This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7038DD04DCAB11F0A3A886F3DAE4EC9C.roa
File:                     7038DD04DCAB11F0A3A886F3DAE4EC9C.roa (raw, json)
Hash identifier:          fNs+e32oQcfxrhERdXKopHOYlTnkUYs+vrET+5kQJ3k=
Subject key identifier:   5A:92:03:D1:9E:D4:07:99:14:5C:72:7A:0C:98:15:DD:E6:27:BC:88
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7038DD04DCAB11F0A3A886F3DAE4EC9C.roa
Signing time:             Fri 19 Dec 2025 07:22:13 +0000
ROA not before:           Fri 19 Dec 2025 07:22:08 +0000
ROA not after:            Sat 27 Dec 2025 07:22:08 +0000
asID:                     140224
IP address blocks:        154.205.192.0/24 maxlen: 24
                          154.205.193.0/24 maxlen: 24
                          154.205.194.0/24 maxlen: 24
                          154.205.195.0/24 maxlen: 24
                          154.205.196.0/24 maxlen: 24
                          154.205.197.0/24 maxlen: 24
                          154.205.198.0/24 maxlen: 24
                          154.205.199.0/24 maxlen: 24
                          154.205.200.0/24 maxlen: 24
                          154.205.201.0/24 maxlen: 24
                          154.205.202.0/24 maxlen: 24
                          154.205.203.0/24 maxlen: 24
                          154.205.204.0/24 maxlen: 24
                          154.205.205.0/24 maxlen: 24
                          154.205.206.0/24 maxlen: 24
                          154.205.207.0/24 maxlen: 24
                          154.205.208.0/24 maxlen: 24
                          154.205.209.0/24 maxlen: 24
                          154.205.210.0/24 maxlen: 24
                          154.205.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110472 (0x1af88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 19 07:22:08 2025 GMT
            Not After : Dec 27 07:22:08 2025 GMT
        Subject: CN=6944fd25-ef3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:2e:7d:f6:87:6e:01:fe:9a:b9:42:9d:3a:
                    d0:7d:2a:3e:d2:48:d0:d5:66:0b:99:b5:70:a9:3a:
                    a5:eb:74:ef:81:0a:c9:20:9f:12:88:a7:01:b8:0f:
                    e1:99:a3:38:04:9c:ca:f7:8d:0e:2c:bc:84:a9:06:
                    10:ab:57:ad:e5:ac:90:6f:81:2c:df:4e:17:83:67:
                    2d:c3:08:e8:fa:26:a6:2a:0c:d7:cf:40:ab:95:64:
                    f2:a9:0f:74:a5:34:cd:68:3d:aa:15:31:12:bc:6f:
                    24:8b:77:70:41:0d:ff:66:9b:b7:c7:9a:52:bc:4e:
                    49:44:fb:17:bc:8a:59:77:50:ef:c6:52:19:3d:17:
                    78:ef:83:8a:b3:b6:67:ef:87:0c:70:31:14:85:34:
                    f4:9d:3f:43:58:5c:83:90:eb:6d:a0:f3:4e:d0:db:
                    f2:8e:05:7d:3c:b1:4a:e4:a6:a2:ca:52:fc:d1:87:
                    b5:32:76:cb:b8:61:b3:75:64:3b:0c:76:0a:0d:93:
                    5d:2d:93:88:c5:36:4f:58:86:a5:b1:2e:50:01:b3:
                    79:c1:53:9a:33:ed:c0:c3:54:1b:99:1a:32:f7:8a:
                    0a:4c:d5:7a:42:4f:4b:10:9b:b7:1d:99:b9:41:0b:
                    7c:c2:b1:6a:9f:23:12:98:28:81:ae:cb:e6:18:64:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:92:03:D1:9E:D4:07:99:14:5C:72:7A:0C:98:15:DD:E6:27:BC:88
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7038DD04DCAB11F0A3A886F3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.192.0-154.205.211.255

    Signature Algorithm: sha256WithRSAEncryption
         1c:c0:3b:6e:08:82:81:a2:89:54:cb:6c:59:32:eb:cf:d8:ff:
         43:1a:74:15:f6:7c:eb:25:6a:82:c3:66:a6:29:1f:e6:37:e6:
         11:37:d5:50:d7:03:40:86:ee:27:ca:ef:c9:ae:b1:60:12:37:
         cb:a7:d6:03:cb:8f:ea:90:04:3f:ff:b1:a3:62:87:91:60:2d:
         7c:20:da:a1:fe:71:94:f6:00:87:13:f8:82:92:e8:41:56:aa:
         d6:f9:0f:9d:1c:8f:d9:44:eb:db:f0:62:33:c1:a8:95:8f:05:
         e1:e9:47:63:ad:bd:4c:a6:85:67:6c:07:0d:fa:95:a1:dd:3e:
         92:d9:ea:0a:14:9c:66:99:1d:a1:e6:71:14:9d:19:88:ad:b0:
         2a:e1:63:9e:90:16:25:eb:65:e6:94:fa:e4:2b:aa:84:24:90:
         71:2e:b3:d0:eb:2a:4d:53:4a:5f:d4:a4:e0:92:fe:33:41:57:
         d2:09:5e:64:3a:ed:b6:bb:35:b7:99:e9:d3:bd:d7:ef:fb:12:
         dc:99:3a:cb:8e:8e:36:b4:7e:8a:01:32:ce:ca:8b:e2:92:65:
         5e:c8:80:36:34:a0:62:2d:dd:73:04:dd:1b:38:af:8b:ec:27:
         8b:cf:e5:66:92:7d:f0:e6:19:0c:c1:79:68:81:4e:40:04:bd:
         6e:f2:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:47 2025 by rpki-client