This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B6477CDB5C11F0AC12CDB9DAE4EC9C.roa
File:                     A1B6477CDB5C11F0AC12CDB9DAE4EC9C.roa (raw, json)
Hash identifier:          mqZn/+C+XS3GwYr7nbrtoizf3WDpu5MhfMHEWtXrMM4=
Subject key identifier:   D2:A6:D8:1B:9F:66:88:2A:F4:21:7B:B1:9A:60:96:8C:FC:82:20:A6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B6477CDB5C11F0AC12CDB9DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 15:25:35 +0000
ROA not before:           Wed 17 Dec 2025 15:25:30 +0000
ROA not after:            Fri 26 Dec 2025 15:25:30 +0000
asID:                     138915
IP address blocks:        154.205.128.0/24 maxlen: 24
                          154.205.129.0/24 maxlen: 24
                          154.205.130.0/24 maxlen: 24
                          154.205.131.0/24 maxlen: 24
                          154.205.132.0/24 maxlen: 24
                          154.205.133.0/24 maxlen: 24
                          154.205.134.0/24 maxlen: 24
                          154.205.135.0/24 maxlen: 24
                          154.205.136.0/23 maxlen: 24
                          154.205.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110347 (0x1af0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 15:25:30 2025 GMT
            Not After : Dec 26 15:25:30 2025 GMT
        Subject: CN=6942cb6f-99e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:e9:cb:bd:e7:27:c8:8e:af:cf:8a:12:36:
                    35:f6:3a:f1:85:3d:c9:d9:c0:25:3a:35:ed:b6:41:
                    f5:cc:d3:9d:f5:43:21:5f:69:88:67:a7:5d:2c:52:
                    3b:c8:1a:5d:3d:b5:d7:9b:87:7b:e3:32:bf:1e:a8:
                    4e:7a:22:5c:71:cd:95:d0:03:23:a2:ab:13:9b:08:
                    ae:b3:15:5b:cf:14:b4:45:1a:88:58:61:fe:a4:24:
                    d8:f3:1f:9b:07:ac:a1:c0:91:c4:83:7d:80:4e:c2:
                    a2:87:0d:12:03:1d:ea:1d:c0:3e:bd:23:02:96:c5:
                    04:c7:2b:fc:0f:66:0e:3d:19:ed:89:69:4d:84:fb:
                    df:74:e5:48:88:e9:84:41:5b:ab:87:4d:f5:2d:28:
                    65:de:ad:4b:f1:79:e4:c9:02:17:c9:1c:07:12:f8:
                    7b:fc:d2:a7:e4:10:34:80:a4:2e:af:5f:df:ea:8f:
                    68:c2:3f:0d:86:5d:44:c7:c9:d4:c3:26:15:70:e4:
                    2a:67:1d:f6:a4:06:8a:9b:f3:32:74:fe:ca:d7:fd:
                    69:1f:80:f5:1c:d1:30:57:f2:19:cb:95:c7:c4:35:
                    54:ee:4f:f0:e7:e6:d5:86:28:ed:b9:0d:b1:48:24:
                    c3:d3:11:6a:0d:65:ed:be:1b:e1:63:6e:9e:a8:30:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A6:D8:1B:9F:66:88:2A:F4:21:7B:B1:9A:60:96:8C:FC:82:20:A6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B6477CDB5C11F0AC12CDB9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.128.0-154.205.138.255

    Signature Algorithm: sha256WithRSAEncryption
         26:42:21:ea:f3:0c:dd:8d:4c:22:bd:ac:06:34:84:38:b4:30:
         af:0f:3f:3d:0e:87:78:e2:b1:23:0a:bd:b9:0b:ab:0e:0b:40:
         8d:23:42:fa:61:7a:d3:08:72:a2:37:29:41:5c:c3:29:d3:ac:
         6f:80:75:db:8f:33:6d:40:b7:ad:23:70:fa:fd:35:ff:18:9e:
         40:f4:e0:a1:aa:9d:f6:d1:d8:4f:35:6c:b6:99:d0:80:14:4a:
         78:df:37:30:48:a5:71:38:ac:3e:12:e8:7b:c6:0a:e2:0d:12:
         87:85:3d:70:8f:aa:a4:75:c0:a2:d1:32:6e:39:ba:81:2c:1a:
         0a:e8:da:1e:2c:4b:a8:12:9f:47:b8:aa:b2:83:15:b5:03:63:
         96:7a:7a:8f:f9:17:27:07:66:b6:99:4f:df:c9:a6:47:42:55:
         68:86:02:66:a4:59:9c:8e:69:af:f3:dd:fc:52:94:22:e1:8c:
         73:b0:e6:92:a9:ce:3c:e1:14:d8:c0:6c:91:cd:de:9b:c1:2f:
         dd:64:23:e5:a8:2a:54:91:ae:25:bb:f2:df:05:9c:5b:f8:cc:
         3d:71:b7:b1:0c:cd:58:1d:94:21:c4:b1:f6:2d:e0:1e:a1:b0:
         54:7d:50:29:2a:90:50:3e:49:99:2e:c6:98:d5:0b:4a:45:d4:
         05:90:37:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:02:36 2025 by rpki-client