This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CDF1096DBF311F084B94AEFDAE4EC9C.roa
File:                     6CDF1096DBF311F084B94AEFDAE4EC9C.roa (raw, json)
Hash identifier:          0fBppX9ikM+uy1ytGNJ/eG/rwnFP1a5ZiXmNFelr2dg=
Subject key identifier:   2E:EC:30:A7:00:1C:5B:66:5D:B9:16:AE:91:0C:55:E9:66:41:D9:5D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF6B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CDF1096DBF311F084B94AEFDAE4EC9C.roa
Signing time:             Thu 18 Dec 2025 09:25:00 +0000
ROA not before:           Thu 18 Dec 2025 09:24:55 +0000
ROA not after:            Sun 17 Dec 2028 09:24:55 +0000
asID:                     17561
IP address blocks:        154.216.211.0/24 maxlen: 24
                          154.216.212.0/24 maxlen: 24
                          154.216.213.0/24 maxlen: 24
                          154.216.214.0/24 maxlen: 24
                          154.216.215.0/24 maxlen: 24
                          154.216.216.0/24 maxlen: 24
                          154.216.217.0/24 maxlen: 24
                          154.216.218.0/24 maxlen: 24
                          154.216.219.0/24 maxlen: 24
                          154.216.220.0/24 maxlen: 24
                          154.216.221.0/24 maxlen: 24
                          154.216.222.0/24 maxlen: 24
                          154.216.223.0/24 maxlen: 24
                          154.216.224.0/24 maxlen: 24
                          154.216.225.0/24 maxlen: 24
                          154.216.226.0/24 maxlen: 24
                          154.216.227.0/24 maxlen: 24
                          154.216.228.0/24 maxlen: 24
                          154.216.229.0/24 maxlen: 24
                          154.216.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110443 (0x1af6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 18 09:24:55 2025 GMT
            Not After : Dec 17 09:24:55 2028 GMT
        Subject: CN=6943c86c-119a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:98:f2:a5:3e:07:4b:ae:b4:f0:a8:bc:31:f6:
                    3b:cd:cf:5e:2a:06:98:63:37:1b:7d:7d:b1:35:43:
                    01:f6:a8:19:fd:35:36:cf:e5:c6:81:ff:c1:18:8f:
                    d8:5d:71:ba:49:ce:21:b3:04:f8:de:04:05:8a:d4:
                    15:b6:d1:a1:80:25:46:00:f3:b0:b0:6d:1f:a2:07:
                    6c:9f:e3:67:6e:1d:31:97:9c:0e:19:66:cf:7b:16:
                    49:50:51:f1:ea:30:1f:3f:e1:b1:08:a7:40:93:b0:
                    2b:ff:1f:66:bc:05:90:1f:02:a1:51:5d:e9:44:4b:
                    39:ad:20:2f:ea:d4:e0:f4:cb:59:ea:62:90:ee:08:
                    c6:b4:00:49:bd:49:e1:c3:e4:9b:9b:ce:52:19:58:
                    23:a7:ff:19:e3:37:dd:ea:b7:1d:76:6c:70:5a:fb:
                    ba:d5:0e:dd:ef:f3:44:4a:46:7a:d3:b6:0d:5f:1e:
                    75:f4:62:f6:f7:e3:80:64:a4:01:03:84:b8:ac:fb:
                    74:ae:ce:66:3f:b7:44:28:e1:1a:dc:23:20:0d:01:
                    5c:7d:dd:f9:47:25:56:c1:d0:23:40:15:00:6c:81:
                    1d:d6:cc:b8:a0:46:8a:27:e0:8c:a2:f9:15:92:69:
                    9d:21:a0:8a:04:15:4a:7a:9e:af:7e:28:ca:35:61:
                    42:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EC:30:A7:00:1C:5B:66:5D:B9:16:AE:91:0C:55:E9:66:41:D9:5D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CDF1096DBF311F084B94AEFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.216.211.0-154.216.230.255

    Signature Algorithm: sha256WithRSAEncryption
         15:e2:45:16:c5:7a:9d:1e:ff:2f:aa:6d:b6:05:a1:5f:09:a1:
         45:93:89:5e:40:12:b6:7b:5e:88:0f:1f:59:4a:59:78:d7:66:
         5c:6e:48:8c:be:ab:4a:71:a3:11:16:70:5a:7c:e5:6a:c4:76:
         33:e0:ae:0d:0c:c5:44:37:32:4d:50:ea:42:40:72:ee:c4:25:
         22:1a:33:65:c6:bc:c6:9a:f7:4b:5c:24:46:5b:19:3f:cc:6d:
         c1:5d:c0:07:f5:2a:3f:da:90:cb:98:41:e3:d0:b8:f5:70:29:
         05:aa:d3:6e:f6:79:72:22:83:87:4f:ff:d0:b3:22:9e:de:51:
         ef:2b:e8:3a:cd:c0:6a:75:99:22:73:a4:ca:2d:34:41:21:5c:
         2e:b1:9d:63:d8:5b:96:b4:e1:53:59:cb:61:ed:b9:21:8d:18:
         c1:be:d0:5b:d6:ac:fa:c7:f1:d9:8d:fe:48:35:d9:97:bc:47:
         ce:d0:58:2a:5e:35:55:04:5d:78:3d:4c:07:49:c7:1b:51:50:
         d1:f3:a6:54:0b:f9:9d:bf:f7:5b:82:e7:4f:54:19:64:6e:7a:
         fd:51:78:89:1c:76:40:05:20:71:5a:55:6d:6a:b6:fc:b8:f4:
         bb:34:3a:5d:82:3e:59:14:2e:12:f3:78:55:e9:85:a1:6d:de:
         5b:52:a5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:16 2025 by rpki-client