This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65CCDD8E6E411F08DFB5CC7DAE4EC9C.roa
File:                     C65CCDD8E6E411F08DFB5CC7DAE4EC9C.roa (raw, json)
Hash identifier:          4KrAaA77X8QKQWuBKcSG+TKCAsFaUYXwWavdWCsgRZE=
Subject key identifier:   DD:2E:49:17:0D:42:E0:21:19:5A:8C:C1:0F:CB:7F:82:9B:02:31:C3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B232
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65CCDD8E6E411F08DFB5CC7DAE4EC9C.roa
Signing time:             Thu 01 Jan 2026 07:37:51 +0000
ROA not before:           Thu 01 Jan 2026 07:37:46 +0000
ROA not after:            Thu 05 Feb 2026 07:37:46 +0000
asID:                     44559
IP address blocks:        154.209.19.0/24 maxlen: 24
                          154.209.95.0/24 maxlen: 24
                          154.209.132.0/24 maxlen: 24
                          154.209.133.0/24 maxlen: 24
                          154.209.135.0/24 maxlen: 24
                          154.209.136.0/24 maxlen: 24
                          154.209.137.0/24 maxlen: 24
                          154.209.138.0/24 maxlen: 24
                          154.209.139.0/24 maxlen: 24
                          154.209.140.0/24 maxlen: 24
                          154.209.141.0/24 maxlen: 24
                          154.209.142.0/24 maxlen: 24
                          154.209.143.0/24 maxlen: 24
                          154.209.147.0/24 maxlen: 24
                          154.209.149.0/24 maxlen: 24
                          154.209.150.0/24 maxlen: 24
                          154.209.151.0/24 maxlen: 24
                          154.209.156.0/24 maxlen: 24
                          154.209.159.0/24 maxlen: 24
                          154.209.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 13:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111154 (0x1b232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  1 07:37:46 2026 GMT
            Not After : Feb  5 07:37:46 2026 GMT
        Subject: CN=6956244f-9c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ac:a2:47:27:cb:5f:81:58:15:bf:82:75:94:
                    56:a7:55:f3:b4:c0:45:eb:b7:4c:d5:70:c3:7a:ba:
                    3e:21:20:45:0c:7f:03:8c:62:5a:71:13:85:c4:14:
                    51:23:aa:fc:31:f9:e2:95:97:b4:18:03:7c:90:53:
                    a3:49:d3:95:ec:98:b7:8f:8f:b8:b0:07:86:86:c0:
                    f0:db:98:f8:74:d8:b0:46:86:19:28:ee:d1:0f:09:
                    c3:77:e7:58:9d:d5:f4:80:4b:07:1f:00:e3:b1:f3:
                    fb:67:ef:64:08:55:41:0c:a4:eb:b5:2b:2b:cc:f2:
                    32:71:a8:4d:b1:11:16:9a:23:19:07:10:3e:eb:e2:
                    50:bf:15:2b:48:b5:4c:78:b7:77:2f:d8:e2:56:cd:
                    b7:75:87:ef:d5:ca:7d:1f:16:d2:53:b1:20:39:50:
                    f1:40:d4:a4:df:58:b7:38:b8:cd:1e:0a:f0:e8:c5:
                    9d:fe:a1:dc:ed:cf:ea:e3:3d:c6:cb:92:3e:a8:61:
                    55:48:42:68:6b:92:cf:51:75:3e:b6:9f:82:cd:dd:
                    7a:cf:ce:bc:94:38:88:c4:b1:2a:25:2d:d1:80:b9:
                    36:83:03:36:bf:5f:c3:02:8a:e5:76:d5:09:af:44:
                    b6:e1:c5:41:d3:57:68:24:1d:c3:52:57:cd:df:91:
                    e2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2E:49:17:0D:42:E0:21:19:5A:8C:C1:0F:CB:7F:82:9B:02:31:C3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65CCDD8E6E411F08DFB5CC7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.19.0/24
                  154.209.95.0/24
                  154.209.132.0/23
                  154.209.135.0-154.209.143.255
                  154.209.147.0/24
                  154.209.149.0-154.209.151.255
                  154.209.156.0/24
                  154.209.159.0/24
                  154.209.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:76:87:de:1d:86:a2:46:0c:b3:86:68:15:42:4c:07:22:3f:
         da:f9:81:e4:d2:ea:67:1a:d5:67:44:4e:93:51:77:58:1b:2c:
         8d:2e:3e:e9:24:7e:26:16:42:7b:18:ab:02:01:c2:5d:53:7d:
         29:ba:29:24:01:2b:b5:eb:3b:a7:7e:c9:18:25:0a:78:04:57:
         6b:7c:b9:5c:2c:0d:20:5e:d7:8e:d9:79:9e:51:e0:5d:62:ad:
         2b:fd:14:6f:d1:6b:9b:98:f3:a4:d3:e9:4d:70:07:0e:a5:38:
         bd:84:d5:b3:20:2b:df:aa:c0:ef:62:93:45:5b:59:f6:bf:7b:
         6b:23:56:ca:17:88:3e:51:c5:34:49:2d:55:ed:10:af:5c:2f:
         6b:e9:77:d4:0a:a3:2d:b5:d6:67:0e:7c:8f:73:68:cd:40:47:
         e4:38:74:20:95:d7:e2:fb:b0:b4:18:dd:7f:68:b2:4a:9c:9a:
         54:d6:de:d0:69:8f:56:e4:07:4b:50:7c:5d:32:fb:ee:f7:bb:
         36:d8:d8:94:9d:3b:6f:92:ea:c7:e5:0b:30:bd:e9:a2:43:98:
         13:71:02:87:36:c9:dd:40:c8:73:37:7d:eb:fd:0f:a3:19:5b:
         0c:68:12:24:13:d8:bb:b8:f5:98:5e:3e:e1:f3:af:8a:d4:1d:
         74:59:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:21:55 2026 by rpki-client