This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2606DD48D5B311F0A996B7BBDAE4EC9C.roa
File:                     2606DD48D5B311F0A996B7BBDAE4EC9C.roa (raw, json)
Hash identifier:          ZN2ktgbss9/pK53MAQc/CPs+tt8Lbv0qsmHvpbtWNks=
Subject key identifier:   E3:86:2C:27:14:DA:7E:48:91:67:98:60:11:84:1A:70:43:A5:7E:96
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AD93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2606DD48D5B311F0A996B7BBDAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 10:29:47 +0000
ROA not before:           Wed 10 Dec 2025 10:29:41 +0000
ROA not after:            Sat 20 Dec 2025 10:29:41 +0000
asID:                     140224
IP address blocks:        154.205.192.0/24 maxlen: 24
                          154.205.193.0/24 maxlen: 24
                          154.205.194.0/24 maxlen: 24
                          154.205.195.0/24 maxlen: 24
                          154.205.196.0/24 maxlen: 24
                          154.205.197.0/24 maxlen: 24
                          154.205.198.0/24 maxlen: 24
                          154.205.199.0/24 maxlen: 24
                          154.205.200.0/24 maxlen: 24
                          154.205.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 10:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109971 (0x1ad93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 10 10:29:41 2025 GMT
            Not After : Dec 20 10:29:41 2025 GMT
        Subject: CN=69394b9a-ec1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:2d:0c:05:06:ac:b4:34:e5:6b:c2:58:74:
                    ef:0b:42:06:d4:a0:bc:12:70:8f:16:70:ef:9a:3a:
                    11:45:79:12:54:f2:ed:00:85:5c:f4:ff:73:50:7f:
                    93:10:28:31:d4:a6:fb:a5:df:e2:cd:6c:a0:5f:1c:
                    43:80:fb:27:82:ba:e3:57:d8:71:66:ed:ec:c3:2f:
                    4c:60:dd:6b:77:36:e0:dd:a0:24:58:a0:c2:9a:69:
                    27:a5:6f:72:d5:ae:3c:9e:4b:be:42:84:9c:58:98:
                    d7:33:8f:db:e8:f4:4a:e2:a3:48:fe:77:30:d6:77:
                    a6:a3:58:a8:04:9b:74:d0:55:ab:6a:d9:c1:04:85:
                    a1:13:4c:ec:01:4d:98:50:d8:d0:05:c5:6a:a3:10:
                    df:14:10:53:01:6f:b8:69:a0:cd:79:9c:2d:02:63:
                    d7:93:c8:a8:08:bb:9c:b0:a0:d2:ee:22:46:7f:a1:
                    9d:e0:26:1c:84:2d:15:eb:b0:60:c7:c8:9c:03:08:
                    72:b2:43:36:b3:22:c2:b0:e9:42:28:f3:ff:39:3a:
                    4b:ef:77:98:10:76:8f:a5:98:b7:1e:c8:b5:b9:4f:
                    ce:0e:38:b7:5c:c0:55:cc:13:ac:93:8f:5b:64:70:
                    e3:01:e3:6c:fb:b6:c5:51:18:4e:5a:53:35:b1:43:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:86:2C:27:14:DA:7E:48:91:67:98:60:11:84:1A:70:43:A5:7E:96
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2606DD48D5B311F0A996B7BBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.192.0-154.205.201.255

    Signature Algorithm: sha256WithRSAEncryption
         19:24:0f:fe:19:c4:2e:56:10:53:b1:23:f3:b5:b7:9a:23:b7:
         1d:91:65:d4:7b:00:eb:67:08:4b:6f:0e:77:c2:e5:d1:43:6f:
         b9:fa:87:0b:fd:67:9c:3d:ad:b8:1f:d3:1b:ec:5e:30:15:de:
         1e:da:50:17:35:15:82:cf:05:c1:36:fb:42:c0:53:46:de:43:
         b2:2b:35:35:74:d6:06:ff:b2:fc:31:87:4a:6b:a3:d8:e5:28:
         ed:b2:24:a0:b2:f7:4f:1f:a8:b4:44:54:4a:5d:77:76:65:e9:
         88:0a:8e:b9:9b:1a:9d:28:57:5f:37:db:4e:8f:a5:32:e8:90:
         9b:3b:fa:da:22:b6:c7:b8:03:b0:58:d3:f5:55:6f:f8:84:8f:
         5d:23:87:54:c2:eb:12:69:6b:cd:f5:31:34:67:9a:86:2c:27:
         21:55:b0:42:86:65:15:d1:2f:cf:0c:99:f6:87:4f:71:4f:d6:
         ee:4f:64:84:e8:ef:b6:3f:86:ff:07:fc:6f:b2:0b:b8:78:0d:
         73:8f:04:4d:2f:36:91:e6:b0:f5:33:f0:08:1b:ee:03:5b:12:
         a1:d8:a9:90:18:f7:25:f5:50:62:63:d1:13:6c:0d:34:5a:0c:
         af:03:1e:2f:4e:a8:30:5e:64:f0:01:25:e5:c0:c1:14:56:2c:
         5a:c2:4e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:40 2025 by rpki-client