This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BCC28F4DBEA11F093640FB8DAE4EC9C.roa
File:                     2BCC28F4DBEA11F093640FB8DAE4EC9C.roa (raw, json)
Hash identifier:          N97JUZ2UHlcmMxxPU9mqERTBAPc2o/pP87iXLem2ykg=
Subject key identifier:   55:E5:76:42:FE:F0:95:E1:82:8B:9B:C2:AA:FD:10:F3:06:4D:68:5D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF5D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BCC28F4DBEA11F093640FB8DAE4EC9C.roa
Signing time:             Thu 18 Dec 2025 08:18:46 +0000
ROA not before:           Thu 18 Dec 2025 08:18:41 +0000
ROA not after:            Sat 27 Dec 2025 08:18:41 +0000
asID:                     140224
IP address blocks:        154.205.212.0/24 maxlen: 24
                          154.205.213.0/24 maxlen: 24
                          154.205.214.0/24 maxlen: 24
                          154.205.215.0/24 maxlen: 24
                          154.205.216.0/24 maxlen: 24
                          154.205.217.0/24 maxlen: 24
                          154.205.218.0/24 maxlen: 24
                          154.205.219.0/24 maxlen: 24
                          154.205.220.0/24 maxlen: 24
                          154.205.221.0/24 maxlen: 24
                          154.205.222.0/24 maxlen: 24
                          154.205.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110429 (0x1af5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 18 08:18:41 2025 GMT
            Not After : Dec 27 08:18:41 2025 GMT
        Subject: CN=6943b8e5-0f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:76:4d:3f:8d:32:e8:61:1d:48:9a:13:38:60:
                    e4:cb:74:82:8f:7b:05:05:e4:b6:2d:94:16:60:b0:
                    5b:56:d3:bd:ce:fb:29:46:be:59:36:7c:b8:25:f8:
                    38:68:ea:4f:6c:83:a8:c2:81:a5:dc:03:c5:b8:1d:
                    57:77:99:02:0b:0d:1a:8f:56:ad:13:19:44:c3:e5:
                    f5:d1:4e:e7:8b:ef:a5:fe:9f:df:0b:ef:71:2e:91:
                    3c:91:07:32:b3:e8:ee:8f:f8:e6:d4:f7:44:68:48:
                    0d:bd:b9:92:b5:d2:cd:d0:6c:2f:4c:fc:60:65:97:
                    a3:7a:bc:92:14:79:4d:29:11:72:0f:24:4d:ec:44:
                    75:a4:df:a8:ff:21:12:d9:f0:29:d8:6a:8b:58:31:
                    5e:cb:ac:0f:92:22:e4:fa:00:6d:de:bd:ba:10:93:
                    dd:67:5e:88:20:ea:60:9e:db:ec:b7:45:f7:70:35:
                    87:a4:3a:aa:96:c2:28:ac:62:a3:a0:e3:20:c1:a7:
                    57:b2:ad:3a:7c:81:a3:81:37:c0:da:bd:9d:6e:22:
                    2e:84:ac:b0:cd:c0:81:ad:86:4e:ba:9f:5d:51:28:
                    78:ea:71:b4:98:03:15:05:4e:27:da:66:de:e2:9a:
                    94:ca:0e:e7:43:a4:7c:b2:72:45:66:5b:9d:d1:8e:
                    2f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E5:76:42:FE:F0:95:E1:82:8B:9B:C2:AA:FD:10:F3:06:4D:68:5D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BCC28F4DBEA11F093640FB8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.212.0-154.205.223.255

    Signature Algorithm: sha256WithRSAEncryption
         1a:d4:91:a7:ee:a2:aa:2d:bf:d5:4e:5c:2d:d0:e4:5d:0f:d7:
         a5:6a:cb:05:ec:7c:77:fd:fd:11:22:2d:e2:b4:6b:6e:87:8a:
         86:89:b6:91:ef:40:62:d0:f7:65:08:da:cc:a4:6d:ed:0a:5e:
         ba:de:e2:ab:c9:c7:96:19:2a:85:8e:5f:6e:3e:95:fe:d9:4c:
         13:4a:99:55:74:1a:90:96:cb:b4:6b:8a:cf:78:4f:da:c6:17:
         1b:a6:52:58:9e:d8:e7:6a:9a:50:20:13:bf:2a:10:a5:6f:d8:
         65:f0:7a:6b:db:5d:15:6a:39:6c:3b:fe:44:03:a5:50:95:d7:
         c4:fb:ef:52:cc:0a:da:5c:be:31:54:13:63:42:5b:f3:8c:a7:
         ae:1d:08:35:bd:b3:e1:3d:4d:32:d5:dd:aa:5b:d4:7c:e8:b2:
         a5:a3:95:c1:a0:9c:37:55:2d:d8:85:70:84:28:72:b1:a4:e9:
         29:17:cb:3f:9d:2c:7f:a4:e6:9b:c2:ff:6a:d8:2b:40:05:a3:
         47:9e:5a:65:4d:a1:8a:56:14:74:ea:96:17:c4:7e:4a:b7:2e:
         2a:c5:ed:2f:3d:05:d3:c6:3b:4a:cb:bf:ae:74:75:02:b9:5a:
         22:8d:09:94:0b:dc:60:89:d4:13:ca:78:13:80:24:89:51:3e:
         67:d6:2b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:51 2025 by rpki-client