This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DC52A6CDFF711F08D1C479FDAE4EC9C.roa
File:                     9DC52A6CDFF711F08D1C479FDAE4EC9C.roa (raw, json)
Hash identifier:          X84EgT0rF2yknhobbTP/2p5UwajiFmb6ljtkQKIK50g=
Subject key identifier:   8E:D8:D3:0E:AB:DE:35:0C:FC:EA:23:AC:2D:73:87:AE:CC:83:4D:25
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B03F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DC52A6CDFF711F08D1C479FDAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 12:05:05 +0000
ROA not before:           Tue 23 Dec 2025 12:05:00 +0000
ROA not after:            Fri 30 Jan 2026 12:05:00 +0000
asID:                     401783
IP address blocks:        154.82.134.0/24 maxlen: 24
                          154.82.148.0/24 maxlen: 24
                          154.82.158.0/24 maxlen: 24
                          154.82.181.0/24 maxlen: 24
                          154.83.10.0/24 maxlen: 24
                          154.83.24.0/24 maxlen: 24
                          154.83.65.0/24 maxlen: 24
                          154.90.134.0/24 maxlen: 24
                          154.90.140.0/24 maxlen: 24
                          154.90.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110655 (0x1b03f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 23 12:05:00 2025 GMT
            Not After : Jan 30 12:05:00 2026 GMT
        Subject: CN=694a8571-06e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:90:25:02:a6:8c:10:e4:2f:cb:c3:2a:5d:
                    44:61:68:99:4e:05:f5:ac:5b:00:e4:31:61:e7:31:
                    d0:fa:f8:1a:09:17:4f:ac:df:cd:7d:c7:68:9b:58:
                    36:3d:4a:ae:44:65:c8:24:e9:ef:ac:7a:f4:5e:57:
                    fa:5d:e8:1a:70:bd:b2:46:a4:4d:60:64:d8:6f:aa:
                    3f:87:bc:8b:1d:5c:13:3b:d3:15:21:04:83:37:3a:
                    ee:1a:0b:8f:3c:bb:84:43:31:f6:b8:97:5f:fb:cf:
                    aa:39:36:80:d5:e7:c1:c1:9c:1c:20:98:79:b6:16:
                    67:31:56:a3:be:b6:b4:24:d5:fa:66:41:dc:7b:82:
                    b3:27:94:b6:ae:5c:d3:50:02:f5:a9:15:f1:aa:ca:
                    05:0b:c4:77:2c:ee:7a:40:1b:3a:69:e9:e4:18:01:
                    3d:e6:30:79:de:e0:7e:26:ee:19:5f:8f:cb:70:54:
                    78:e7:36:35:0b:4f:22:92:9f:f8:c4:da:fd:45:41:
                    f2:1e:42:d9:ca:fc:b7:46:b9:bd:21:ba:d4:ad:d6:
                    80:56:e0:f7:f9:0e:14:3c:7b:1c:07:28:69:7a:cd:
                    68:b9:cc:da:ac:10:eb:2e:2c:7b:7a:47:7f:2d:93:
                    ef:79:bd:69:ae:43:c5:16:97:76:9f:51:45:a0:ff:
                    5e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D8:D3:0E:AB:DE:35:0C:FC:EA:23:AC:2D:73:87:AE:CC:83:4D:25
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DC52A6CDFF711F08D1C479FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.134.0/24
                  154.82.148.0/24
                  154.82.158.0/24
                  154.82.181.0/24
                  154.83.10.0/24
                  154.83.24.0/24
                  154.83.65.0/24
                  154.90.134.0/24
                  154.90.140.0/24
                  154.90.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:26:b0:ca:72:35:3d:1d:c7:0e:5a:77:0a:9d:a9:8a:39:2b:
         55:e9:66:e5:a2:26:61:83:17:de:93:15:4c:ac:3d:32:a0:36:
         44:53:45:f2:8d:13:86:f5:37:a8:3e:9d:c5:9a:8f:3b:e3:be:
         ae:35:4a:50:e6:a1:3c:11:45:e0:33:ca:e2:0f:00:f8:8f:41:
         a1:a2:d5:16:56:11:ba:07:36:8d:cf:17:9f:af:34:97:58:5a:
         a1:47:fd:cc:5c:47:6a:60:72:78:3a:81:ec:72:40:e3:2a:9a:
         53:8b:f7:de:31:c4:63:e5:2e:ec:69:de:da:24:bc:c5:a7:96:
         9a:db:f1:27:7a:d7:ca:4f:52:e9:bb:8e:df:28:96:76:93:02:
         bb:ff:a9:27:4d:78:33:32:37:32:d6:1c:a2:d2:b6:71:b4:4c:
         92:8c:48:4c:80:7d:e8:35:58:c8:91:42:73:f8:2a:b8:b4:70:
         66:2c:f6:1f:70:21:f7:8a:02:e2:ac:bd:68:00:cf:9b:b1:a9:
         1c:3e:b3:39:e5:c5:ae:b0:04:8d:56:e8:dc:a7:fb:77:16:13:
         8b:f0:9d:82:23:d4:af:b7:c5:a8:cd:cf:f4:d4:c1:6c:d6:07:
         e0:45:6d:0f:d4:2b:10:6e:5f:98:06:5c:7d:49:14:97:80:ef:
         0c:02:db:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:25:05 2026 by rpki-client