This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6139608E6E711F0AFA004DBDAE4EC9C.roa
File:                     F6139608E6E711F0AFA004DBDAE4EC9C.roa (raw, json)
Hash identifier:          +UkVVuhZ+4jURzJyvva+MCZYzK04TEtW+KYE6QiDveM=
Subject key identifier:   BE:51:D1:6D:A3:AC:BE:7E:1A:C0:71:07:FF:6C:D5:BE:B2:AA:D4:AF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B23E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6139608E6E711F0AFA004DBDAE4EC9C.roa
Signing time:             Thu 01 Jan 2026 08:00:39 +0000
ROA not before:           Thu 01 Jan 2026 08:00:34 +0000
ROA not after:            Sun 08 Feb 2026 08:00:34 +0000
asID:                     44559
IP address blocks:        154.219.65.0/24 maxlen: 24
                          154.219.66.0/24 maxlen: 24
                          154.219.67.0/24 maxlen: 24
                          154.219.68.0/24 maxlen: 24
                          154.219.69.0/24 maxlen: 24
                          154.219.70.0/24 maxlen: 24
                          154.219.71.0/24 maxlen: 24
                          154.219.72.0/24 maxlen: 24
                          154.219.82.0/24 maxlen: 24
                          154.219.83.0/24 maxlen: 24
                          154.219.84.0/24 maxlen: 24
                          154.219.85.0/24 maxlen: 24
                          154.219.86.0/24 maxlen: 24
                          154.219.87.0/24 maxlen: 24
                          154.219.88.0/24 maxlen: 24
                          154.219.89.0/24 maxlen: 24
                          154.219.90.0/24 maxlen: 24
                          154.219.91.0/24 maxlen: 24
                          154.219.92.0/24 maxlen: 24
                          154.219.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 13:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111166 (0x1b23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  1 08:00:34 2026 GMT
            Not After : Feb  8 08:00:34 2026 GMT
        Subject: CN=695629a7-f013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:3f:b7:95:a9:d8:9e:63:f3:ad:93:7f:3b:
                    f2:e6:85:91:7e:cd:0d:e9:89:08:2a:67:95:21:0a:
                    f8:ce:9a:63:6a:47:4d:81:a7:77:d4:74:30:bc:98:
                    e5:79:15:3a:0a:d5:ae:8f:09:34:54:93:a9:91:f5:
                    47:8e:7c:6d:c9:2f:b1:6a:c4:df:44:49:2f:dc:4e:
                    9c:55:da:ea:63:eb:20:e8:d3:e7:f5:f0:ea:c7:cd:
                    46:ce:92:1a:a7:e0:2d:ba:fb:bf:62:28:c8:29:b0:
                    8c:0c:15:e4:89:de:a9:99:0f:68:35:21:67:a0:95:
                    0d:82:86:f1:8d:61:5d:a0:ae:7c:7b:45:14:94:60:
                    63:2b:f7:fa:19:c4:f6:a8:0e:2c:ea:a7:d7:4b:22:
                    1a:92:14:ff:ac:e9:8a:4d:54:6c:3b:ee:fc:67:3d:
                    ab:65:50:9b:a6:cc:c0:d0:d3:96:99:f2:a7:a4:54:
                    03:34:c4:38:e5:5e:fb:82:44:2f:b0:40:33:60:28:
                    75:c4:eb:ca:4c:73:fe:e6:96:ef:7d:e3:55:52:eb:
                    da:7c:fe:dd:82:89:87:c3:2b:1a:ce:52:ca:29:1e:
                    9f:59:01:fd:73:47:71:ec:a1:25:f4:a4:5d:39:7c:
                    c6:76:f5:ac:9e:be:cb:1b:a8:4f:c3:4a:b2:76:b6:
                    1a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:51:D1:6D:A3:AC:BE:7E:1A:C0:71:07:FF:6C:D5:BE:B2:AA:D4:AF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6139608E6E711F0AFA004DBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.65.0-154.219.72.255
                  154.219.82.0-154.219.93.255

    Signature Algorithm: sha256WithRSAEncryption
         a7:d5:12:47:1e:aa:10:cb:dc:a9:9f:7b:85:52:67:6c:bf:28:
         06:b0:72:7e:25:94:aa:03:af:00:8c:4d:13:78:f2:1c:68:64:
         cc:9f:d6:0f:59:4e:9b:ba:f2:fc:32:40:ac:16:de:c8:6e:55:
         ee:02:5c:31:25:ec:e6:72:33:5e:1a:d9:bb:85:ef:c6:42:60:
         17:62:39:db:4c:ac:8f:08:69:5f:89:87:93:11:71:0c:e5:12:
         70:5f:b6:62:96:34:81:c8:2d:90:43:d9:6a:ae:83:d7:80:01:
         8f:e1:ac:b7:79:40:a2:61:c7:5a:68:a8:5f:d6:1a:c0:03:c0:
         f2:4d:73:62:e6:69:bc:29:a8:ba:b2:1a:e6:df:15:70:85:9c:
         84:43:47:3f:05:6e:14:ed:44:c9:71:ce:c6:63:7a:d5:e0:ce:
         62:0f:c3:fe:6f:62:fd:e6:16:f7:20:30:38:41:16:9b:ba:ee:
         f6:27:73:e0:49:31:a5:5e:b2:b1:df:e5:76:2b:0d:d7:c2:c8:
         2c:65:f2:c5:78:01:f1:59:32:22:af:f3:65:b2:15:de:df:e7:
         04:dc:dc:f4:6f:6f:06:14:f2:59:8c:28:27:24:04:8a:e3:04:
         23:da:1b:31:37:3e:ca:97:33:ca:27:67:7c:90:f7:e5:aa:90:
         d7:84:24:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 01:22:15 2026 by rpki-client