This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C08E24D9A611F0B21C1A7EDAE4EC9C.roa
File:                     97C08E24D9A611F0B21C1A7EDAE4EC9C.roa (raw, json)
Hash identifier:          NOzCUXRR4BthTpTeF+ZxB79O3dNOEGSNIY9pFyb8SBY=
Subject key identifier:   56:01:12:8C:1D:9E:F3:6F:6F:A0:E7:11:2F:7A:49:AB:5C:AB:3E:C7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AE23
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C08E24D9A611F0B21C1A7EDAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 11:09:58 +0000
ROA not before:           Mon 15 Dec 2025 11:09:54 +0000
ROA not after:            Fri 16 Jan 2026 11:09:54 +0000
asID:                     22773
IP address blocks:        154.82.11.0/24 maxlen: 24
                          154.82.12.0/24 maxlen: 24
                          154.82.13.0/24 maxlen: 24
                          154.82.14.0/24 maxlen: 24
                          154.82.15.0/24 maxlen: 24
                          154.85.12.0/24 maxlen: 24
                          154.85.22.0/24 maxlen: 24
                          154.85.23.0/24 maxlen: 24
                          154.85.104.0/24 maxlen: 24
                          154.85.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110115 (0x1ae23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 15 11:09:54 2025 GMT
            Not After : Jan 16 11:09:54 2026 GMT
        Subject: CN=693fec86-1f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:db:1a:38:80:78:a3:65:cb:7f:a7:40:51:
                    df:2e:1a:3d:a5:f0:aa:1c:3f:e0:b1:cc:2f:07:30:
                    24:ce:53:6c:c6:61:f9:41:e8:22:67:4c:2f:65:78:
                    58:1d:25:36:5b:12:d3:57:65:6c:1c:b3:15:b1:a6:
                    bc:ef:41:07:b2:23:c9:06:e2:7c:69:9a:66:1d:00:
                    bc:d7:41:3e:c8:16:a9:08:7c:6a:b9:80:82:9a:e0:
                    55:21:7c:2d:ba:4e:b5:55:26:99:39:7c:dc:34:23:
                    42:06:19:5f:1d:13:76:5a:67:0d:d7:b2:f0:3f:92:
                    d3:c5:4b:02:c3:73:00:38:15:1f:3b:52:5c:e1:af:
                    f5:3e:73:cb:c3:d1:e4:45:6f:47:ef:f3:40:b5:7b:
                    09:a6:dd:b3:64:e4:40:67:d7:8e:9a:76:34:22:34:
                    39:35:ab:95:d4:33:19:44:32:7e:1d:b9:c8:7a:14:
                    f7:02:ce:ad:a8:81:bd:51:0b:b5:24:3e:ff:fd:c5:
                    83:27:51:85:0b:60:97:c2:52:a2:72:66:6a:cf:7b:
                    62:81:ff:e7:ca:a0:b1:79:a6:cc:b1:4d:c2:0b:b3:
                    e3:0d:3f:89:15:c3:d3:0d:ba:33:a4:cf:25:80:aa:
                    c1:50:72:6a:93:68:e1:c2:9f:1e:86:41:07:09:23:
                    e3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:01:12:8C:1D:9E:F3:6F:6F:A0:E7:11:2F:7A:49:AB:5C:AB:3E:C7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C08E24D9A611F0B21C1A7EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.11.0-154.82.15.255
                  154.85.12.0/24
                  154.85.22.0/23
                  154.85.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:46:2c:cf:31:fb:9c:7a:d2:23:5f:00:1f:1c:8e:64:fb:e6:
         61:9b:c4:6b:a5:8c:7c:f1:75:08:17:86:9e:bc:b3:3d:06:db:
         71:c3:80:bf:af:6d:b6:34:57:6b:2e:c3:58:3a:91:0a:b3:9a:
         af:99:c0:94:09:59:4b:b6:26:de:98:2a:1c:86:05:f4:da:16:
         e1:e7:86:df:e1:f9:82:23:52:ab:8b:a6:6d:78:88:db:72:df:
         b3:79:d8:c4:a0:7d:a6:36:6d:79:34:57:00:2e:9f:e0:30:11:
         49:26:c0:38:6b:8e:ea:b1:d8:a4:48:46:bb:8e:dd:21:a4:c0:
         ad:c4:22:37:f5:86:f4:34:1d:b9:df:41:8e:75:4c:c1:6a:82:
         6a:31:ac:89:20:d9:3c:38:a5:da:51:58:92:d3:c2:8e:7e:9e:
         f2:c2:85:f3:b9:d5:6f:7e:b5:cd:1d:20:7f:48:64:37:35:e4:
         92:58:50:1f:92:54:f5:13:72:ea:d2:85:d5:ae:ce:ff:08:46:
         a9:ab:51:c8:ec:8c:f6:70:98:1b:4c:2b:e7:82:e8:50:20:a7:
         23:75:ca:dc:d5:9c:79:0d:cc:c5:f1:f0:37:77:5f:9e:ed:6d:
         be:34:78:66:1a:9d:98:e1:c3:fc:56:14:38:1a:b9:67:cc:29:
         6b:0c:b0:07
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAa4jMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjE1MTEwOTU0WhcNMjYwMTE2MTEwOTU0WjAYMRYw
FAYDVQQDEw02OTNmZWM4Ni0xZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtsrbGjiAeKNly3+nQFHfLho9pfCqHD/gscwvBzAkzlNsxmH5QegiZ0wv
ZXhYHSU2WxLTV2VsHLMVsaa870EHsiPJBuJ8aZpmHQC810E+yBapCHxquYCCmuBV
IXwtuk61VSaZOXzcNCNCBhlfHRN2WmcN17LwP5LTxUsCw3MAOBUfO1Jc4a/1PnPL
w9HkRW9H7/NAtXsJpt2zZORAZ9eOmnY0IjQ5NauV1DMZRDJ+HbnIehT3As6tqIG9
UQu1JD7//cWDJ1GFC2CXwlKicmZqz3tigf/nyqCxeabMsU3CC7PjDT+JFcPTDboz
pM8lgKrBUHJqk2jhwp8ehkEHCSPjYwIDAQABo4ICvzCCArswHQYDVR0OBBYEFFYB
EowdnvNvb6DnES96Satcqz7HMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85N0MwOEUyNEQ5QTYxMUYwQjIxQzFBN0VEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBACaUgsDBASaUgADBACa
VQwDBAGaVRYDBAGaVWgwDQYJKoZIhvcNAQELBQADggEBAHpGLM8x+5x60iNfAB8c
jmT75mGbxGuljHzxdQgXhp68sz0G23HDgL+vbbY0V2suw1g6kQqzmq+ZwJQJWUu2
Jt6YKhyGBfTaFuHnht/h+YIjUquLpm14iNty37N52MSgfaY2bXk0VwAun+AwEUkm
wDhrjuqx2KRIRruO3SGkwK3EIjf1hvQ0HbnfQY51TMFqgmoxrIkg2Tw4pdpRWJLT
wo5+nvLChfO51W9+tc0dIH9IZDc15JJYUB+SVPUTcurShdWuzv8IRqmrUcjsjPZw
mBtMK+eC6FAgpyN1ytzVnHkNzMXx8Dd3X57tbb40eGYanZjhw/xWFDgauWfMKWsM
sAc=
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:35 2025 by rpki-client