This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/791FB380DB4211F0ACEBB399DAE4EC9C.roa
File:                     791FB380DB4211F0ACEBB399DAE4EC9C.roa (raw, json)
Hash identifier:          crnzVF0fqBSpdLr2me0VzLa3RSIUrWVLHQCP9em72qU=
Subject key identifier:   F1:2B:8B:F5:59:E8:5B:C7:44:65:F4:09:91:13:2D:7F:3F:FD:CF:3E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AEEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/791FB380DB4211F0ACEBB399DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 12:18:20 +0000
ROA not before:           Wed 17 Dec 2025 12:18:14 +0000
ROA not after:            Fri 26 Dec 2025 12:18:14 +0000
asID:                     138915
IP address blocks:        154.203.130.0/23 maxlen: 24
                          154.203.132.0/24 maxlen: 24
                          154.203.136.0/24 maxlen: 24
                          154.203.137.0/24 maxlen: 24
                          154.203.143.0/24 maxlen: 24
                          154.203.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110318 (0x1aeee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 12:18:14 2025 GMT
            Not After : Dec 26 12:18:14 2025 GMT
        Subject: CN=69429f8c-3fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1f:60:7a:ef:d5:55:2d:83:13:c2:b7:26:84:
                    bf:24:6d:9b:b2:3b:bf:15:cb:e5:3c:58:0e:12:13:
                    3c:1b:2d:ca:e2:63:10:53:e1:f4:03:53:73:d3:9f:
                    df:97:e8:93:fd:6a:d5:9c:5d:9c:b8:97:f1:ad:d6:
                    38:cf:f0:19:6f:cd:ca:5e:37:39:4f:df:83:85:d5:
                    ae:f1:0d:16:0f:d9:36:26:1a:9f:d2:2f:e8:cb:6e:
                    9c:18:de:00:e9:db:07:05:a9:2d:b8:a0:77:f7:50:
                    c9:94:fa:7e:d6:2a:92:66:9e:2d:c1:21:52:2c:2f:
                    79:56:1e:cf:58:6a:84:3a:5f:7c:1c:12:e2:1a:bd:
                    5e:b5:95:92:53:c2:e1:2e:4d:2f:6e:24:3b:f7:0d:
                    cc:7e:77:21:9d:ae:31:f9:ea:33:7c:c1:9b:4d:d1:
                    93:b1:f0:84:a5:bb:35:36:10:ee:7c:5b:b1:2b:82:
                    8b:27:0a:76:44:a2:ef:76:20:de:cd:85:a0:37:f9:
                    28:1c:50:20:ca:ae:48:8f:3d:d3:3b:05:80:ee:58:
                    61:38:6e:08:c6:5c:91:70:6d:d9:58:cd:f1:d7:57:
                    f2:e8:ce:42:f9:7d:62:c7:8b:13:b3:9e:92:74:35:
                    b1:49:34:ff:7d:7b:9e:ef:a5:01:15:45:ab:0d:74:
                    13:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2B:8B:F5:59:E8:5B:C7:44:65:F4:09:91:13:2D:7F:3F:FD:CF:3E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/791FB380DB4211F0ACEBB399DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.130.0-154.203.132.255
                  154.203.136.0/23
                  154.203.143.0/24
                  154.203.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:e5:d0:1a:a9:9c:b6:93:a7:1b:52:6c:17:4c:3d:4e:c3:
         d1:e8:2b:a2:1f:9d:3e:8c:2f:4c:11:b7:8f:03:2a:f0:36:0e:
         ac:89:c0:64:40:31:0e:04:aa:ed:9a:b0:fe:db:65:9d:9c:31:
         e0:e9:3f:d9:3c:47:9e:40:08:93:93:ea:fd:45:7a:9d:50:b1:
         35:58:a0:8d:25:17:bb:0a:a4:9f:8d:61:30:dc:02:85:52:6f:
         b4:f7:0e:ca:25:d0:a5:e7:aa:0e:23:14:34:b8:39:0c:b5:80:
         9e:58:a5:05:93:70:87:d2:1e:f9:ff:69:15:b6:4a:4b:ad:54:
         b1:67:90:c2:64:5a:d7:b3:03:fc:f5:dd:b2:f3:bb:4b:e7:95:
         17:99:a2:7f:ee:32:e8:67:b0:20:7b:07:d2:ff:ee:da:d1:4c:
         68:be:cc:8b:3d:c6:4a:79:b0:68:5e:5f:9d:d1:58:f0:28:2a:
         1d:05:01:ac:2c:1b:be:07:5e:9c:d5:c3:6d:6e:d9:02:67:2c:
         fc:a8:f0:73:fa:2f:4e:c8:58:86:6d:80:ab:52:9f:66:04:f9:
         8c:41:ec:5f:bb:a2:dd:38:1b:d7:ba:aa:e8:2e:eb:4e:4b:3f:
         6b:06:01:8a:3b:52:9e:7f:1c:1f:49:c3:d8:10:80:df:c1:3f:
         ec:90:13:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:20 2025 by rpki-client