This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4B1BF70DC1811F0A5D47FD3DAE4EC9C.roa
File:                     B4B1BF70DC1811F0A5D47FD3DAE4EC9C.roa (raw, json)
Hash identifier:          awwhcQoR/qfmaEYCDac1bczZMr+E/49pbrRtRzcY5AA=
Subject key identifier:   D0:85:89:06:CB:F0:C2:F2:0E:63:1C:49:13:FA:49:58:44:90:F9:73
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4B1BF70DC1811F0A5D47FD3DAE4EC9C.roa
Signing time:             Thu 18 Dec 2025 13:51:52 +0000
ROA not before:           Thu 18 Dec 2025 13:51:47 +0000
ROA not after:            Fri 09 Jan 2026 13:51:47 +0000
asID:                     141883
IP address blocks:        154.204.0.0/24 maxlen: 24
                          154.208.12.0/22 maxlen: 24
                          154.208.16.0/20 maxlen: 24
                          154.212.128.0/24 maxlen: 24
                          154.215.0.0/24 maxlen: 24
                          154.218.0.0/24 maxlen: 24
                          154.221.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110459 (0x1af7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 18 13:51:47 2025 GMT
            Not After : Jan  9 13:51:47 2026 GMT
        Subject: CN=694406f8-e9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dc:6f:35:d3:16:f3:86:04:e6:f2:11:de:34:
                    e7:43:7a:b6:c9:a8:dd:36:63:63:11:3e:71:2b:7d:
                    b3:dd:8b:84:96:b9:36:f3:3e:32:a5:34:2b:5f:c0:
                    d7:1c:e7:e2:de:7f:8f:44:ea:e7:f9:33:86:40:1d:
                    1f:f9:1b:49:32:f9:3b:c2:e1:15:f3:12:39:97:83:
                    4e:36:d3:59:b9:9d:6c:cf:75:f8:a3:fc:a6:46:04:
                    59:e3:e0:f2:dd:f0:c6:8b:a6:f3:bd:88:2d:75:8b:
                    97:6f:29:54:2a:e0:8c:5b:a0:62:89:1b:87:11:6f:
                    d7:24:fe:6e:08:60:25:33:b2:0e:dd:e5:71:62:a6:
                    7d:b1:e7:77:cf:42:a7:51:6d:18:2c:20:0e:c5:8d:
                    de:05:99:e6:a6:75:fc:43:23:a6:6b:1d:f0:87:76:
                    b9:db:31:4b:33:9b:eb:74:88:bf:22:b9:ce:d8:99:
                    12:47:e1:6f:86:98:3b:3e:cd:bf:75:0b:bd:51:c7:
                    46:03:8b:3a:a6:6b:11:de:a0:5c:44:b1:19:b8:4d:
                    bc:16:f6:9c:a0:e4:02:3a:5c:39:fe:de:29:0c:80:
                    42:34:37:09:9b:9a:f7:f7:d5:c2:74:a7:25:d2:ad:
                    df:59:e1:89:d4:b1:95:6e:63:30:01:9b:6e:6e:8a:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:85:89:06:CB:F0:C2:F2:0E:63:1C:49:13:FA:49:58:44:90:F9:73
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4B1BF70DC1811F0A5D47FD3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.0.0/24
                  154.208.12.0-154.208.31.255
                  154.212.128.0/24
                  154.215.0.0/24
                  154.218.0.0/24
                  154.221.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:2a:9b:de:e8:34:ba:22:38:9b:d0:03:50:7c:d5:c6:90:a7:
         fd:1d:f1:25:64:dd:39:13:3b:19:30:ca:32:fd:29:ce:a8:23:
         49:c2:81:4f:b8:f8:ba:6f:d1:07:5d:38:40:a9:9f:45:53:bc:
         7f:48:70:c7:56:3d:1e:49:48:65:55:45:99:8c:90:74:36:ef:
         e9:d6:c0:17:70:db:3e:e1:56:4a:36:93:de:f0:60:eb:98:07:
         83:30:c3:4c:5a:d3:a4:b3:83:de:a7:b0:11:4a:dd:f5:d6:a1:
         a3:b8:05:e6:82:26:ea:ec:fd:e5:6b:f8:df:3f:2e:52:7d:fd:
         ec:f8:5b:f7:83:b2:b3:6a:29:13:47:f5:87:84:50:d7:55:b2:
         b2:a9:a5:7c:4d:55:34:fb:3a:9e:86:84:bc:e0:f0:f1:60:2a:
         06:8f:f9:f6:c1:aa:20:81:c9:90:0d:fd:d0:8d:ad:10:e3:ef:
         16:fc:86:da:31:aa:7b:96:de:89:03:da:50:3f:d9:8f:a8:96:
         8c:75:e0:2e:39:a9:47:54:9c:35:e0:3a:16:7f:fc:bf:42:71:
         f7:3c:74:5a:f4:06:d6:fe:49:46:d1:e4:00:b6:35:22:a2:c7:
         c2:b2:98:46:73:cc:a2:35:08:72:4a:c9:a7:27:f4:0d:23:c4:
         1e:9d:85:1e
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAa97MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjE4MTM1MTQ3WhcNMjYwMTA5MTM1MTQ3WjAYMRYw
FAYDVQQDEw02OTQ0MDZmOC1lOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr9xvNdMW84YE5vIR3jTnQ3q2yajdNmNjET5xK32z3YuElrk28z4ypTQr
X8DXHOfi3n+PROrn+TOGQB0f+RtJMvk7wuEV8xI5l4NONtNZuZ1sz3X4o/ymRgRZ
4+Dy3fDGi6bzvYgtdYuXbylUKuCMW6BiiRuHEW/XJP5uCGAlM7IO3eVxYqZ9sed3
z0KnUW0YLCAOxY3eBZnmpnX8QyOmax3wh3a52zFLM5vrdIi/IrnO2JkSR+Fvhpg7
Ps2/dQu9UcdGA4s6pmsR3qBcRLEZuE28FvacoOQCOlw5/t4pDIBCNDcJm5r399XC
dKcl0q3fWeGJ1LGVbmMwAZtuboqkaQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFNCF
iQbL8MLyDmMcSRP6SVhEkPlzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNEIxQkY3MERDMTgxMUYwQTVENDdGRDNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAmswAMAwDBAKa0AwDBAWa
0AADBACa1IADBACa1wADBACa2gADBACa3QAwDQYJKoZIhvcNAQELBQADggEBAJAq
m97oNLoiOJvQA1B81caQp/0d8SVk3TkTOxkwyjL9Kc6oI0nCgU+4+Lpv0QddOECp
n0VTvH9IcMdWPR5JSGVVRZmMkHQ27+nWwBdw2z7hVko2k97wYOuYB4Mww0xa06Sz
g96nsBFK3fXWoaO4BeaCJurs/eVr+N8/LlJ9/ez4W/eDsrNqKRNH9YeEUNdVsrKp
pXxNVTT7Op6GhLzg8PFgKgaP+fbBqiCByZAN/dCNrRDj7xb8htoxqnuW3okD2lA/
2Y+olox14C45qUdUnDXgOhZ//L9Ccfc8dFr0Btb+SUbR5AC2NSKix8KymEZzzKI1
CHJKyacn9A0jxB6dhR4=
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:43 2025 by rpki-client