This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29802628DC8E11F0988F03B8DAE4EC9C.roa
File:                     29802628DC8E11F0988F03B8DAE4EC9C.roa (raw, json)
Hash identifier:          tZSYSPMCbjk4O0OEAtGHpAtcKkQojDdt6d2L1hEEPPA=
Subject key identifier:   DE:6F:04:B2:DA:F6:30:96:3D:07:10:0F:52:59:01:57:74:CD:28:36
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29802628DC8E11F0988F03B8DAE4EC9C.roa
Signing time:             Fri 19 Dec 2025 03:52:39 +0000
ROA not before:           Fri 19 Dec 2025 03:52:33 +0000
ROA not after:            Sat 17 Jan 2026 03:52:33 +0000
asID:                     139057
IP address blocks:        154.85.64.0/24 maxlen: 24
                          154.85.65.0/24 maxlen: 24
                          154.85.66.0/24 maxlen: 24
                          154.85.68.0/24 maxlen: 24
                          154.85.69.0/24 maxlen: 24
                          154.85.70.0/24 maxlen: 24
                          154.85.71.0/24 maxlen: 24
                          154.85.72.0/24 maxlen: 24
                          154.85.73.0/24 maxlen: 24
                          154.85.74.0/24 maxlen: 24
                          154.85.75.0/24 maxlen: 24
                          154.85.76.0/24 maxlen: 24
                          154.85.77.0/24 maxlen: 24
                          154.85.78.0/24 maxlen: 24
                          154.85.79.0/24 maxlen: 24
                          154.85.83.0/24 maxlen: 24
                          154.85.84.0/24 maxlen: 24
                          154.85.85.0/24 maxlen: 24
                          154.85.86.0/24 maxlen: 24
                          154.85.87.0/24 maxlen: 24
                          154.85.88.0/24 maxlen: 24
                          154.85.90.0/24 maxlen: 24
                          154.85.91.0/24 maxlen: 24
                          154.85.92.0/24 maxlen: 24
                          154.85.93.0/24 maxlen: 24
                          154.85.94.0/24 maxlen: 24
                          154.85.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110462 (0x1af7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 19 03:52:33 2025 GMT
            Not After : Jan 17 03:52:33 2026 GMT
        Subject: CN=6944cc07-2e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:1e:78:76:d9:21:54:36:87:29:d5:5c:90:
                    c9:01:95:3e:56:d1:84:12:fa:22:3a:90:89:f0:94:
                    fc:19:f8:73:45:ce:7c:89:79:c1:cb:60:62:6a:72:
                    96:5d:2e:d7:ea:e0:59:45:0c:5f:30:c1:66:53:c5:
                    22:a7:51:df:83:04:d4:9f:93:66:44:06:f4:d0:66:
                    b2:50:05:92:5a:da:e6:f7:3f:ac:93:e7:46:d8:69:
                    1d:58:25:3b:d1:f1:a8:a0:ad:aa:7a:c2:9f:40:ca:
                    e3:65:17:46:38:40:56:47:1b:3f:dc:9b:f3:a2:97:
                    0e:17:52:e9:af:a1:15:be:14:3c:c0:f8:e7:e6:95:
                    ad:ed:12:3c:52:56:46:19:d9:e4:0d:fd:61:da:ee:
                    91:d7:bb:28:b7:9e:cf:6f:10:b7:de:03:ef:61:10:
                    41:fb:59:de:9f:de:65:d6:52:8f:ad:e1:ad:22:36:
                    8e:d9:84:8d:9d:b7:cd:19:8b:ff:60:95:a4:cd:d2:
                    f0:8f:58:fa:ba:62:4a:4b:dc:f6:19:a9:42:6b:97:
                    eb:47:4f:af:62:c6:fa:5d:1c:3f:0b:7b:b0:59:26:
                    89:5c:4e:2f:05:4c:be:4e:61:7c:7c:b8:7b:9c:46:
                    e4:e1:72:f3:53:68:61:03:a7:26:85:0f:8d:5a:c4:
                    dc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6F:04:B2:DA:F6:30:96:3D:07:10:0F:52:59:01:57:74:CD:28:36
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29802628DC8E11F0988F03B8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.64.0-154.85.66.255
                  154.85.68.0-154.85.79.255
                  154.85.83.0-154.85.88.255
                  154.85.90.0-154.85.95.255

    Signature Algorithm: sha256WithRSAEncryption
         ba:69:11:9a:13:10:52:e6:7e:3e:8c:37:0b:68:14:3a:e3:7d:
         ed:03:f2:ab:4e:ab:14:26:d6:4f:b0:1d:00:94:b4:82:46:d8:
         a7:a6:dd:29:7a:ff:12:5f:a7:c4:cf:82:23:82:df:b3:25:7b:
         fa:5d:0f:dc:c7:94:9e:9a:a6:72:b1:c8:59:f4:48:ad:7e:bd:
         0a:bf:18:18:4a:37:0e:7d:76:ec:0c:dc:33:3d:27:7a:1e:bf:
         e1:4a:3a:6d:54:bd:6a:76:73:94:df:df:68:f2:30:06:3c:ca:
         8b:77:4d:9b:c9:b4:a2:d7:f6:6e:88:7f:92:5b:54:96:e7:12:
         98:b6:ae:51:6c:c9:80:6e:33:cc:c0:21:74:c0:ef:4f:16:ad:
         44:5c:3a:75:a7:b1:81:56:06:d3:e7:95:b3:25:d4:c4:23:d7:
         23:79:ee:a8:1d:37:ba:ae:9f:91:f9:8e:6b:e6:fe:ce:03:5a:
         29:c3:0b:d3:2d:da:68:c1:54:8d:b6:88:20:af:63:7c:0f:d3:
         a9:c2:99:2c:2e:3c:da:75:3c:9e:c7:45:c9:72:c5:96:3a:8c:
         f6:fd:0e:9c:75:fa:95:99:37:30:63:db:41:cc:e3:56:ca:45:
         f2:19:ca:5d:24:d2:12:3b:06:c7:98:11:0a:cc:41:59:06:ef:
         24:ea:63:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:32 2025 by rpki-client