This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E77E611EE6E611F0825B6ED4DAE4EC9C.roa
File:                     E77E611EE6E611F0825B6ED4DAE4EC9C.roa (raw, json)
Hash identifier:          e84sEnRrL2ZWJKo/GS69tPyMvE89Xu0vqOJmGtcTX3w=
Subject key identifier:   FA:FB:41:22:CD:F0:02:63:BB:22:26:18:55:9B:51:19:41:3F:BA:AE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B23A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E77E611EE6E611F0825B6ED4DAE4EC9C.roa
Signing time:             Thu 01 Jan 2026 07:53:05 +0000
ROA not before:           Thu 01 Jan 2026 07:53:00 +0000
ROA not after:            Sun 08 Feb 2026 07:53:00 +0000
asID:                     44559
IP address blocks:        154.209.144.0/24 maxlen: 24
                          154.209.145.0/24 maxlen: 24
                          154.209.152.0/24 maxlen: 24
                          154.209.153.0/24 maxlen: 24
                          154.209.154.0/24 maxlen: 24
                          154.209.155.0/24 maxlen: 24
                          154.209.157.0/24 maxlen: 24
                          154.209.158.0/24 maxlen: 24
                          154.209.195.0/24 maxlen: 24
                          154.209.196.0/24 maxlen: 24
                          154.209.206.0/24 maxlen: 24
                          154.219.73.0/24 maxlen: 24
                          154.219.74.0/24 maxlen: 24
                          154.219.75.0/24 maxlen: 24
                          154.219.76.0/24 maxlen: 24
                          154.219.77.0/24 maxlen: 24
                          154.219.78.0/24 maxlen: 24
                          154.219.79.0/24 maxlen: 24
                          154.219.80.0/24 maxlen: 24
                          154.219.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 13:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111162 (0x1b23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  1 07:53:00 2026 GMT
            Not After : Feb  8 07:53:00 2026 GMT
        Subject: CN=695627e1-ea3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:57:21:e2:5b:8d:f1:0c:4e:64:3c:57:2a:ab:
                    87:98:72:cf:f3:d8:90:fd:04:91:d5:75:cd:46:a5:
                    8a:6e:8d:9f:87:b8:bf:c9:8a:3a:d4:c4:d6:ba:5c:
                    50:43:ab:8a:83:1a:6d:04:88:88:fc:9d:79:c9:cd:
                    39:01:ab:97:4d:11:e1:3a:bf:da:58:54:30:84:a2:
                    75:b4:52:f4:f4:c0:35:61:e5:95:fc:8e:4b:4d:6f:
                    af:77:72:76:6e:55:41:dd:ed:5e:78:5c:37:5e:58:
                    4f:ab:c8:30:8f:64:fb:d5:f6:d8:f2:4c:5b:3c:cc:
                    33:6f:21:3a:1f:90:8b:c7:7d:b6:c5:28:4d:6f:bc:
                    a2:e8:62:ea:df:98:81:2a:2b:35:c3:2e:66:7d:85:
                    82:75:34:ee:cc:b2:a2:72:c9:73:aa:1c:b8:34:30:
                    f9:1d:25:30:9d:8b:07:f3:ea:0a:94:12:2e:2f:1b:
                    a9:e1:16:c2:62:57:aa:bf:8e:d7:59:11:ea:e3:61:
                    9f:5e:b4:63:d4:bf:a3:38:03:42:2c:7d:8b:34:65:
                    e4:73:e2:0f:37:18:a5:ad:9d:c7:7c:65:db:06:7d:
                    56:af:ef:9a:83:f8:da:79:60:47:fd:b4:07:83:77:
                    b0:b8:b2:ed:db:d2:24:31:eb:61:e5:4f:74:c1:67:
                    00:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FB:41:22:CD:F0:02:63:BB:22:26:18:55:9B:51:19:41:3F:BA:AE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E77E611EE6E611F0825B6ED4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.144.0/23
                  154.209.152.0/22
                  154.209.157.0-154.209.158.255
                  154.209.195.0-154.209.196.255
                  154.209.206.0/24
                  154.219.73.0-154.219.81.255

    Signature Algorithm: sha256WithRSAEncryption
         09:8d:aa:3c:51:5e:47:25:1b:7c:4a:0d:0e:85:63:6e:8d:c7:
         c1:92:d4:49:06:00:5b:5a:67:90:14:29:3c:2d:e2:2c:8c:32:
         d5:31:04:0b:18:e4:aa:ee:b8:92:ee:6d:dd:dd:40:0f:16:a6:
         f9:bf:42:0f:61:24:d3:65:7b:a0:c0:e6:5d:8c:4c:a6:fb:a6:
         3e:cd:3b:d1:24:d2:15:37:39:ef:96:10:3e:1d:83:7f:ca:80:
         7f:60:af:c0:9b:82:44:70:ee:bd:65:07:50:e2:0c:ed:66:ba:
         d4:04:3a:3a:07:4c:9a:56:79:52:de:cb:c4:fe:21:4d:b4:2e:
         bb:a5:4e:61:eb:1e:26:5d:15:96:79:bf:af:6f:d2:8e:b1:18:
         ce:f2:59:35:76:05:47:0a:96:b6:03:37:fb:55:88:8c:9a:aa:
         f0:ad:32:c9:ab:c0:c3:bf:e2:1e:16:a2:1c:ed:31:dc:1e:0b:
         60:1d:96:a5:91:a1:7a:f5:84:31:34:cc:de:ea:12:de:6b:d8:
         dd:f5:51:c0:d5:7a:8f:dd:1a:89:dc:bd:09:78:6f:33:38:1d:
         e8:64:30:98:09:ef:17:37:a6:26:da:db:8d:b3:76:ca:dc:68:
         9b:6b:b7:76:b7:b7:2a:6b:3d:d0:fb:31:ac:f6:59:6c:34:6c:
         36:20:49:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:22:16 2026 by rpki-client