This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFA7FDDED9B411F0A571DBD5DAE4EC9C.roa
File:                     FFA7FDDED9B411F0A571DBD5DAE4EC9C.roa (raw, json)
Hash identifier:          NlrnUdZR4Us3Jd2Taubi/zlCvMz3FENn+7VE5ZJ8b8M=
Subject key identifier:   DE:70:72:32:74:5A:90:BF:DD:7A:FA:4D:74:DB:01:54:E2:7F:4A:39
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AE3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFA7FDDED9B411F0A571DBD5DAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 12:53:06 +0000
ROA not before:           Mon 15 Dec 2025 12:53:01 +0000
ROA not after:            Tue 03 Mar 2026 12:53:01 +0000
asID:                     399077
IP address blocks:        154.91.67.0/24 maxlen: 24
                          154.91.68.0/24 maxlen: 24
                          154.91.69.0/24 maxlen: 24
                          154.91.70.0/24 maxlen: 24
                          154.91.71.0/24 maxlen: 24
                          154.91.72.0/24 maxlen: 24
                          154.91.73.0/24 maxlen: 24
                          154.91.74.0/24 maxlen: 24
                          154.91.75.0/24 maxlen: 24
                          154.91.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110141 (0x1ae3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 15 12:53:01 2025 GMT
            Not After : Mar  3 12:53:01 2026 GMT
        Subject: CN=694004b2-0d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:f0:3e:72:a8:3b:e5:9e:e7:cd:da:d5:34:
                    31:cf:3b:6b:ab:ba:99:81:f2:79:e9:5d:a7:09:aa:
                    fa:e9:97:db:ad:40:bb:86:39:0d:a9:7c:4e:31:90:
                    0c:6f:49:8e:bc:bc:e3:94:92:4c:ed:6f:0b:98:c5:
                    de:61:21:4c:67:08:ab:b4:24:08:09:7d:09:66:db:
                    94:18:31:6a:5d:e0:9a:96:0c:b8:ce:05:35:af:93:
                    06:3d:32:57:cb:bd:f0:7e:df:5b:2b:1d:8d:37:c5:
                    7c:8f:0f:0f:08:5e:98:47:6a:85:75:68:b2:8e:63:
                    2c:4e:2a:a4:f4:28:1b:5d:cf:26:d7:04:38:86:b6:
                    35:a6:8f:cd:6f:52:21:4f:22:c3:96:fd:8f:ec:87:
                    97:b7:9d:a6:4d:de:1c:28:7b:dd:ee:75:ac:b3:79:
                    b5:2e:13:b0:34:18:f9:42:10:e0:9c:a0:3c:31:06:
                    9d:e7:1f:17:bf:09:c4:59:23:3f:e4:c8:d7:2e:d7:
                    31:3a:62:92:81:28:30:b2:d4:ff:63:50:51:9e:4d:
                    44:fc:d4:31:4d:c4:a1:75:60:7d:e3:a6:8c:47:84:
                    19:23:24:64:e5:8c:92:40:ce:bc:34:41:db:27:ad:
                    90:8f:e8:fa:c8:5c:cb:b9:e5:90:a0:db:e6:6a:df:
                    33:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:70:72:32:74:5A:90:BF:DD:7A:FA:4D:74:DB:01:54:E2:7F:4A:39
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFA7FDDED9B411F0A571DBD5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.67.0-154.91.76.255

    Signature Algorithm: sha256WithRSAEncryption
         11:32:6b:78:6a:ed:5f:8d:5e:69:6b:3a:14:bd:23:b1:4e:7a:
         0a:d1:52:d6:b2:5d:df:5d:da:5f:3e:b4:28:07:18:e0:fe:32:
         b9:2d:5d:98:d7:ba:2b:6f:23:50:f4:37:01:88:e6:49:f3:86:
         0f:55:02:db:50:56:dd:46:7d:71:0d:5d:e1:7b:cb:b8:6a:8a:
         11:8b:61:b6:9d:51:b8:ef:19:3e:f0:6a:2d:b7:b7:da:f9:20:
         75:a5:12:56:76:e8:16:e9:4a:c0:d5:ce:cc:ed:a1:4d:0e:dc:
         f7:51:20:70:f4:9a:4b:73:4f:50:4e:5f:5c:23:45:d0:0c:49:
         22:f0:43:7e:b1:1e:71:c3:d1:ce:07:73:fb:c4:db:96:5d:31:
         dd:68:24:bf:42:c4:ab:e4:73:04:02:ec:c1:33:31:24:6b:8a:
         06:68:0c:0c:01:c0:3b:76:67:6e:70:cb:a5:c7:c9:4e:66:00:
         9c:a0:44:db:ae:3e:56:99:d2:e5:64:e2:3e:fc:35:86:4b:a8:
         ca:ee:e3:4a:bb:66:68:03:ea:a1:23:5b:76:f2:9f:0a:2d:9c:
         b3:93:3b:5f:d2:5b:ae:b8:87:2d:ed:70:d5:f3:2e:48:c7:91:
         8b:79:cf:ed:c7:e5:69:2e:99:11:91:29:ac:cc:73:8d:5c:0c:
         46:15:a6:6f
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAa49MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjE1MTI1MzAxWhcNMjYwMzAzMTI1MzAxWjAYMRYw
FAYDVQQDEw02OTQwMDRiMi0wZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwg7wPnKoO+We583a1TQxzztrq7qZgfJ56V2nCar66ZfbrUC7hjkNqXxO
MZAMb0mOvLzjlJJM7W8LmMXeYSFMZwirtCQICX0JZtuUGDFqXeCalgy4zgU1r5MG
PTJXy73wft9bKx2NN8V8jw8PCF6YR2qFdWiyjmMsTiqk9CgbXc8m1wQ4hrY1po/N
b1IhTyLDlv2P7IeXt52mTd4cKHvd7nWss3m1LhOwNBj5QhDgnKA8MQad5x8XvwnE
WSM/5MjXLtcxOmKSgSgwstT/Y1BRnk1E/NQxTcShdWB946aMR4QZIyRk5YySQM68
NEHbJ62Qj+j6yFzLueWQoNvmat8zdQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFN5w
cjJ0WpC/3Xr6TXTbAVTif0o5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRkE3RkRERUQ5QjQxMUYwQTU3MURCRDVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaW0MDBACaW0wwDQYJ
KoZIhvcNAQELBQADggEBABEya3hq7V+NXmlrOhS9I7FOegrRUtayXd9d2l8+tCgH
GOD+MrktXZjXuitvI1D0NwGI5knzhg9VAttQVt1GfXENXeF7y7hqihGLYbadUbjv
GT7wai23t9r5IHWlElZ26BbpSsDVzsztoU0O3PdRIHD0mktzT1BOX1wjRdAMSSLw
Q36xHnHD0c4Hc/vE25ZdMd1oJL9CxKvkcwQC7MEzMSRrigZoDAwBwDt2Z25wy6XH
yU5mAJygRNuuPlaZ0uVk4j78NYZLqMru40q7ZmgD6qEjW3bynwotnLOTO1/SW664
hy3tcNXzLkjHkYt5z+3H5WkumRGRKazMc41cDEYVpm8=
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:35:48 2025 by rpki-client