This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48BDE424E4A111F0BF7709DDDAE4EC9C.roa
File:                     48BDE424E4A111F0BF7709DDDAE4EC9C.roa (raw, json)
Hash identifier:          jKJzJb7YAt9V5rYKgt8bBxxTsTjjFUtNjn8HOBb8BmA=
Subject key identifier:   F5:05:8C:23:55:0F:77:5D:9C:9D:28:2D:2C:8D:88:71:BD:B9:06:25
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B1A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48BDE424E4A111F0BF7709DDDAE4EC9C.roa
Signing time:             Mon 29 Dec 2025 10:29:41 +0000
ROA not before:           Mon 29 Dec 2025 10:29:36 +0000
ROA not after:            Mon 18 Jan 2027 10:29:36 +0000
asID:                     138965
IP address blocks:        154.223.12.0/24 maxlen: 24
                          154.223.13.0/24 maxlen: 24
                          154.223.14.0/24 maxlen: 24
                          154.223.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111009 (0x1b1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 29 10:29:36 2025 GMT
            Not After : Jan 18 10:29:36 2027 GMT
        Subject: CN=69525815-887a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:75:40:08:87:fa:bf:4c:e1:93:8c:d5:92:56:
                    54:b9:3c:42:bf:70:3b:05:df:1e:b0:5d:88:3e:39:
                    c2:da:a5:fa:d3:38:dd:41:06:ce:7b:80:53:cd:f8:
                    53:f1:3f:47:88:b8:88:49:ce:af:4d:6a:22:34:4e:
                    aa:dd:a6:f0:30:71:21:d2:4b:71:ef:98:0e:c3:11:
                    b3:44:48:29:83:cc:5e:63:a4:28:57:3d:f6:a8:6c:
                    d2:66:ad:21:fd:36:fd:16:a5:32:0e:5a:87:d8:5e:
                    c4:da:31:d8:77:0d:2f:db:cd:45:bc:cf:f5:29:aa:
                    28:ab:b7:87:c5:b8:06:33:bd:f0:97:e9:df:bc:6c:
                    c5:df:5b:6d:e2:66:95:d6:d6:74:d8:a1:88:4a:ad:
                    fc:23:98:82:8e:96:10:2a:b4:6e:14:23:09:d0:19:
                    f1:05:40:d2:a2:bd:c6:79:04:5c:14:92:9d:81:67:
                    73:6e:ad:94:45:8d:6d:22:de:61:87:ad:cb:1c:25:
                    60:20:7e:34:d3:11:63:7e:12:9c:0c:a4:84:53:b1:
                    fe:9f:18:e3:06:ed:b2:76:1b:4c:64:6e:44:b3:fc:
                    f0:1e:4b:d3:2a:90:df:26:fa:f8:65:11:93:5c:ee:
                    b4:b3:bf:0c:37:16:70:87:56:af:2c:a6:19:2a:c6:
                    df:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:05:8C:23:55:0F:77:5D:9C:9D:28:2D:2C:8D:88:71:BD:B9:06:25
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48BDE424E4A111F0BF7709DDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:fe:12:5c:d5:dd:e1:fe:ce:11:a9:03:d1:9f:ee:42:ba:71:
         5d:61:36:45:4d:4f:27:1f:ba:f9:80:a1:41:3d:9d:e7:93:5b:
         c0:40:74:1c:ec:f2:13:bb:60:ec:cd:2d:e8:d0:a0:d3:53:f9:
         ec:4d:7b:32:fe:e1:52:a1:de:4d:56:8b:7a:e8:20:04:f1:ce:
         87:0f:74:c2:d5:75:1d:25:16:73:b6:c2:f6:1b:4f:cf:22:bc:
         4f:72:1c:46:f7:78:3c:e9:9a:73:6f:50:bc:97:c9:30:03:71:
         39:9d:ec:f9:1a:cc:3b:8d:5c:45:43:93:20:d8:0b:30:bf:07:
         af:f1:bd:56:25:cc:e6:68:fd:bf:f8:8f:81:0b:36:08:f2:e7:
         1a:9d:dd:6e:dd:3c:52:f3:69:b6:e2:6d:ba:ea:87:8d:70:0f:
         bd:bc:ca:5a:6c:4d:8d:10:de:cb:f9:e6:b5:ec:06:95:b3:dc:
         41:b4:53:f8:5a:2c:c9:a7:95:b8:89:0b:19:b1:36:6d:a8:99:
         75:cb:bf:25:e1:cb:33:1d:3e:e4:7e:90:f2:af:b3:93:34:51:
         c7:b6:8b:dc:a9:b4:bf:23:2f:e8:62:5b:2e:49:d4:26:d9:97:
         21:51:b8:d8:60:4d:a8:f2:e5:71:9d:d7:e6:22:88:96:0e:b4:
         27:ad:61:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 17:57:02 2025 by rpki-client