This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32412B22DFEF11F08B8BCAE9DAE4EC9C.roa
File:                     32412B22DFEF11F08B8BCAE9DAE4EC9C.roa (raw, json)
Hash identifier:          f9gVxWj9g64NV8sqU/SmQAJVDNS8mb7rqvcZH+vb3DU=
Subject key identifier:   AE:9C:03:1C:ED:1B:6E:6B:6A:10:A9:92:46:2A:8D:83:0A:40:C3:04
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B031
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32412B22DFEF11F08B8BCAE9DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 11:04:49 +0000
ROA not before:           Tue 23 Dec 2025 11:04:44 +0000
ROA not after:            Tue 27 Jan 2026 11:04:44 +0000
asID:                     395793
IP address blocks:        154.196.210.0/24 maxlen: 24
                          154.196.211.0/24 maxlen: 24
                          154.196.212.0/24 maxlen: 24
                          154.200.63.0/24 maxlen: 24
                          154.200.80.0/21 maxlen: 24
                          154.223.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 18:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110641 (0x1b031)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 23 11:04:44 2025 GMT
            Not After : Jan 27 11:04:44 2026 GMT
        Subject: CN=694a7750-5b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:34:13:40:2c:b1:ef:67:a8:5d:a3:32:62:38:
                    8a:34:e3:e6:c9:42:bd:2a:53:95:c5:aa:67:28:dd:
                    e0:d3:0c:59:de:35:71:41:bb:f1:f0:dd:fa:e5:c2:
                    5d:89:2b:95:77:e9:3a:de:47:08:a8:6e:fa:e4:4d:
                    0e:f2:61:49:a8:7d:c8:04:2a:15:4b:71:97:c2:2e:
                    1f:56:e1:b9:2b:d3:d3:82:19:47:85:ff:db:45:d6:
                    cf:31:32:43:0c:c1:9d:67:75:53:e2:d1:d5:e4:a2:
                    67:b0:56:0e:28:18:fb:dc:81:dd:57:11:dd:57:d3:
                    44:14:45:43:70:ba:04:db:e5:61:ec:ba:44:e5:cc:
                    2b:ad:9d:6a:76:da:37:a0:29:0e:5b:f7:a7:48:11:
                    75:d4:2a:73:c1:56:70:93:a8:a3:cb:5b:1c:94:84:
                    53:3e:05:fe:70:c4:1d:42:0c:b4:03:93:83:36:a2:
                    5c:f6:22:d2:7e:be:a1:98:14:d7:73:3f:58:db:4c:
                    e6:34:68:b1:45:fb:fb:11:fd:19:b9:e1:df:13:5e:
                    96:f7:e6:aa:e8:00:cd:50:25:3d:c4:6d:22:58:df:
                    cd:c4:eb:58:91:b6:6a:04:a4:55:4c:03:2e:8f:4f:
                    2e:1c:f8:4e:4d:63:92:3c:2f:0d:98:99:23:73:50:
                    37:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9C:03:1C:ED:1B:6E:6B:6A:10:A9:92:46:2A:8D:83:0A:40:C3:04
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32412B22DFEF11F08B8BCAE9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.210.0-154.196.212.255
                  154.200.63.0/24
                  154.200.80.0/21
                  154.223.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:99:35:6c:0b:e8:e1:ec:5f:39:95:d5:4d:f2:d4:10:4d:27:
         bb:47:73:5d:00:c2:1f:c4:4f:52:f2:ac:09:21:a3:5c:19:a5:
         73:38:9f:da:04:5e:6e:cb:0c:b5:6b:13:02:0b:45:a0:e1:fd:
         06:83:4a:3a:c2:ad:be:47:80:ac:f2:cc:18:47:ea:c1:74:43:
         2e:3b:37:a6:14:3f:15:0b:39:0e:ab:ea:16:7e:f1:85:75:1b:
         8b:e1:8d:78:98:2d:3c:91:fc:a1:2b:91:99:c4:0a:53:e8:7a:
         60:db:d2:16:ef:7d:9d:1f:ea:dc:a8:95:4a:61:d1:48:79:52:
         39:82:19:49:ef:5b:3e:52:de:a7:0e:6c:fb:f3:7b:53:19:05:
         0d:0c:08:a3:f7:d5:70:82:3b:6a:51:39:b1:61:b5:31:8c:e5:
         91:46:d1:89:6c:59:47:a4:3f:d5:13:3c:c5:e5:3d:0e:19:5d:
         32:6a:e4:bd:b7:73:54:99:20:60:e4:53:84:d9:c0:fa:5d:96:
         23:53:5e:a2:e5:16:4d:f0:5b:a5:cd:4b:1b:16:28:67:13:3e:
         3a:0b:0b:3e:2f:44:39:62:d2:1d:19:60:43:93:b1:03:ed:3a:
         87:91:01:d2:48:bb:80:2b:b7:94:56:19:1e:2a:b5:5c:de:85:
         82:f5:0e:8a
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAbAxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjIzMTEwNDQ0WhcNMjYwMTI3MTEwNDQ0WjAYMRYw
FAYDVQQDEw02OTRhNzc1MC01YjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9zQTQCyx72eoXaMyYjiKNOPmyUK9KlOVxapnKN3g0wxZ3jVxQbvx8N36
5cJdiSuVd+k63kcIqG765E0O8mFJqH3IBCoVS3GXwi4fVuG5K9PTghlHhf/bRdbP
MTJDDMGdZ3VT4tHV5KJnsFYOKBj73IHdVxHdV9NEFEVDcLoE2+Vh7LpE5cwrrZ1q
dto3oCkOW/enSBF11CpzwVZwk6ijy1sclIRTPgX+cMQdQgy0A5ODNqJc9iLSfr6h
mBTXcz9Y20zmNGixRfv7Ef0ZueHfE16W9+aq6ADNUCU9xG0iWN/NxOtYkbZqBKRV
TAMuj08uHPhOTWOSPC8NmJkjc1A3NQIDAQABo4ICvzCCArswHQYDVR0OBBYEFK6c
AxztG25rahCpkkYqjYMKQMMEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMjQxMkIyMkRGRUYxMUYwOEI4QkNBRTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAGaxNIDBACaxNQDBACa
yD8DBAOayFADBAOa3/gwDQYJKoZIhvcNAQELBQADggEBAFmZNWwL6OHsXzmV1U3y
1BBNJ7tHc10Awh/ET1LyrAkho1wZpXM4n9oEXm7LDLVrEwILRaDh/QaDSjrCrb5H
gKzyzBhH6sF0Qy47N6YUPxULOQ6r6hZ+8YV1G4vhjXiYLTyR/KErkZnEClPoemDb
0hbvfZ0f6tyolUph0Uh5UjmCGUnvWz5S3qcObPvze1MZBQ0MCKP31XCCO2pRObFh
tTGM5ZFG0YlsWUekP9UTPMXlPQ4ZXTJq5L23c1SZIGDkU4TZwPpdliNTXqLlFk3w
W6XNSxsWKGcTPjoLCz4vRDli0h0ZYEOTsQPtOoeRAdJIu4Art5RWGR4qtVzehYL1
Doo=
-----END CERTIFICATE-----
Generated at Thu Dec 25 01:16:33 2025 by rpki-client