This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A0E644CFD911F080AE0B7BDAE4EC9C.roa
File:                     16A0E644CFD911F080AE0B7BDAE4EC9C.roa (raw, json)
Hash identifier:          +hFIV/tjfszo2UV7EMIxQlEmcZMyeLrg38wC6ZBPU6Q=
Subject key identifier:   7E:39:66:73:A1:26:08:66:54:D3:BA:1E:E7:48:13:AC:71:71:3E:E1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ABF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A0E644CFD911F080AE0B7BDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 23:46:15 +0000
ROA not before:           Tue 02 Dec 2025 23:46:09 +0000
ROA not after:            Sun 19 Nov 2028 23:46:09 +0000
asID:                     17561
IP address blocks:        154.194.196.0/24 maxlen: 24
                          154.194.197.0/24 maxlen: 24
                          154.194.198.0/24 maxlen: 24
                          154.209.234.0/24 maxlen: 24
                          154.209.235.0/24 maxlen: 24
                          154.209.236.0/24 maxlen: 24
                          154.209.237.0/24 maxlen: 24
                          154.209.238.0/24 maxlen: 24
                          154.209.239.0/24 maxlen: 24
                          154.209.240.0/24 maxlen: 24
                          154.209.241.0/24 maxlen: 24
                          154.209.242.0/24 maxlen: 24
                          154.209.243.0/24 maxlen: 24
                          154.209.244.0/24 maxlen: 24
                          154.209.245.0/24 maxlen: 24
                          154.209.246.0/24 maxlen: 24
                          154.209.247.0/24 maxlen: 24
                          154.209.248.0/24 maxlen: 24
                          154.209.249.0/24 maxlen: 24
                          154.209.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109557 (0x1abf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  2 23:46:09 2025 GMT
            Not After : Nov 19 23:46:09 2028 GMT
        Subject: CN=692f7a47-eea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e9:79:f9:66:5b:b1:69:4c:9e:dc:46:ec:47:
                    4f:5a:b6:45:b4:7b:c7:d8:0d:f4:46:46:8e:6c:ae:
                    3b:06:b6:74:5e:42:42:32:7b:49:04:f9:fa:dd:ec:
                    5e:a3:13:9f:a4:94:0b:72:64:cf:c1:ec:a0:cd:18:
                    1a:19:49:0f:83:6d:7c:c9:01:51:2c:1b:b4:a8:2a:
                    7c:8f:df:6c:bc:00:77:01:16:0a:56:c4:67:c8:56:
                    43:db:e9:b1:c9:58:c7:38:17:83:05:3c:77:04:a5:
                    f6:26:34:5c:02:e4:15:d9:29:ba:3e:77:6b:d2:5d:
                    72:23:80:ad:55:a3:74:2b:0d:ea:29:d6:c7:c6:27:
                    1f:13:e5:c1:ed:dc:9b:5c:8f:83:46:0b:b3:ad:68:
                    cc:a3:36:b5:2b:d8:40:6d:6c:d8:dd:cb:67:e9:5f:
                    2a:96:de:a0:9d:89:90:c8:46:c9:4b:e2:c8:0b:f9:
                    76:e0:f2:6b:07:a8:de:98:27:c6:a6:6e:63:ee:47:
                    a3:f3:1b:df:81:05:e4:dc:c6:44:10:63:53:2e:f3:
                    37:95:a2:0e:21:b7:e1:86:c7:43:bd:b9:f9:18:e6:
                    bc:e7:1c:91:3c:76:9b:9e:e9:c3:0b:2b:17:8a:6e:
                    2b:e1:17:ba:4e:af:1b:6c:47:3d:90:dd:a6:01:15:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:39:66:73:A1:26:08:66:54:D3:BA:1E:E7:48:13:AC:71:71:3E:E1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A0E644CFD911F080AE0B7BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.196.0-154.194.198.255
                  154.209.234.0-154.209.250.255

    Signature Algorithm: sha256WithRSAEncryption
         5c:f9:eb:91:1f:62:fb:9b:38:bb:16:8d:18:3f:5c:30:9b:05:
         c2:43:7b:55:04:a9:0e:56:74:01:9f:0e:d0:3d:c2:53:a0:c1:
         36:9d:36:94:9b:70:cb:43:f1:b5:2a:41:a9:5f:26:cb:c4:b2:
         2d:b6:9f:a3:53:93:6b:19:5f:84:cb:25:87:9a:70:60:81:1b:
         e2:70:3b:e3:27:77:34:43:7c:77:12:84:58:73:19:dc:40:cd:
         11:8a:3f:00:2f:20:73:9d:a8:c9:4e:bf:91:98:19:b1:1c:b4:
         ea:e3:71:ca:0b:2a:fd:10:e9:4c:e8:e4:c0:c2:02:64:cb:15:
         4a:bc:37:95:62:ae:89:c0:19:9d:2c:ce:74:3f:3b:b8:5f:80:
         e0:7a:df:6d:d9:e5:b1:2d:02:dd:bd:0d:d6:88:c8:df:ef:8e:
         fa:94:82:ac:b5:42:c8:45:36:cf:3d:a5:ed:6d:a6:75:4c:b3:
         c1:e3:ef:9a:b3:f6:3f:a5:43:3c:00:0f:5d:4b:86:76:07:d1:
         a3:8e:23:d5:25:9b:7c:24:47:06:28:01:e4:48:ed:9e:7f:7d:
         69:e0:7a:bc:33:9b:6b:5a:dc:8a:3e:ad:49:47:d4:55:89:91:
         4e:12:71:7f:86:2b:6c:1a:0d:32:78:06:40:3e:c1:ab:4f:fb:
         4e:49:52:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:24:51 2025 by rpki-client