This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/792D629ED98C11F08416AADCDAE4EC9C.roa
File:                     792D629ED98C11F08416AADCDAE4EC9C.roa (raw, json)
Hash identifier:          MHAsHKUocQD+oJnxwzieLkp0Gzd+keZy5dLUeXnLv+Q=
Subject key identifier:   7E:32:80:95:AB:15:C1:7D:70:52:21:BF:3D:08:4C:E6:EF:83:9C:87
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AE1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/792D629ED98C11F08416AADCDAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 08:03:00 +0000
ROA not before:           Mon 15 Dec 2025 08:02:56 +0000
ROA not after:            Wed 13 Dec 2028 08:02:56 +0000
asID:                     17561
IP address blocks:        154.92.176.0/24 maxlen: 24
                          154.92.177.0/24 maxlen: 24
                          154.92.178.0/24 maxlen: 24
                          154.92.179.0/24 maxlen: 24
                          154.92.180.0/24 maxlen: 24
                          154.92.181.0/24 maxlen: 24
                          154.92.182.0/24 maxlen: 24
                          154.92.183.0/24 maxlen: 24
                          154.92.184.0/24 maxlen: 24
                          154.92.185.0/24 maxlen: 24
                          154.92.186.0/24 maxlen: 24
                          154.92.187.0/24 maxlen: 24
                          154.92.188.0/24 maxlen: 24
                          154.92.189.0/24 maxlen: 24
                          154.92.190.0/24 maxlen: 24
                          154.92.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110109 (0x1ae1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 15 08:02:56 2025 GMT
            Not After : Dec 13 08:02:56 2028 GMT
        Subject: CN=693fc0b4-c009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:25:b9:03:9f:4a:c4:6a:ed:b9:9c:44:63:
                    a8:5e:db:ee:68:98:ec:0a:16:3f:37:27:b6:d0:d4:
                    1d:b7:d5:09:ae:e5:ad:0b:62:2d:81:5e:a5:3c:0b:
                    3f:83:72:e3:ac:dc:b1:db:10:fc:9d:58:f5:6f:ad:
                    b5:4b:c4:74:6f:44:16:4e:16:47:86:42:59:ab:aa:
                    88:a0:f7:62:dd:c5:d9:db:10:1a:85:12:ff:06:11:
                    8e:87:69:7a:36:56:88:3a:0f:02:15:0d:86:70:78:
                    c1:61:73:fb:33:8a:63:1a:31:1f:09:21:24:e4:15:
                    b9:51:35:8e:e2:3e:31:2d:a6:fe:20:81:06:60:29:
                    12:e3:49:45:d3:d3:43:79:40:9d:2a:4d:04:97:a0:
                    49:e5:4e:38:39:e3:b9:5f:2f:5c:8d:33:cf:dc:c2:
                    22:98:11:99:f6:35:9d:17:4b:ca:ae:f9:35:b8:68:
                    4a:cc:c9:37:8d:a8:08:84:8c:40:80:72:00:6c:c0:
                    12:b8:e7:3a:83:18:e5:51:1f:72:90:8f:ab:17:e3:
                    2d:4b:58:b9:56:5f:d3:d8:5a:5a:cb:92:e8:6e:d8:
                    ed:7f:b1:ab:59:22:fe:d7:0a:8e:a1:de:ca:65:0f:
                    d7:5d:af:af:23:e3:e9:ff:9b:24:06:18:dd:6c:c1:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:32:80:95:AB:15:C1:7D:70:52:21:BF:3D:08:4C:E6:EF:83:9C:87
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/792D629ED98C11F08416AADCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c1:a0:02:8f:b7:52:00:9e:26:e4:3a:92:70:25:80:46:db:cf:
         2b:85:f1:05:f1:c2:63:9f:1b:bd:07:f1:be:4c:46:ed:cb:a3:
         ae:11:52:48:0c:ff:54:31:f8:62:25:eb:01:37:2e:82:39:d5:
         5b:e2:70:46:fd:22:ba:be:85:a5:92:32:3a:ce:39:8f:59:8f:
         1f:03:62:83:e3:d4:b7:9b:2e:a9:a1:20:04:d4:80:5a:13:f2:
         ca:f4:c0:a6:eb:30:a5:72:0e:3b:73:49:8f:bc:67:dd:37:f3:
         c2:9c:b8:32:d0:28:fe:7d:fc:4f:af:e9:dc:81:bb:72:69:48:
         10:55:e7:1a:d8:dc:9d:5e:21:b7:1e:4a:0b:84:e1:7c:67:85:
         c9:c7:ac:08:e5:de:1c:7c:0f:e4:46:51:92:01:37:0c:71:6a:
         92:e5:d9:30:b5:e4:6c:2b:7e:ee:fe:a2:50:05:2f:0e:01:65:
         f7:00:76:aa:cf:ef:6e:b5:2c:c3:4b:ab:b9:fb:2e:c6:f5:7e:
         c8:4d:ba:4b:b2:7f:83:b3:a8:b7:83:99:ae:c7:b1:d4:5f:b0:
         e1:40:0e:9f:5a:db:d3:dc:b8:45:6d:ac:b3:95:10:8d:39:2d:
         3d:b7:b4:2b:36:77:15:21:e3:bf:4a:f1:37:6c:b3:18:ba:53:
         dc:5c:9a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:07 2025 by rpki-client