This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18BFDEB4CFCD11F08A15FBB1DAE4EC9C.roa
File:                     18BFDEB4CFCD11F08A15FBB1DAE4EC9C.roa (raw, json)
Hash identifier:          UdJ+uxE9f8unmEm0i0zb+Rsf9h1blc0EkHRbf0MZsp0=
Subject key identifier:   2F:EC:2C:6A:74:DF:3A:26:72:DF:E1:F9:D4:2D:4A:66:7D:39:18:90
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ABDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18BFDEB4CFCD11F08A15FBB1DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 22:20:24 +0000
ROA not before:           Tue 02 Dec 2025 22:20:17 +0000
ROA not after:            Sat 18 Nov 2028 22:20:17 +0000
asID:                     17561
IP address blocks:        154.203.2.0/24 maxlen: 24
                          154.203.4.0/24 maxlen: 24
                          154.203.6.0/24 maxlen: 24
                          154.203.192.0/24 maxlen: 24
                          154.203.193.0/24 maxlen: 24
                          154.203.195.0/24 maxlen: 24
                          154.203.202.0/24 maxlen: 24
                          154.203.203.0/24 maxlen: 24
                          154.203.204.0/24 maxlen: 24
                          154.203.246.0/24 maxlen: 24
                          154.203.249.0/24 maxlen: 24
                          154.205.176.0/24 maxlen: 24
                          154.205.177.0/24 maxlen: 24
                          154.205.178.0/24 maxlen: 24
                          154.205.179.0/24 maxlen: 24
                          154.205.180.0/24 maxlen: 24
                          154.205.181.0/24 maxlen: 24
                          154.205.182.0/24 maxlen: 24
                          154.205.183.0/24 maxlen: 24
                          154.205.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109535 (0x1abdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  2 22:20:17 2025 GMT
            Not After : Nov 18 22:20:17 2028 GMT
        Subject: CN=692f6628-9f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:84:62:a6:cc:93:2f:94:fa:49:6c:35:ec:
                    50:bb:3d:c6:a0:fb:75:b2:21:a7:38:13:a8:72:3c:
                    2c:f2:af:32:cd:bf:39:d2:d1:ea:95:25:5b:94:89:
                    50:57:41:b8:cd:9f:ed:71:23:8e:7a:24:e9:6c:9e:
                    db:17:e1:99:2b:79:78:b0:33:2c:e3:1d:c3:10:1f:
                    ae:16:f9:52:ab:d1:f3:79:ba:5e:71:e9:45:e8:72:
                    1c:24:e1:bb:91:12:c2:b4:eb:8c:49:55:87:2a:78:
                    13:03:69:f9:57:ff:06:81:7c:4b:3f:69:33:66:7a:
                    5b:fd:2c:b3:33:ee:c0:2f:c2:3e:ed:78:d1:6f:39:
                    34:6a:92:3a:ab:08:36:24:be:0b:20:e3:3a:3a:f6:
                    bb:0f:a7:0c:e6:87:57:d2:c5:46:f2:18:18:e8:72:
                    b1:3a:ac:6b:c2:90:4f:50:32:56:5c:3b:75:b2:6d:
                    22:a3:8b:ce:32:59:57:fb:10:ff:cf:89:52:8d:5c:
                    18:f0:e4:cc:e6:d2:f7:2e:df:b3:92:61:6d:66:f7:
                    71:b4:cb:c1:d8:b5:c5:88:96:7d:c1:76:55:e1:d9:
                    8a:e5:83:2a:43:8e:7c:58:88:74:bd:f7:f0:5d:9d:
                    e9:dd:e3:53:f1:ad:a5:88:d6:01:97:ae:e5:67:52:
                    ad:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EC:2C:6A:74:DF:3A:26:72:DF:E1:F9:D4:2D:4A:66:7D:39:18:90
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18BFDEB4CFCD11F08A15FBB1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.2.0/24
                  154.203.4.0/24
                  154.203.6.0/24
                  154.203.192.0/23
                  154.203.195.0/24
                  154.203.202.0-154.203.204.255
                  154.203.246.0/24
                  154.203.249.0/24
                  154.205.176.0/21
                  154.205.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:95:a2:eb:04:de:2a:dc:d7:5c:cc:68:2d:b9:2f:f9:ff:f5:
         72:8e:94:2b:30:0a:90:ae:08:e9:a4:b1:c9:24:dc:c2:8a:e5:
         8b:55:44:3b:9f:99:c5:14:ca:f3:e6:a8:35:b5:57:df:48:42:
         99:2b:31:ed:18:de:56:97:8d:4c:2d:6f:c2:31:38:75:00:2f:
         9b:fb:ad:ca:76:28:b1:8e:a5:75:a1:04:a1:47:1e:6d:57:5a:
         02:8e:aa:fe:b7:3c:fc:14:c8:a7:ca:cb:5f:6f:b4:ba:9e:ad:
         a6:65:29:e0:df:a7:c3:fc:f3:d9:e9:97:5a:3a:57:6e:f8:a3:
         62:68:2f:fb:d4:43:bd:ee:c0:4b:d1:92:2e:e6:2a:89:8a:96:
         1b:42:08:7f:53:a6:f7:ac:e2:a2:4a:ee:4c:ca:b1:de:a3:14:
         64:23:0f:30:cf:6b:fe:be:08:b8:87:8b:7c:31:c9:b6:16:80:
         43:eb:8b:17:a6:29:fb:a8:63:0a:54:d6:ad:b6:81:44:a1:ac:
         44:86:45:1b:4d:69:84:a6:6f:a2:e9:a8:b3:73:27:29:11:bc:
         22:42:39:12:2f:89:aa:77:38:08:34:bf:b5:f5:b1:bd:68:5a:
         f8:3d:76:55:dc:12:0f:1b:e8:4c:97:33:e7:9c:08:56:47:52:
         dd:fa:80:b6
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIDAavfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAyMjIyMDE3WhcNMjgxMTE4MjIyMDE3WjAYMRYw
FAYDVQQDEw02OTJmNjYyOC05Zjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyuiEYqbMky+U+klsNexQuz3GoPt1siGnOBOocjws8q8yzb850tHqlSVb
lIlQV0G4zZ/tcSOOeiTpbJ7bF+GZK3l4sDMs4x3DEB+uFvlSq9HzebpecelF6HIc
JOG7kRLCtOuMSVWHKngTA2n5V/8GgXxLP2kzZnpb/SyzM+7AL8I+7XjRbzk0apI6
qwg2JL4LIOM6Ova7D6cM5odX0sVG8hgY6HKxOqxrwpBPUDJWXDt1sm0io4vOMllX
+xD/z4lSjVwY8OTM5tL3Lt+zkmFtZvdxtMvB2LXFiJZ9wXZV4dmK5YMqQ458WIh0
vffwXZ3p3eNT8a2liNYBl67lZ1KtEQIDAQABo4IC4zCCAt8wHQYDVR0OBBYEFC/s
LGp03zomct/h+dQtSmZ9ORiQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xOEJGREVCNENGQ0QxMUYwOEExNUZCQjFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAmssCAwQAmssEAwQAmssG
AwQBmsvAAwQAmsvDMAwDBAGay8oDBACay8wDBACay/YDBACay/kDBAOazbADBACa
zbowDQYJKoZIhvcNAQELBQADggEBAGmVousE3irc11zMaC25L/n/9XKOlCswCpCu
COmksckk3MKK5YtVRDufmcUUyvPmqDW1V99IQpkrMe0Y3laXjUwtb8IxOHUAL5v7
rcp2KLGOpXWhBKFHHm1XWgKOqv63PPwUyKfKy19vtLqeraZlKeDfp8P889npl1o6
V274o2JoL/vUQ73uwEvRki7mKomKlhtCCH9Tpves4qJK7kzKsd6jFGQjDzDPa/6+
CLiHi3wxybYWgEPrixemKfuoYwpU1q22gUShrESGRRtNaYSmb6LpqLNzJykRvCJC
ORIviap3OAg0v7X1sb1oWvg9dlXcEg8b6EyXM+ecCFZHUt36gLY=
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:07 2025 by rpki-client