This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1628B7CEE0C711F0873894B7DAE4EC9C.roa
File:                     1628B7CEE0C711F0873894B7DAE4EC9C.roa (raw, json)
Hash identifier:          PPnPDoJXgpxWKCB7mceB6D9Fj+ceod0hNx8ziD/WoyQ=
Subject key identifier:   7F:DE:2A:A3:BC:D7:A5:D9:3E:09:44:B1:4E:DB:C5:4B:28:59:4B:60
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B0C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1628B7CEE0C711F0873894B7DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 12:50:13 +0000
ROA not before:           Wed 24 Dec 2025 12:50:08 +0000
ROA not after:            Sat 31 Jan 2026 12:50:08 +0000
asID:                     62240
IP address blocks:        154.195.6.0/24 maxlen: 24
                          154.195.7.0/24 maxlen: 24
                          154.195.16.0/24 maxlen: 24
                          154.195.17.0/24 maxlen: 24
                          154.195.18.0/24 maxlen: 24
                          154.195.19.0/24 maxlen: 24
                          154.195.20.0/24 maxlen: 24
                          154.195.21.0/24 maxlen: 24
                          154.195.22.0/24 maxlen: 24
                          154.195.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110788 (0x1b0c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 24 12:50:08 2025 GMT
            Not After : Jan 31 12:50:08 2026 GMT
        Subject: CN=694be185-098a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:5d:48:f7:c1:58:74:56:aa:f0:a2:48:31:
                    d9:14:01:f9:2f:ac:d9:c5:27:25:9b:6d:33:b4:61:
                    4c:2a:53:89:87:94:ad:eb:96:93:02:df:9a:08:b9:
                    06:9d:a9:8a:f8:1d:2b:93:68:10:cd:ba:5e:8f:aa:
                    89:a4:fa:23:c7:c1:94:da:65:32:95:4d:eb:db:bd:
                    e3:74:a9:17:56:34:be:66:b4:7b:52:81:bd:bd:d9:
                    30:27:26:df:b8:bf:91:d7:66:64:8c:ea:4d:d4:ac:
                    b0:34:1e:84:92:2a:31:1f:ba:21:b7:2b:61:84:18:
                    14:37:50:98:75:aa:cc:14:15:31:1f:68:33:10:b2:
                    89:68:df:6d:36:d6:ed:07:08:cf:32:ee:f4:3d:46:
                    f7:a0:b5:7a:bf:94:02:c0:12:72:bb:99:ee:3c:1c:
                    aa:5a:c2:65:db:f8:63:c1:24:2c:71:51:59:d4:07:
                    74:28:9d:43:95:60:0e:c4:02:1f:b6:46:e4:e2:63:
                    47:80:77:5c:27:12:f1:e4:e2:fc:85:65:a9:43:aa:
                    84:10:07:a0:22:9c:b0:6f:4c:a1:1d:32:8f:0c:90:
                    d7:f6:ca:8b:57:cd:a4:f0:f1:e0:d1:60:46:c0:11:
                    64:df:7a:36:d8:92:a1:c2:42:d3:ce:bc:b3:7f:df:
                    fd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DE:2A:A3:BC:D7:A5:D9:3E:09:44:B1:4E:DB:C5:4B:28:59:4B:60
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1628B7CEE0C711F0873894B7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.6.0/23
                  154.195.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d6:12:8c:cb:51:f2:06:78:46:2e:81:af:ef:a3:1f:b6:e5:4c:
         83:05:4a:a8:85:58:68:26:88:ce:a4:24:1e:ee:f0:1d:12:3b:
         d6:73:60:71:06:95:1e:a9:69:a9:de:2b:ea:7f:b0:d2:c2:c4:
         e1:4e:d3:b2:50:4a:36:ea:bf:3c:b0:1d:46:db:a7:3c:eb:32:
         62:bd:8f:74:9e:3b:6e:33:db:07:8d:42:f7:07:92:44:76:7d:
         62:96:6d:a5:93:e0:98:2f:2c:3f:9d:e6:40:bd:4d:ba:c0:0c:
         b2:d1:12:20:e6:cb:bb:b8:a8:c9:21:62:9f:71:9f:a7:d5:bd:
         a5:00:ec:52:c6:6d:9f:e1:a5:00:1d:49:f7:2a:8c:9a:e1:27:
         09:ce:ec:4b:04:5f:62:8b:0c:d3:73:f7:a1:39:f9:ea:61:94:
         de:5a:d0:83:f2:5a:66:e2:b6:36:2a:05:cc:e9:d7:91:21:3a:
         24:7e:62:fd:d1:9a:d1:5c:50:2d:4b:cb:c8:36:39:b0:5b:07:
         6e:09:be:06:dd:1e:7b:1f:74:57:f0:10:b7:a3:de:fb:4a:ac:
         7b:ad:16:e3:b6:48:fb:92:c9:3d:05:08:03:07:c8:c4:45:21:
         a2:e5:7d:2b:73:ce:34:68:7e:2b:51:28:3c:fc:e7:b2:f6:56:
         c6:1a:24:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:48:47 2025 by rpki-client