This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5250C826DCD611F092137F7CDAE4EC9C.roa
File:                     5250C826DCD611F092137F7CDAE4EC9C.roa (raw, json)
Hash identifier:          IrNALxZxuzBJYPzmhii9wbydn1+wKoTl0ScAx6fgs0k=
Subject key identifier:   B4:C5:AE:C3:AD:FB:68:E7:76:7C:E0:EA:C0:67:29:BC:9D:DC:7E:52
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5250C826DCD611F092137F7CDAE4EC9C.roa
Signing time:             Fri 19 Dec 2025 12:29:11 +0000
ROA not before:           Fri 19 Dec 2025 12:29:05 +0000
ROA not after:            Fri 18 Dec 2026 12:29:05 +0000
asID:                     8796
IP address blocks:        154.205.202.0/24 maxlen: 24
                          154.205.203.0/24 maxlen: 24
                          154.205.204.0/24 maxlen: 24
                          154.205.205.0/24 maxlen: 24
                          154.205.206.0/24 maxlen: 24
                          154.205.207.0/24 maxlen: 24
                          154.205.208.0/24 maxlen: 24
                          154.205.209.0/24 maxlen: 24
                          154.205.210.0/24 maxlen: 24
                          154.205.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110494 (0x1af9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 19 12:29:05 2025 GMT
            Not After : Dec 18 12:29:05 2026 GMT
        Subject: CN=69454517-d8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:ac:fb:29:fd:bd:4e:48:38:82:d1:cc:4b:
                    6a:57:b0:8d:a2:e4:36:03:df:89:94:94:a0:19:e1:
                    7a:dc:38:bd:e8:29:43:a5:12:73:fc:2f:42:b6:59:
                    4e:0f:6b:25:72:de:10:53:66:d1:e0:98:be:3d:0a:
                    96:91:1e:ac:56:11:43:37:4b:51:0a:7d:0f:df:19:
                    50:ea:ae:d1:38:c4:48:04:2b:8f:96:f9:ae:ad:0f:
                    34:aa:76:d6:16:74:50:d5:c3:1c:ca:ef:6f:8c:b3:
                    27:6e:18:93:f2:dc:bc:7b:01:7f:9e:40:e3:ce:dd:
                    9f:56:49:48:15:57:0c:72:d9:c5:67:03:b2:10:18:
                    ed:db:a5:bf:42:28:23:f1:d5:38:a3:b8:50:a4:c9:
                    86:3c:15:dc:6b:c1:52:f0:d3:ea:a0:0c:53:f0:69:
                    27:ce:1d:8e:88:09:24:9a:1e:9d:54:e3:27:b7:87:
                    0b:33:60:88:f8:71:d3:ad:13:cb:04:ac:4e:d7:03:
                    9d:2a:89:bc:f7:5d:d9:d0:1a:ab:d5:39:1f:02:be:
                    95:87:77:e2:d1:5f:d0:f9:03:10:69:66:4e:05:8f:
                    b8:58:17:08:9f:4f:69:3a:b0:49:8d:2f:cd:c6:b0:
                    a5:8b:b0:d4:cb:6d:31:ee:ef:3c:f6:54:44:7a:fe:
                    a9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C5:AE:C3:AD:FB:68:E7:76:7C:E0:EA:C0:67:29:BC:9D:DC:7E:52
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5250C826DCD611F092137F7CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.202.0-154.205.211.255

    Signature Algorithm: sha256WithRSAEncryption
         a9:29:eb:9e:a8:d9:3f:6f:da:5f:f2:fe:16:bc:87:64:83:8e:
         55:a7:63:b7:4a:74:5f:7b:3a:97:5b:6a:af:43:0d:f8:d6:47:
         20:27:85:d7:d3:80:b5:cb:27:34:79:1f:97:23:56:1c:11:b6:
         d0:b2:80:c5:a0:1a:d3:64:43:e0:ec:ba:bb:94:f5:c5:ec:2c:
         30:86:fa:41:ac:cc:3b:2f:82:f6:73:c7:ad:0d:bd:0b:e9:73:
         49:66:18:2d:de:d3:16:1c:68:ce:f4:b7:41:1f:6c:13:f3:2b:
         61:8f:f4:7b:34:18:d5:04:f4:c3:4a:82:9f:5e:12:25:e9:da:
         24:b7:f4:bc:7f:09:e6:40:e1:84:51:17:c7:ab:fc:43:e5:41:
         ec:ef:73:d2:bd:45:88:45:ee:98:7a:d6:4b:26:69:8e:8c:f4:
         04:87:96:0a:b1:56:47:16:52:d3:4c:5a:80:c9:e9:10:88:65:
         bb:2e:ea:b0:62:88:ff:2a:db:a3:71:3e:c0:a1:ff:2d:90:32:
         cf:38:b6:73:7f:52:01:07:f4:9d:51:99:79:8f:ab:af:16:df:
         51:31:b0:ac:fe:ca:d9:e3:ca:5f:70:53:0a:da:cc:1f:ec:ba:
         ab:2b:58:83:71:c8:30:e0:73:ea:03:d4:a9:21:b8:5a:dd:cb:
         01:4b:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:53 2025 by rpki-client