This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CCA74B8DB9011F0941FDAF4DAE4EC9C.roa
File:                     2CCA74B8DB9011F0941FDAF4DAE4EC9C.roa (raw, json)
Hash identifier:          FYlYIbRa6h3p5964bek9V9CXLyiSDdmrwV/vbEDz/xs=
Subject key identifier:   D6:37:9D:79:92:D0:0B:08:D9:1B:FC:FC:81:DB:A8:98:7E:29:FA:C2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CCA74B8DB9011F0941FDAF4DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 21:34:32 +0000
ROA not before:           Wed 17 Dec 2025 21:34:28 +0000
ROA not after:            Wed 24 Dec 2025 21:34:28 +0000
asID:                     9304
IP address blocks:        154.92.192.0/24 maxlen: 24
                          154.92.193.0/24 maxlen: 24
                          154.92.194.0/24 maxlen: 24
                          154.92.195.0/24 maxlen: 24
                          154.92.196.0/24 maxlen: 24
                          154.92.197.0/24 maxlen: 24
                          154.92.200.0/24 maxlen: 24
                          154.92.201.0/24 maxlen: 24
                          154.92.202.0/24 maxlen: 24
                          154.92.203.0/24 maxlen: 24
                          154.92.204.0/24 maxlen: 24
                          154.92.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110403 (0x1af43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 21:34:28 2025 GMT
            Not After : Dec 24 21:34:28 2025 GMT
        Subject: CN=694321e8-251d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c4:cf:2e:cd:e5:af:ea:40:4c:3a:7e:45:0d:
                    d1:ba:6e:2f:a6:24:92:aa:1b:97:49:2b:bf:17:a3:
                    94:b2:1b:4d:77:24:d1:b1:71:62:5b:88:a7:b7:da:
                    c8:57:be:11:81:5b:5d:4d:aa:66:07:d9:f6:fd:08:
                    e2:7f:78:c9:a2:8b:aa:41:55:3f:5f:90:b9:72:1d:
                    4d:4c:f2:13:82:7c:1d:fd:f0:86:a8:c4:0d:c3:5c:
                    3c:92:4e:a9:e9:ec:1a:46:3c:4b:95:3a:05:bf:d5:
                    5d:2d:62:18:99:6a:fc:e6:a6:63:ed:0f:bb:a9:c6:
                    03:d2:a8:65:87:e2:8b:34:46:37:4b:10:d3:65:70:
                    77:5a:9a:4c:7e:6a:06:db:ee:d6:e9:d9:fe:fc:e1:
                    d7:31:b3:1d:c9:b1:8b:c3:83:7b:f5:d9:67:e0:8e:
                    b1:59:8a:90:51:ec:fb:7f:a7:38:ac:ed:af:a8:07:
                    9b:9e:fe:fa:60:95:cc:d4:e6:ea:e7:c1:d5:1f:59:
                    27:02:8b:83:2d:12:dd:8b:48:cb:17:8b:a8:f5:b5:
                    b8:6a:0f:f2:b5:a7:e4:08:23:df:82:fc:34:58:fb:
                    b7:47:a6:70:0e:87:39:34:41:23:a7:d8:34:45:72:
                    db:af:62:e3:44:dd:78:7e:19:03:37:cf:00:6d:9c:
                    e2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:37:9D:79:92:D0:0B:08:D9:1B:FC:FC:81:DB:A8:98:7E:29:FA:C2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CCA74B8DB9011F0941FDAF4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.192.0-154.92.197.255
                  154.92.200.0-154.92.204.255
                  154.92.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:14:c9:60:52:3a:a7:87:39:da:92:37:91:64:30:4a:80:b1:
         20:5c:68:22:c6:d0:23:a1:52:ce:f1:4d:10:99:57:63:c5:61:
         91:20:e4:c0:c6:dc:f2:60:ab:80:69:e4:59:6f:3a:d5:8f:82:
         70:5d:2b:1d:58:4f:9a:16:09:ae:05:2f:ab:77:eb:69:42:9e:
         3c:55:37:b2:72:c8:ae:0d:5f:c3:9e:5b:bb:f0:a4:a1:92:51:
         cc:7f:6f:4a:1d:a0:11:7d:8b:7c:13:25:cf:2e:c1:98:c7:23:
         03:90:23:48:23:eb:7d:b4:6e:0b:80:80:53:0b:8c:81:b9:e2:
         36:b2:6c:4e:d2:18:82:c6:23:67:e0:30:22:c2:8a:b9:8d:41:
         0c:d4:16:ea:23:43:82:5b:dd:26:39:63:a8:5c:e0:85:8c:a0:
         d7:c4:9d:ac:e0:a3:05:be:15:13:5b:20:70:cf:cc:2b:f3:f8:
         a9:7f:22:85:51:5d:aa:7d:f6:12:61:89:46:fc:46:84:34:f0:
         7c:de:8a:50:b3:2b:3d:5b:e6:ae:da:22:11:1c:05:ba:0a:c8:
         cd:a0:85:8e:28:bc:d2:78:64:4c:02:93:34:56:e0:8d:f0:cf:
         14:6d:e9:c5:94:2e:37:99:27:9d:97:40:6d:f6:73:db:e4:e2:
         7a:49:55:91
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAa9DMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjE3MjEzNDI4WhcNMjUxMjI0MjEzNDI4WjAYMRYw
FAYDVQQDEw02OTQzMjFlOC0yNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6sTPLs3lr+pATDp+RQ3Rum4vpiSSqhuXSSu/F6OUshtNdyTRsXFiW4in
t9rIV74RgVtdTapmB9n2/Qjif3jJoouqQVU/X5C5ch1NTPITgnwd/fCGqMQNw1w8
kk6p6ewaRjxLlToFv9VdLWIYmWr85qZj7Q+7qcYD0qhlh+KLNEY3SxDTZXB3WppM
fmoG2+7W6dn+/OHXMbMdybGLw4N79dln4I6xWYqQUez7f6c4rO2vqAebnv76YJXM
1Obq58HVH1knAouDLRLdi0jLF4uo9bW4ag/ytafkCCPfgvw0WPu3R6ZwDoc5NEEj
p9g0RXLbr2LjRN14fhkDN88AbZziNwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFNY3
nXmS0AsI2Rv8/IHbqJh+KfrCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQ0NBNzRCOERCOTAxMUYwOTQxRkRBRjREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAaaXMADBAGaXMQwDAME
A5pcyAMEAJpczAMEAJpc1zANBgkqhkiG9w0BAQsFAAOCAQEADxTJYFI6p4c52pI3
kWQwSoCxIFxoIsbQI6FSzvFNEJlXY8VhkSDkwMbc8mCrgGnkWW861Y+CcF0rHVhP
mhYJrgUvq3fraUKePFU3snLIrg1fw55bu/CkoZJRzH9vSh2gEX2LfBMlzy7BmMcj
A5AjSCPrfbRuC4CAUwuMgbniNrJsTtIYgsYjZ+AwIsKKuY1BDNQW6iNDglvdJjlj
qFzghYyg18SdrOCjBb4VE1sgcM/MK/P4qX8ihVFdqn32EmGJRvxGhDTwfN6KULMr
PVvmrtoiERwFugrIzaCFjii80nhkTAKTNFbgjfDPFG3pxZQuN5knnZdAbfZz2+Ti
eklVkQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:15 2025 by rpki-client