This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A311FCACEBAA11F0949FEBABDAE4EC9C.roa
File:                     A311FCACEBAA11F0949FEBABDAE4EC9C.roa (raw, json)
Hash identifier:          0jPdX0c2qCYeaBW41GvTmqcV0CMnLeS42vncJBlfSxI=
Subject key identifier:   30:6F:AF:86:55:86:D4:7D:46:BF:8E:92:D3:D8:39:98:7B:7B:1C:EB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B36D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A311FCACEBAA11F0949FEBABDAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 09:24:16 +0000
ROA not before:           Wed 07 Jan 2026 09:24:10 +0000
ROA not after:            Mon 09 Feb 2026 09:24:10 +0000
asID:                     138915
IP address blocks:        154.95.78.0/24 maxlen: 24
                          154.95.79.0/24 maxlen: 24
                          154.95.80.0/24 maxlen: 24
                          154.95.81.0/24 maxlen: 24
                          154.95.82.0/24 maxlen: 24
                          154.95.83.0/24 maxlen: 24
                          154.95.84.0/24 maxlen: 24
                          154.95.85.0/24 maxlen: 24
                          154.95.86.0/23 maxlen: 24
                          154.95.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111469 (0x1b36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  7 09:24:10 2026 GMT
            Not After : Feb  9 09:24:10 2026 GMT
        Subject: CN=695e2640-b5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:7f:be:a2:42:bd:2f:9b:e9:3b:e5:b3:9a:
                    e5:bb:dd:6d:48:39:bc:1e:d5:84:c4:59:a3:89:19:
                    e6:2b:4f:04:a7:6b:4b:27:b2:99:a1:8d:35:74:a7:
                    48:c2:91:53:73:eb:97:ae:b9:f5:c5:42:e4:67:97:
                    5e:ea:00:69:a4:15:0c:76:2c:37:5a:de:8f:a7:cb:
                    9a:ea:b7:29:24:f4:c7:5b:72:9d:cc:e1:84:84:b0:
                    e7:3e:c5:eb:9a:6e:78:7e:5c:be:35:8a:57:09:14:
                    98:5d:68:c7:12:7e:62:a6:b3:01:40:04:ea:4c:ef:
                    ed:c7:01:ba:6b:57:8c:4d:50:63:d9:b4:33:4e:d9:
                    6b:1b:54:eb:3c:0b:2c:7d:c2:61:ad:b1:a1:9d:dd:
                    fd:fd:81:40:02:3f:83:13:56:50:5a:9b:13:d5:8a:
                    2d:24:f3:58:fb:71:8c:e4:32:71:b3:62:97:33:7a:
                    a2:c3:aa:f8:18:63:ea:64:e5:d5:d6:c0:c2:22:04:
                    18:c7:1c:b1:1b:bb:a4:51:cf:58:93:47:d6:28:32:
                    7d:ef:f7:b2:80:7f:6c:24:aa:7b:11:4b:f2:88:32:
                    ba:90:c6:11:53:aa:45:80:35:4c:73:c2:7c:03:a2:
                    43:62:e5:ea:58:a3:78:92:86:6c:ee:ff:be:ea:9b:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6F:AF:86:55:86:D4:7D:46:BF:8E:92:D3:D8:39:98:7B:7B:1C:EB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A311FCACEBAA11F0949FEBABDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.78.0-154.95.88.255

    Signature Algorithm: sha256WithRSAEncryption
         bb:bf:0c:ca:81:f3:d3:70:6a:cb:0d:59:63:17:59:20:f3:85:
         df:f4:dc:72:b7:1c:12:c6:b5:30:a0:6d:45:a0:6b:f3:fc:0d:
         09:3f:77:b4:c7:71:11:14:5a:03:50:f2:b2:50:2e:2c:77:c3:
         1b:0c:6d:20:e5:3a:a1:a2:d9:6d:29:08:c8:85:fa:d2:0a:1b:
         a4:2e:25:2a:80:55:13:bb:fd:82:04:f9:9c:68:93:ff:ec:c5:
         0c:f7:8e:89:2d:30:b2:61:69:62:58:8c:45:cb:16:dd:67:18:
         62:d9:a9:87:22:b3:6c:06:54:bb:5f:30:3c:54:8a:a1:42:a7:
         d7:3b:dd:5c:ac:40:3a:54:a1:c8:86:a8:f9:28:d8:61:aa:d8:
         84:7e:cf:9f:a6:1e:98:48:87:fb:34:52:cf:65:33:f4:41:41:
         da:57:a6:34:41:15:0d:1c:d9:bf:c3:c4:14:cc:6f:1d:34:a5:
         c2:4e:12:a2:7f:bc:5d:46:09:1e:ac:29:1d:28:87:92:7a:86:
         62:97:fe:7f:1b:9e:3d:04:00:30:8a:8b:f6:a4:fa:02:e3:46:
         3b:49:f1:59:7f:6a:9c:c5:30:91:93:97:5a:ba:ce:d2:a7:c2:
         1e:11:f2:f2:f7:53:68:9e:da:7c:cd:02:84:ec:6b:17:c4:a8:
         19:ad:92:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 08:59:48 2026 by rpki-client