This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F819DED4D76111F0915C69C5DAE4EC9C.roa
File:                     F819DED4D76111F0915C69C5DAE4EC9C.roa (raw, json)
Hash identifier:          E4aEoWhq/MT2eeRuTjwh8LA/xh3quD9z2ttqFEtUTGA=
Subject key identifier:   AF:4F:89:AE:50:69:E4:92:3D:7B:DE:93:8C:B9:87:1C:94:95:07:63
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AE06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F819DED4D76111F0915C69C5DAE4EC9C.roa
Signing time:             Fri 12 Dec 2025 13:53:42 +0000
ROA not before:           Fri 12 Dec 2025 13:53:36 +0000
ROA not after:            Tue 12 Dec 2028 13:53:36 +0000
asID:                     17561
IP address blocks:        154.207.201.0/24 maxlen: 24
                          154.207.202.0/24 maxlen: 24
                          154.207.203.0/24 maxlen: 24
                          154.207.204.0/24 maxlen: 24
                          154.207.205.0/24 maxlen: 24
                          154.207.206.0/24 maxlen: 24
                          154.207.207.0/24 maxlen: 24
                          154.207.216.0/24 maxlen: 24
                          154.207.217.0/24 maxlen: 24
                          154.207.218.0/24 maxlen: 24
                          154.207.219.0/24 maxlen: 24
                          154.207.224.0/24 maxlen: 24
                          154.207.225.0/24 maxlen: 24
                          154.207.228.0/24 maxlen: 24
                          154.207.229.0/24 maxlen: 24
                          154.207.230.0/24 maxlen: 24
                          154.207.231.0/24 maxlen: 24
                          154.207.240.0/24 maxlen: 24
                          154.207.241.0/24 maxlen: 24
                          154.207.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110086 (0x1ae06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 12 13:53:36 2025 GMT
            Not After : Dec 12 13:53:36 2028 GMT
        Subject: CN=693c1e66-45a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:4f:9e:13:c2:2b:99:76:19:13:15:ec:e4:
                    11:8e:1d:3b:1d:d3:44:9d:64:b0:6f:0e:0f:3e:16:
                    18:6b:4d:d0:3c:ea:94:56:35:52:65:2e:35:73:66:
                    f1:46:00:66:b1:c0:30:3c:7b:2d:62:42:aa:e1:e9:
                    3d:2a:7e:9f:61:70:d4:eb:3b:d1:d7:54:c9:a6:3d:
                    8b:85:6a:ba:13:c6:a6:1c:19:1a:5f:f5:98:89:37:
                    11:99:51:0b:5d:cf:a8:5e:f7:d3:c3:53:00:4e:f7:
                    78:4a:84:ed:a9:8e:89:c5:b2:59:b9:8c:69:72:72:
                    52:34:c4:c4:5c:de:72:6c:97:72:80:ad:03:2a:1d:
                    71:08:0b:79:9d:12:1e:83:2f:ee:1e:61:31:21:38:
                    a9:ce:30:2e:e1:ea:85:76:78:f1:4e:7e:8f:2d:b0:
                    1b:bd:8f:09:83:3f:73:7a:f1:cd:36:83:6a:82:36:
                    93:fc:59:55:15:1f:59:88:60:f8:50:f5:dc:a1:73:
                    45:98:33:23:19:df:1b:77:a4:c7:ce:3c:99:53:5b:
                    bd:ba:5d:a6:f8:df:3f:d1:1e:c8:36:dc:d3:46:5e:
                    24:93:fd:68:64:c0:7a:ce:0e:3b:17:b3:ef:71:df:
                    06:20:85:c4:14:19:5b:5f:a2:3c:14:c9:62:54:d6:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4F:89:AE:50:69:E4:92:3D:7B:DE:93:8C:B9:87:1C:94:95:07:63
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F819DED4D76111F0915C69C5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.201.0-154.207.207.255
                  154.207.216.0/22
                  154.207.224.0/23
                  154.207.228.0/22
                  154.207.240.0-154.207.242.255

    Signature Algorithm: sha256WithRSAEncryption
         17:4f:e1:81:56:cd:1a:5b:11:6a:c0:c8:2e:ee:cc:7b:69:de:
         6c:78:82:d9:a7:65:ab:64:ff:fc:dc:33:39:4d:f2:a5:c1:81:
         a1:ce:3a:1e:52:e8:66:93:7f:35:28:da:70:e7:4c:e2:e9:13:
         f8:83:37:3f:72:f1:21:f5:90:1e:1f:b2:f8:92:2b:2f:1d:b0:
         7f:35:c6:44:47:e2:28:7d:84:a4:6c:1d:ad:fb:2b:a2:02:e3:
         5f:60:91:bc:07:e9:7c:69:a3:8e:3a:30:9c:19:52:3b:6d:18:
         40:58:7c:62:c0:70:92:d8:ef:55:31:f9:83:7f:78:3d:68:69:
         0a:5a:19:5f:1f:e2:c8:db:e8:b0:51:c9:d4:65:83:19:5e:bd:
         34:b7:dc:6c:34:a2:80:e4:a8:0f:c4:72:7d:05:d2:87:6b:1b:
         09:4e:9e:9d:43:8b:c9:f9:ce:2d:9d:e0:32:f5:45:cb:6c:1a:
         a2:5a:3f:5f:17:d5:72:2f:97:17:d5:91:a7:9b:15:4f:4b:bd:
         c5:0f:40:49:90:e0:56:27:ee:49:39:3b:b7:9d:a5:b7:8f:78:
         eb:36:98:ae:f1:37:c2:60:4a:a8:a4:7e:f9:23:40:75:08:9d:
         93:7c:3c:bb:bb:a7:a9:e1:0b:94:59:5d:ba:34:84:10:7c:ae:
         3e:63:4b:0e
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIDAa4GMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjEyMTM1MzM2WhcNMjgxMjEyMTM1MzM2WjAYMRYw
FAYDVQQDEw02OTNjMWU2Ni00NWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwu5PnhPCK5l2GRMV7OQRjh07HdNEnWSwbw4PPhYYa03QPOqUVjVSZS41
c2bxRgBmscAwPHstYkKq4ek9Kn6fYXDU6zvR11TJpj2LhWq6E8amHBkaX/WYiTcR
mVELXc+oXvfTw1MATvd4SoTtqY6JxbJZuYxpcnJSNMTEXN5ybJdygK0DKh1xCAt5
nRIegy/uHmExITipzjAu4eqFdnjxTn6PLbAbvY8Jgz9zevHNNoNqgjaT/FlVFR9Z
iGD4UPXcoXNFmDMjGd8bd6THzjyZU1u9ul2m+N8/0R7INtzTRl4kk/1oZMB6zg47
F7Pvcd8GIIXEFBlbX6I8FMliVNY7TwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFK9P
ia5QaeSSPXvek4y5hxyUlQdjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GODE5REVENEQ3NjExMUYwOTE1QzY5QzVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBACaz8kDBASaz8ADBAKa
z9gDBAGaz+ADBAKaz+QwDAMEBJrP8AMEAJrP8jANBgkqhkiG9w0BAQsFAAOCAQEA
F0/hgVbNGlsRasDILu7Me2nebHiC2adlq2T//NwzOU3ypcGBoc46HlLoZpN/NSja
cOdM4ukT+IM3P3LxIfWQHh+y+JIrLx2wfzXGREfiKH2EpGwdrfsrogLjX2CRvAfp
fGmjjjownBlSO20YQFh8YsBwktjvVTH5g394PWhpCloZXx/iyNvosFHJ1GWDGV69
NLfcbDSigOSoD8RyfQXSh2sbCU6enUOLyfnOLZ3gMvVFy2waolo/XxfVci+XF9WR
p5sVT0u9xQ9ASZDgVifuSTk7t52lt4946zaYrvE3wmBKqKR++SNAdQidk3w8u7un
qeELlFldujSEEHyuPmNLDg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:16 2025 by rpki-client