This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B307E6D6E7CB11F090C423DBDAE4EC9C.roa
File:                     B307E6D6E7CB11F090C423DBDAE4EC9C.roa (raw, json)
Hash identifier:          X7SWcnUjkDcul6p0P8mxShioOmdPzqr2ze1tgSBgBlk=
Subject key identifier:   41:1E:1A:2D:2A:DD:34:67:7B:AE:22:D4:2F:AA:5C:B7:5E:0E:54:D2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B2E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B307E6D6E7CB11F090C423DBDAE4EC9C.roa
Signing time:             Fri 02 Jan 2026 11:10:52 +0000
ROA not before:           Fri 02 Jan 2026 11:10:47 +0000
ROA not after:            Fri 06 Feb 2026 11:10:47 +0000
asID:                     45194
IP address blocks:        154.84.192.0/24 maxlen: 24
                          154.84.194.0/24 maxlen: 24
                          154.84.195.0/24 maxlen: 24
                          154.84.196.0/24 maxlen: 24
                          154.84.197.0/24 maxlen: 24
                          154.84.198.0/24 maxlen: 24
                          154.84.240.0/24 maxlen: 24
                          154.84.241.0/24 maxlen: 24
                          154.84.242.0/24 maxlen: 24
                          154.84.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 14:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111332 (0x1b2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  2 11:10:47 2026 GMT
            Not After : Feb  6 11:10:47 2026 GMT
        Subject: CN=6957a7bc-6ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:02:71:c7:3c:89:7a:6e:f6:5d:b2:dd:94:
                    ab:c4:54:fa:e2:be:59:85:ef:cf:3c:1b:11:a0:4b:
                    8e:bb:9e:12:55:3b:11:74:8e:a3:76:4e:7e:7d:be:
                    13:c0:0d:12:29:89:b7:08:31:4f:ea:d6:c2:e9:9b:
                    31:56:c1:f5:d2:f0:c1:b3:db:a0:c4:b9:aa:bd:3a:
                    47:17:63:62:8f:0d:71:63:c9:6d:a1:af:8a:91:ec:
                    5d:15:b6:f7:c6:17:f3:aa:a5:e7:df:48:33:a8:56:
                    9c:6d:5b:9b:fa:7f:44:67:93:cd:79:66:15:31:a9:
                    8b:1c:e7:c6:64:08:d0:22:dd:df:ac:b2:32:f0:8a:
                    ff:20:a6:0e:93:d8:5e:bc:69:84:fb:89:31:2d:00:
                    3a:f8:5a:38:b2:d7:74:fc:07:23:4a:7c:c7:5e:ac:
                    a7:9e:18:4f:9c:9f:63:45:57:7e:76:d2:3f:a0:9a:
                    f1:d4:f4:e4:1c:3c:54:4c:2f:ae:e5:d1:21:20:8f:
                    23:30:52:0a:eb:b4:80:f3:8a:63:15:a2:a1:9c:9a:
                    7c:66:e8:39:27:80:ad:69:ca:3d:f8:b1:4c:51:9d:
                    0e:25:a9:46:f7:e0:43:71:e7:9c:cf:9a:40:17:1a:
                    4c:82:8f:d3:d4:70:e5:b6:c4:b3:26:b0:29:1a:05:
                    d9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1E:1A:2D:2A:DD:34:67:7B:AE:22:D4:2F:AA:5C:B7:5E:0E:54:D2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B307E6D6E7CB11F090C423DBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.192.0/24
                  154.84.194.0-154.84.198.255
                  154.84.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:54:21:a1:06:b5:10:42:90:22:08:19:d4:c8:f9:30:77:d1:
         32:75:aa:45:85:75:d5:b7:5b:57:d4:dc:d5:db:9c:b6:26:a4:
         64:09:ce:19:a9:28:ca:38:cf:6e:fd:6c:4c:af:ce:c1:d7:c0:
         a6:4e:50:52:47:2a:dd:0a:fb:e0:ae:6b:c7:6c:df:c7:8d:fb:
         19:7f:fc:20:fc:0d:14:dc:76:35:18:61:25:c3:99:2e:b7:26:
         9e:55:05:6e:10:91:ee:4b:20:ae:1c:5d:ce:b8:2e:31:dc:5a:
         8c:8b:a8:45:71:47:46:dd:8c:b3:ca:3f:b9:ed:72:7d:1c:f7:
         72:b8:a7:d7:84:2c:43:d7:3c:90:cc:bd:03:50:34:b2:ac:8c:
         b5:d3:0c:b7:44:0c:07:41:ea:dd:be:26:78:e6:40:53:4c:b7:
         5f:b8:90:6b:95:91:1d:8b:6a:1a:cf:8f:4f:64:d1:1d:4a:6e:
         dd:7d:f7:7f:17:8a:f9:cd:ff:7f:14:41:e1:db:14:ff:93:21:
         19:86:3f:1a:d8:e8:79:df:dc:0f:3e:9d:52:cb:89:38:98:c2:
         ca:7c:8c:60:f6:0b:54:7c:90:e0:8d:65:e7:4c:8b:12:28:84:
         e7:28:d7:3f:8a:be:6d:a1:2f:1d:fa:e1:d7:97:7a:6c:44:2e:
         c7:1d:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:53 2026 by rpki-client