This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56B8219ADA6811F0B564E8C1DAE4EC9C.roa
File:                     56B8219ADA6811F0B564E8C1DAE4EC9C.roa (raw, json)
Hash identifier:          xckFZ6k2kcuQDi6Vbx7I+q2cAZl3BM0PxnWNeYqW/PM=
Subject key identifier:   AC:22:A2:D5:B2:55:90:5B:E2:27:8C:CF:3F:C6:43:AB:C2:58:D7:A6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AE7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56B8219ADA6811F0B564E8C1DAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 10:16:52 +0000
ROA not before:           Tue 16 Dec 2025 10:16:47 +0000
ROA not after:            Fri 26 Dec 2025 10:16:47 +0000
asID:                     140666
IP address blocks:        154.95.72.0/22 maxlen: 24
                          154.95.96.0/22 maxlen: 24
                          154.95.100.0/22 maxlen: 24
                          154.95.104.0/22 maxlen: 24
                          154.95.108.0/22 maxlen: 24
                          154.95.112.0/22 maxlen: 24
                          154.95.116.0/22 maxlen: 24
                          154.95.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110207 (0x1ae7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 16 10:16:47 2025 GMT
            Not After : Dec 26 10:16:47 2025 GMT
        Subject: CN=69413194-5a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:df:95:08:43:85:9f:47:b7:d4:59:2e:dc:
                    77:5c:cf:ad:22:43:50:34:c9:ab:95:37:8c:2c:f5:
                    b3:d1:c4:7d:80:29:07:dd:16:30:f6:b7:26:f3:c9:
                    c9:1e:f3:35:83:01:af:7f:85:2d:e3:6a:1c:a0:1f:
                    dc:2d:a7:25:e8:db:b0:41:3b:31:5c:82:b6:5e:ce:
                    f5:64:2d:88:1c:1a:4a:bc:53:c6:4a:67:7f:16:00:
                    ce:e7:c2:3a:16:ce:e3:4a:05:2a:00:34:3f:b4:0c:
                    9a:b2:64:1e:a9:71:28:ef:44:db:3c:ee:e5:51:c2:
                    a7:08:5b:b4:c1:36:11:c5:41:b6:ee:37:6f:34:cf:
                    26:db:6b:d1:e6:89:f8:a5:3c:0d:11:96:2b:11:05:
                    09:82:5d:6b:c1:de:35:76:fc:01:c3:f9:6e:7c:8b:
                    02:4d:af:17:88:e4:1a:22:e2:b7:63:28:b4:54:44:
                    4e:f6:d9:36:60:7b:c3:b7:6c:a8:23:43:ae:e1:6f:
                    83:1d:6c:fd:15:b8:dd:39:2c:7b:08:73:f5:de:27:
                    d5:27:10:fd:b1:8e:80:c4:42:8e:ad:66:d3:26:10:
                    db:80:f7:bd:bd:43:cd:0b:aa:14:44:a2:0b:32:33:
                    68:08:1a:b9:d8:6c:34:c7:ca:ad:f4:eb:16:8e:1e:
                    e4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:22:A2:D5:B2:55:90:5B:E2:27:8C:CF:3F:C6:43:AB:C2:58:D7:A6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56B8219ADA6811F0B564E8C1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.72.0/22
                  154.95.96.0-154.95.121.255

    Signature Algorithm: sha256WithRSAEncryption
         21:c1:dd:1a:99:43:83:7e:12:68:a0:17:22:6e:b6:20:54:2e:
         d7:46:65:52:cd:2e:94:8e:f6:22:b3:55:16:e9:38:82:16:c7:
         60:af:a4:16:a3:35:ef:11:b9:49:dd:83:bf:72:7a:97:dd:39:
         59:e0:27:72:f8:f7:a2:dd:7d:06:c7:ce:f1:db:eb:b1:79:74:
         ba:13:8c:13:c8:2b:14:02:b5:9c:5d:1f:8e:ef:06:77:e8:06:
         4c:41:ad:da:de:49:f9:81:a1:81:a3:7a:1d:e6:3b:c9:7d:7a:
         09:63:cd:65:f5:73:57:bf:a2:0f:82:5c:ce:8a:82:16:8d:d8:
         12:d3:54:d8:75:b3:0d:bf:6b:e4:08:fb:f6:c3:bd:08:d4:99:
         f5:2b:70:b6:4f:09:d6:4b:66:15:3b:77:cd:44:e9:a4:df:37:
         23:c1:4b:64:8d:6e:cf:06:4f:5d:15:4a:7d:29:4e:64:bc:6b:
         9b:ff:42:ae:3e:0e:12:6b:88:e6:0e:e4:ac:f2:d1:95:e9:8e:
         86:4c:85:b9:e5:d0:e5:76:80:fc:c8:9d:c5:9c:83:e4:aa:c3:
         77:32:c9:e1:f0:3d:ff:65:9b:8c:9e:87:98:81:e7:02:f2:40:
         5a:02:24:12:c9:4c:ed:21:90:19:a0:fc:8a:f9:05:93:b9:0c:
         e7:ef:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 15:10:20 2025 by rpki-client