This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E19B8038DFCF11F0B7026CAADAE4EC9C.roa
File:                     E19B8038DFCF11F0B7026CAADAE4EC9C.roa (raw, json)
Hash identifier:          dhNi1kLW+N7NVf7nAk9EMLPyzip/E5Zwhct6N5VAAcI=
Subject key identifier:   01:23:3C:26:1D:E2:34:BF:2C:4E:30:0F:0D:80:57:94:BC:96:63:86
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B014
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E19B8038DFCF11F0B7026CAADAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 07:20:39 +0000
ROA not before:           Tue 23 Dec 2025 07:20:34 +0000
ROA not after:            Mon 26 Jan 2026 07:20:34 +0000
asID:                     6079
IP address blocks:        154.83.176.0/24 maxlen: 24
                          154.83.177.0/24 maxlen: 24
                          154.83.180.0/24 maxlen: 24
                          154.83.181.0/24 maxlen: 24
                          154.83.182.0/24 maxlen: 24
                          154.83.183.0/24 maxlen: 24
                          154.83.192.0/24 maxlen: 24
                          154.83.193.0/24 maxlen: 24
                          154.83.194.0/24 maxlen: 24
                          154.83.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 13:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110612 (0x1b014)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 23 07:20:34 2025 GMT
            Not After : Jan 26 07:20:34 2026 GMT
        Subject: CN=694a42c7-4fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:b2:1b:bd:90:da:49:13:41:fa:8e:cd:6b:
                    8f:d2:52:7d:1e:15:07:f6:09:ca:71:05:ed:76:09:
                    66:91:54:41:dc:5a:7f:85:4e:cb:ba:2c:ac:43:b7:
                    4d:14:b8:5b:ba:d3:2a:7e:e3:cd:6d:a0:89:a2:f8:
                    9d:24:67:d3:4b:1a:23:f7:20:25:28:96:2d:28:2d:
                    e5:07:ec:7b:1a:0c:db:d8:f1:40:87:bd:a8:bc:08:
                    7a:d1:d3:3a:1e:7c:26:1a:d0:fa:7c:bd:4c:fd:50:
                    34:98:2a:ea:77:c4:58:0c:47:e1:1e:eb:cc:96:eb:
                    06:09:db:d4:8e:e1:a4:39:ec:a9:da:82:42:89:f4:
                    88:e8:45:4c:01:3d:66:42:6a:44:73:db:7f:80:c7:
                    5f:d3:dc:94:df:6e:44:b6:66:3a:b5:f3:3b:cb:37:
                    84:fe:bd:a1:68:b3:c2:8a:21:93:f3:12:06:a0:15:
                    34:a8:15:39:54:26:0d:7f:ae:2e:2f:9d:fa:c7:6e:
                    66:bf:51:d3:af:97:b9:bc:f6:14:b7:8b:ed:28:4d:
                    75:04:a2:97:e7:62:6c:1e:a8:8c:0d:f2:b2:13:c3:
                    c7:30:1a:1a:0a:12:ac:22:21:11:2f:17:cb:44:f9:
                    9b:34:1a:ee:53:1e:0e:87:3f:7a:ee:02:c6:8a:4b:
                    59:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:23:3C:26:1D:E2:34:BF:2C:4E:30:0F:0D:80:57:94:BC:96:63:86
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E19B8038DFCF11F0B7026CAADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.176.0/23
                  154.83.180.0/22
                  154.83.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:c8:63:93:30:64:a8:99:50:49:1d:b0:55:c3:3c:75:7c:cf:
         17:02:bb:f3:19:37:97:37:0b:fe:a9:ae:73:51:75:14:0c:d0:
         4a:35:dd:6c:51:e7:61:4b:a0:96:f2:11:77:6c:0a:5b:00:ba:
         39:87:d3:2e:1f:3b:49:69:1f:35:5f:2f:00:51:c3:e5:c3:13:
         fb:6a:14:22:6a:ae:43:10:39:27:6f:c5:f2:df:38:38:0f:b2:
         6c:8d:8e:90:c1:6e:d9:a0:7b:d3:e1:a6:54:72:04:37:67:00:
         da:32:90:a4:20:4a:1c:80:87:28:9f:65:8c:d0:81:38:6a:85:
         5e:b3:71:db:73:fb:c4:a0:d4:2f:dc:df:97:e6:0a:2a:a7:11:
         29:e5:60:f2:78:9c:c6:b2:92:1f:ab:03:52:b5:fc:98:d9:39:
         8c:87:7b:81:7c:07:22:dd:ba:30:c1:14:e3:67:10:c0:87:6a:
         f3:1d:bf:da:34:8f:35:61:cb:92:2c:88:c4:53:d5:c9:c2:51:
         80:51:1d:ec:9c:5c:89:d0:75:ef:6f:24:5d:6e:1b:87:f0:7f:
         91:27:a3:87:c9:55:85:50:41:e2:ca:ff:21:e9:89:a5:01:ad:
         5d:9f:62:9f:47:9b:79:cd:9b:e1:7e:d0:85:41:19:61:0e:6e:
         54:41:0a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:54:16 2026 by rpki-client