This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A50163ACE9811F0876472ACDAE4EC9C.roa
File:                     1A50163ACE9811F0876472ACDAE4EC9C.roa (raw, json)
Hash identifier:          +hSY/fLnBeHIqBTHQqryOcPkvEtbGVghqu/3kBMPyvA=
Subject key identifier:   01:44:6F:30:20:03:AD:3D:CD:71:DC:18:5D:F4:FE:E5:0D:2C:9F:7F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A50163ACE9811F0876472ACDAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 09:28:32 +0000
ROA not before:           Mon 01 Dec 2025 09:28:25 +0000
ROA not after:            Wed 31 Dec 2025 09:28:25 +0000
asID:                     62240
IP address blocks:        154.195.158.0/24 maxlen: 24
                          154.195.159.0/24 maxlen: 24
                          154.195.160.0/24 maxlen: 24
                          154.195.161.0/24 maxlen: 24
                          154.195.162.0/24 maxlen: 24
                          154.195.163.0/24 maxlen: 24
                          154.195.164.0/24 maxlen: 24
                          154.195.165.0/24 maxlen: 24
                          154.195.166.0/24 maxlen: 24
                          154.195.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109352 (0x1ab28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  1 09:28:25 2025 GMT
            Not After : Dec 31 09:28:25 2025 GMT
        Subject: CN=692d5fc0-6658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:80:0a:c2:0d:64:49:e5:96:8e:09:f9:35:4f:
                    f5:c9:5c:40:40:c0:90:1b:27:f4:d9:2b:31:d3:48:
                    3d:b8:bf:f6:d2:e1:57:1a:c7:9e:8f:3f:8d:6c:d5:
                    68:40:e5:a8:cd:e6:27:38:9a:21:3a:7e:4d:92:5a:
                    cd:88:d7:35:c7:93:55:2c:95:ea:17:1a:ba:10:69:
                    a5:e3:85:9f:6e:0c:f7:2a:72:b3:a8:c2:27:37:f8:
                    c7:73:e9:29:e0:67:4c:21:40:ee:41:9e:ad:de:c5:
                    51:bb:5d:c7:e2:b3:21:a2:85:96:63:97:b8:4d:71:
                    22:0e:bc:f9:ab:f3:57:24:04:5d:03:35:e0:b0:3b:
                    68:7e:ae:e8:62:81:5c:a7:02:7c:c7:dc:d6:5d:b0:
                    06:9b:d3:7e:ee:3b:5e:1c:2a:06:90:8b:f2:7d:60:
                    f8:24:97:66:16:7c:e4:ad:a6:68:21:76:8b:70:e6:
                    2f:c2:c5:16:5e:39:cf:10:0f:aa:98:82:b0:0f:c3:
                    38:65:42:bc:a2:c0:be:a4:fb:29:a8:96:a7:be:5c:
                    e3:b2:da:79:fb:2b:b3:c7:4e:61:f2:1c:39:fc:6a:
                    3d:ea:e9:04:44:dd:dd:e8:84:ff:f7:c3:9a:d8:32:
                    71:c2:72:1b:ad:ae:d5:fe:90:7b:77:5e:c5:13:cf:
                    27:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:44:6F:30:20:03:AD:3D:CD:71:DC:18:5D:F4:FE:E5:0D:2C:9F:7F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A50163ACE9811F0876472ACDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.158.0-154.195.167.255

    Signature Algorithm: sha256WithRSAEncryption
         5b:48:de:d6:05:29:dc:c2:cd:28:2f:b9:7b:4d:f0:37:2e:c8:
         91:f7:88:1e:29:65:61:c8:11:32:1d:00:78:7d:74:6c:a9:1d:
         e4:c4:85:df:05:0b:89:cc:03:3c:ea:0f:8d:84:18:5b:61:e0:
         fe:ac:fc:b8:3f:14:09:a0:c0:1f:b1:6b:99:29:0c:7b:1e:98:
         c8:4a:67:9b:39:10:02:68:0f:16:ef:57:97:d3:e8:8d:c0:c6:
         fd:6b:cf:fc:c8:e2:18:e6:03:86:f0:31:e7:1f:0d:a8:5c:7f:
         eb:55:94:43:50:ef:27:2d:54:5b:7b:1c:3e:bb:a3:54:d4:1c:
         20:07:0a:a4:6b:bb:75:ef:ad:d3:fb:69:9a:a5:73:ef:7c:f7:
         97:a0:09:28:e2:6f:32:bd:56:ad:d9:68:be:ae:9e:a2:82:b8:
         0f:d2:bb:b6:df:db:5c:92:36:d1:53:85:a6:14:66:d6:97:5d:
         c1:0e:f4:86:bf:1d:2e:d8:f9:8f:3c:e9:31:20:79:3c:d3:32:
         c6:71:98:06:1a:d2:e0:da:c4:36:b3:46:58:b1:49:96:13:95:
         6c:4c:f1:51:5e:30:86:8d:2a:03:a6:63:65:20:97:3f:b9:51:
         2c:78:ae:9b:3b:13:c8:2d:37:24:20:09:d4:04:aa:cb:d9:05:
         57:1c:f2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:20 2025 by rpki-client