This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/967837FEDBE711F0B5D6F9A6DAE4EC9C.roa
File:                     967837FEDBE711F0B5D6F9A6DAE4EC9C.roa (raw, json)
Hash identifier:          FXpeOyZkdttcGnlDr5enT9qnEV9EzHyMwUrzhwUgDiI=
Subject key identifier:   48:C1:F0:1D:AE:6C:C6:71:D9:8A:0D:D2:E9:36:C6:F4:65:ED:EC:4B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/967837FEDBE711F0B5D6F9A6DAE4EC9C.roa
Signing time:             Thu 18 Dec 2025 08:00:16 +0000
ROA not before:           Thu 18 Dec 2025 08:00:11 +0000
ROA not after:            Mon 19 Jan 2026 08:00:11 +0000
asID:                     9304
IP address blocks:        154.92.192.0/24 maxlen: 24
                          154.92.193.0/24 maxlen: 24
                          154.92.194.0/24 maxlen: 24
                          154.92.198.0/24 maxlen: 24
                          154.92.200.0/24 maxlen: 24
                          154.92.201.0/24 maxlen: 24
                          154.92.202.0/24 maxlen: 24
                          154.92.203.0/24 maxlen: 24
                          154.92.204.0/24 maxlen: 24
                          154.92.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110421 (0x1af55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 18 08:00:11 2025 GMT
            Not After : Jan 19 08:00:11 2026 GMT
        Subject: CN=6943b490-804b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:f7:35:6c:3b:37:39:3c:fe:69:17:3e:57:
                    20:b5:03:48:0b:b8:27:5b:b1:85:1e:3c:f9:4d:54:
                    6b:07:d8:fc:3f:63:95:3a:d5:18:32:ef:6a:ad:e0:
                    bd:eb:65:ac:dc:d1:50:19:7d:36:84:31:38:3b:1a:
                    98:4f:ab:b4:95:10:99:49:01:94:fc:6a:12:21:36:
                    10:fb:7f:53:f4:d9:55:87:4f:f4:65:8c:f3:b5:dc:
                    36:6f:38:1b:9c:a1:d6:f8:44:68:83:b8:79:67:17:
                    53:e2:e2:b1:09:9e:37:7a:c9:6b:d8:fb:ff:24:97:
                    83:85:aa:b9:b1:48:15:4a:0a:ef:aa:65:8a:9a:53:
                    aa:e2:d3:02:5f:15:50:47:5d:ee:8d:7e:51:31:67:
                    3f:3a:61:de:15:76:b7:c1:77:39:74:0c:b4:66:ed:
                    7b:3e:0f:d5:e8:af:89:67:0f:59:11:c5:7f:ec:61:
                    90:bc:c7:95:9e:8f:bd:bf:89:7b:a0:66:67:c5:53:
                    9f:c1:ac:7b:36:c1:ca:70:3d:df:57:75:b4:cc:e8:
                    f9:6d:93:eb:ef:ba:06:9d:2c:81:f2:43:eb:ae:5c:
                    65:da:b7:be:04:4f:f6:5d:37:34:eb:39:a4:65:a6:
                    ef:fa:af:7d:2b:1c:2b:42:68:fc:06:9d:b6:69:99:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C1:F0:1D:AE:6C:C6:71:D9:8A:0D:D2:E9:36:C6:F4:65:ED:EC:4B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/967837FEDBE711F0B5D6F9A6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.192.0-154.92.194.255
                  154.92.198.0/24
                  154.92.200.0-154.92.204.255
                  154.92.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:fa:04:af:0a:5b:ad:52:f8:91:46:65:b6:50:4d:18:d3:dd:
         50:e2:67:bd:f9:5f:17:a0:2e:22:c3:49:e4:13:5a:c5:ba:15:
         d3:35:22:a8:07:2f:67:73:d7:b5:89:2f:a7:24:5c:4d:05:c4:
         ca:cb:b7:2d:f0:08:85:ab:71:96:46:9d:28:46:14:54:7f:b2:
         af:41:f3:d2:09:89:78:c8:5f:08:2b:6b:af:61:57:a4:9c:40:
         bf:ff:70:6a:8a:74:54:7b:59:22:22:d8:c5:d7:3f:23:5e:dc:
         aa:8e:3d:e4:f1:03:4b:45:c2:77:0a:b2:d5:c7:db:4a:18:91:
         fe:72:53:30:68:71:f7:1a:fe:0d:09:79:b9:54:30:59:9e:78:
         97:0c:22:d9:99:3c:e1:9f:81:fe:e8:13:eb:7d:51:74:3d:70:
         28:f4:e2:01:63:cb:6b:03:be:ee:e6:72:eb:2b:68:5a:cf:b1:
         02:a6:57:ea:27:c1:3e:35:da:f4:7e:8e:b0:09:8e:43:f1:be:
         43:df:ec:61:59:9d:53:96:92:fc:ae:dc:28:b5:a9:6c:0e:b5:
         bb:b4:c6:2f:da:98:21:04:f1:ca:9c:f7:0b:20:97:71:aa:3d:
         ec:2d:5c:f8:ed:45:ea:b7:ed:5c:7c:d6:c5:1f:45:37:d3:2a:
         ae:2a:95:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:56 2025 by rpki-client