This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ACF94EADB5511F089A2A08FDAE4EC9C.roa
File:                     6ACF94EADB5511F089A2A08FDAE4EC9C.roa (raw, json)
Hash identifier:          OOoD8qBVJVrgThpFs+tawWzxEoFjWZdvUOf4vmW+Xho=
Subject key identifier:   15:A8:2D:1F:8D:61:7D:B2:1E:D2:C0:8C:43:01:62:F2:03:B8:17:D9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AEFF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ACF94EADB5511F089A2A08FDAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 14:33:56 +0000
ROA not before:           Wed 17 Dec 2025 14:33:51 +0000
ROA not after:            Fri 26 Dec 2025 14:33:51 +0000
asID:                     138915
IP address blocks:        154.223.17.0/24 maxlen: 24
                          154.223.18.0/23 maxlen: 24
                          154.223.20.0/24 maxlen: 24
                          154.223.21.0/24 maxlen: 24
                          154.223.22.0/24 maxlen: 24
                          154.223.23.0/24 maxlen: 24
                          154.223.24.0/24 maxlen: 24
                          154.223.26.0/24 maxlen: 24
                          154.223.28.0/23 maxlen: 24
                          154.223.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110335 (0x1aeff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 14:33:51 2025 GMT
            Not After : Dec 26 14:33:51 2025 GMT
        Subject: CN=6942bf54-2383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5c:f7:ec:d5:76:38:74:5b:44:4d:34:af:2c:
                    a4:57:5c:5d:12:ea:b1:6f:68:ce:99:13:d6:92:4d:
                    60:48:11:ca:9b:40:cd:a8:40:a7:4b:16:2d:e6:b1:
                    82:bb:d9:60:55:31:ab:f6:5f:b8:1b:46:f2:34:31:
                    01:df:0e:80:05:a8:09:cb:f9:54:38:e8:70:c1:b0:
                    93:e8:c7:15:d8:32:96:41:5a:9e:75:98:9e:17:b8:
                    72:eb:ed:17:92:6f:d4:b8:dd:42:5b:e7:2c:3f:ce:
                    57:cb:6a:c2:9e:cf:3b:2e:86:2f:b5:0f:5c:78:96:
                    0c:4e:2f:67:6f:80:76:3a:d1:8a:67:b9:47:f4:b4:
                    b9:60:a1:c6:a9:85:37:0d:eb:b3:a7:fb:2a:a0:42:
                    c8:90:58:7b:66:ec:17:9c:83:86:db:7d:24:02:50:
                    f0:24:bc:67:61:43:77:ef:da:40:c8:9b:81:5e:3e:
                    22:0a:91:08:9f:d5:51:73:c9:36:1d:a8:a9:18:41:
                    39:a9:95:71:42:6b:76:7e:6f:8c:21:cf:e7:5b:87:
                    a1:e1:ab:a8:bd:5a:15:be:96:e8:f8:15:17:21:f8:
                    5c:ba:1c:95:19:8d:b0:4a:f0:83:46:79:49:d0:35:
                    c8:94:e3:c9:f3:82:fb:e2:b4:90:c2:e3:da:27:26:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A8:2D:1F:8D:61:7D:B2:1E:D2:C0:8C:43:01:62:F2:03:B8:17:D9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ACF94EADB5511F089A2A08FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.17.0-154.223.24.255
                  154.223.26.0/24
                  154.223.28.0-154.223.30.255

    Signature Algorithm: sha256WithRSAEncryption
         66:52:f9:57:13:95:df:7e:22:c2:0d:11:97:84:f9:61:94:f7:
         7a:a0:fd:e7:e6:6e:06:67:e4:25:f1:fa:99:d1:ba:70:a9:5d:
         53:dd:d6:1a:5b:bc:da:59:8e:c3:af:0f:5c:c1:36:4b:e3:fd:
         81:33:a8:11:c5:5f:e5:85:f5:02:03:ba:7e:ab:4c:a0:9a:f9:
         fe:79:8a:aa:4a:5c:45:7d:38:ec:9f:eb:3d:68:b4:47:b9:82:
         87:8a:74:d8:2e:c4:bb:3e:1d:6f:3a:a4:39:88:bd:80:dd:bb:
         0e:68:94:87:ba:ef:ba:ac:81:00:73:30:27:dc:4f:5a:23:f1:
         7a:85:d4:3b:b0:d0:14:1c:b8:f7:68:1c:99:aa:1c:d2:e5:54:
         94:a4:1d:b5:2e:de:b0:7a:02:d2:0f:96:e6:c5:fe:4e:7c:e9:
         a4:74:36:34:a5:f1:8c:d5:d1:e9:21:2a:19:d1:a3:ac:f2:1c:
         9d:a4:fd:34:c1:00:9f:4b:9f:d8:f2:c0:b8:66:0c:e4:5c:5b:
         a5:92:cc:b2:6d:04:c9:6b:73:a4:d7:25:22:19:24:86:b2:41:
         da:77:eb:3e:7a:93:ce:ed:36:bc:c4:8f:57:8b:f5:7c:1a:82:
         c3:f0:49:c4:be:c1:dc:87:12:e1:27:ae:4f:4b:66:31:d5:bc:
         96:f3:da:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:47 2025 by rpki-client