This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65008AA2DA6911F09CADAFC9DAE4EC9C.roa
File:                     65008AA2DA6911F09CADAFC9DAE4EC9C.roa (raw, json)
Hash identifier:          gj2R30nlH6GTDzeXgja8J+AfOeJ9JPhK/WHz3uSV0v8=
Subject key identifier:   1C:FB:BF:8A:82:2A:82:E9:98:F6:4F:94:50:7D:7E:B9:23:03:07:05
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AE81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65008AA2DA6911F09CADAFC9DAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 10:24:25 +0000
ROA not before:           Tue 16 Dec 2025 10:24:20 +0000
ROA not after:            Fri 26 Dec 2025 10:24:20 +0000
asID:                     138915
IP address blocks:        154.223.46.0/24 maxlen: 24
                          154.223.47.0/24 maxlen: 24
                          154.223.48.0/24 maxlen: 24
                          154.223.49.0/24 maxlen: 24
                          154.223.51.0/24 maxlen: 24
                          154.223.52.0/23 maxlen: 24
                          154.223.54.0/23 maxlen: 24
                          154.223.56.0/23 maxlen: 24
                          154.223.58.0/23 maxlen: 24
                          154.223.60.0/23 maxlen: 24
                          154.223.62.0/23 maxlen: 24
                          154.223.64.0/24 maxlen: 24
                          154.223.65.0/24 maxlen: 24
                          154.223.66.0/23 maxlen: 24
                          154.223.68.0/23 maxlen: 24
                          154.223.70.0/23 maxlen: 24
                          154.223.72.0/23 maxlen: 24
                          154.223.74.0/23 maxlen: 24
                          154.223.76.0/23 maxlen: 24
                          154.223.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110209 (0x1ae81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 16 10:24:20 2025 GMT
            Not After : Dec 26 10:24:20 2025 GMT
        Subject: CN=69413359-37fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:5b:8e:2e:e3:c3:b3:e4:fc:1d:2f:10:77:
                    1e:a9:b7:c4:2a:b4:97:a3:8d:bc:08:f2:4e:0d:e8:
                    7b:fe:14:63:c3:1b:3b:f3:a9:f4:78:47:31:80:72:
                    df:a6:bc:fa:a9:0b:9f:00:cb:da:bb:15:3a:9b:49:
                    97:24:98:56:bd:ae:01:88:66:ae:cb:70:0a:8d:90:
                    5c:76:a4:bd:65:f0:51:40:2e:9e:79:17:b3:95:68:
                    3d:f9:9b:b7:c4:a7:da:03:09:db:12:df:19:a4:02:
                    94:21:c4:2b:a0:f5:8c:4b:22:2c:61:75:54:de:cd:
                    0f:97:68:80:83:70:84:0e:24:d8:e7:f0:77:1b:0a:
                    86:0e:4b:a8:b1:9d:cd:4d:82:e5:01:25:d0:cc:cf:
                    3f:16:0c:7a:aa:df:4c:7a:22:0d:c5:fe:f0:a8:4a:
                    b1:f8:80:4b:a2:d1:25:d4:b4:c0:50:5e:c3:79:c4:
                    5d:d9:11:4a:95:b8:49:66:48:d6:ee:54:be:7b:30:
                    8b:be:2b:87:4d:15:ae:13:b4:08:09:dc:8d:35:11:
                    49:f8:25:f4:1d:17:e4:56:42:56:0e:c9:ce:29:65:
                    82:80:35:89:28:65:da:e9:a4:61:86:f3:6a:98:d2:
                    74:fa:61:d8:b8:db:bf:ca:f3:22:23:85:c2:1f:0f:
                    08:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FB:BF:8A:82:2A:82:E9:98:F6:4F:94:50:7D:7E:B9:23:03:07:05
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65008AA2DA6911F09CADAFC9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.46.0-154.223.49.255
                  154.223.51.0-154.223.79.255

    Signature Algorithm: sha256WithRSAEncryption
         72:f9:b4:4e:c8:42:79:eb:0a:8c:bd:70:44:80:66:18:ae:46:
         30:13:3c:e7:74:40:be:76:96:be:30:f7:c9:12:ab:b8:06:64:
         51:b3:00:c3:98:83:17:ad:3d:b3:1b:11:4d:23:b4:4b:c8:24:
         bf:3a:38:71:70:33:36:db:19:0d:d0:06:31:be:1b:86:12:6c:
         80:29:0e:68:43:eb:3d:a3:eb:7b:30:9e:d3:62:01:3f:f9:ad:
         ad:c7:ff:ae:c9:ac:6a:91:6f:d2:ba:73:6c:39:75:9b:80:b8:
         8e:ab:8e:e0:0b:69:e8:3e:62:18:d7:f1:c7:c9:45:23:71:c0:
         a2:8d:a6:19:68:d1:a9:b7:c1:f2:37:34:61:e2:18:73:61:91:
         7a:90:67:c8:dc:c8:0d:cb:41:dc:2d:62:8d:2b:ab:53:2c:49:
         a8:29:d3:37:c7:2d:f0:b6:80:78:81:05:ac:1e:ec:0a:3a:e0:
         a5:d5:73:96:f6:2f:ca:07:d1:57:24:63:12:80:2c:ab:14:e7:
         d0:59:63:5e:07:48:38:c9:84:62:39:16:54:99:22:ee:e2:b2:
         8a:a5:d5:60:52:49:25:00:e1:47:5d:63:fa:f5:45:c2:99:f2:
         58:87:74:92:5c:e7:a2:14:ac:b9:41:bf:87:fb:59:39:e3:b9:
         c2:a4:25:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:25:01 2025 by rpki-client