1:86:e1:a6:9b:fa:
         35:18:3d:39
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIDAbClMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjI0MTAwMjAyWhcNMjYwMTMwMTAwMjAyWjAYMRYw
FAYDVQQDEw02OTRiYmExZi05OWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsGEwI41v+490ITxcL88xifQneZheMZf5cx8KwNH1Bog38ZuN0db2s8f4
t4qK3Bxp1XD+JuE7lAU9PcsxHsB7PsUbn14LIxn5vNIM9pTiy8PYs7sz3NFeiHTj
wy3Z8H6nWw7gmAeRuRnYd/9lBmysfNOFrPQB+EL0J+1b2HrKPbebvpzkDw5pwy/i
/zNndGyBoNAUoTlcpOVorDJ10ctIYrrEiUJ351NJCRYVR9fm8yRtgRTGT9uFJYTV
imvGjrPzqZX79r1ooJg5Fr//Jkicz4P4hyCRW0RyL2aeyCGxeYBF+T5zv9dtgzB5
mFaPHiRcB4pwiZy0+SUxztLpdQ4ZJQIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFAn2
ipuKfmvlLgkqUMuunsfDUr/MMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QURFM0ZFMkUwQUYxMUYwOURGOTI5QTdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAmlKGAwQAmlKUAwQAmlKZ
AwQAmlKeAwQAmlLEAwQAmlqGAwQBmlqIAwQAmlqMAwQDmlzYMA0GCSqGSIb3DQEB
CwUAA4IBAQA68Jbcv1LR1mU8nLsZomRmvc7gAZkoIIkjza9z+QAa17p7VMkHxWCQ
b5fe90S+2dmfrRgOtkyS7CcPqCGZEwxuMHPATLrDkF8p9pHKojULj78G7I5CjUvZ
eoAoqgSkfcxVD6orHy2bH/nXWdSGk+HKBlGm+lUS7PwTKvm7QFiq7oweqTiav8Sl
AG5vgr1uyBXE7Azdwhe/K9c9P33DmBFa802a177pN+bshqPr7vKsG0xcyXtcC+Nu
fTSUMzMgdhMZGYHd/wt65gh/pGnTNLunnggnxFO/JTj6n1P8cUpE3J+SCaqdkbOp
tY3hoSEPFTIfUQAHT4SxhuGmm/o1GD05
-----END CERTIFICATE-----
Generated at Sun Jan 18 10:01:48 2026 by rpki-client