This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2E1CC4D02011F0B0A363CBDAE4EC9C.roa
File:                     2C2E1CC4D02011F0B0A363CBDAE4EC9C.roa (raw, json)
Hash identifier:          gbIb4Du1s/gCygqbVkrNX8bMKmlp5PbapcVk58yhl/0=
Subject key identifier:   88:5C:05:47:23:06:A6:6B:54:70:1B:32:68:C6:C3:E1:09:6B:BF:A9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AC0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2E1CC4D02011F0B0A363CBDAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 08:15:05 +0000
ROA not before:           Wed 03 Dec 2025 08:15:00 +0000
ROA not after:            Mon 05 Jan 2026 08:15:00 +0000
asID:                     44559
IP address blocks:        154.209.197.0/24 maxlen: 24
                          154.209.198.0/24 maxlen: 24
                          154.209.199.0/24 maxlen: 24
                          154.209.200.0/24 maxlen: 24
                          154.209.201.0/24 maxlen: 24
                          154.209.202.0/24 maxlen: 24
                          154.209.203.0/24 maxlen: 24
                          154.209.204.0/24 maxlen: 24
                          154.209.205.0/24 maxlen: 24
                          154.209.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109583 (0x1ac0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  3 08:15:00 2025 GMT
            Not After : Jan  5 08:15:00 2026 GMT
        Subject: CN=692ff189-636f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:47:5a:f1:a9:58:8d:10:db:8e:55:08:10:
                    a7:20:8a:b5:95:67:af:57:85:b5:5a:f3:db:91:7c:
                    33:59:61:e0:ce:c6:c2:84:66:3c:e6:25:fc:c6:8e:
                    f7:3a:c1:3c:17:7e:ba:84:da:92:b3:59:4c:10:70:
                    2c:00:be:91:29:f2:e5:eb:a2:a6:80:f1:70:15:d2:
                    f8:02:95:62:dc:90:de:e8:7a:67:73:17:09:b5:58:
                    53:d3:5f:49:73:25:77:b5:6c:a5:7c:95:ef:6f:f1:
                    ff:e6:02:52:41:b3:38:c0:02:0f:1d:77:c6:53:ff:
                    60:28:e9:2d:20:1e:87:92:16:f7:78:ee:1d:2e:3d:
                    e1:65:e8:e4:f7:92:6e:6a:76:eb:7a:a4:bb:e4:4f:
                    56:e0:80:9f:c6:5c:e6:7f:a4:e9:23:76:b7:59:e3:
                    c1:26:9d:15:eb:ba:1a:2a:95:10:20:e7:58:80:eb:
                    9b:49:e6:1d:49:8e:36:61:a9:11:0a:97:1b:3e:98:
                    d1:4f:7b:20:b5:37:23:77:82:7a:db:09:12:9b:7f:
                    ac:d9:a5:2d:1d:ca:71:37:13:82:ff:f0:32:7e:f7:
                    0d:b1:ac:28:d0:af:15:91:8c:3f:91:ff:e4:61:bd:
                    d9:ed:15:76:9c:d7:d9:9e:16:0b:75:bc:77:1c:66:
                    c3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5C:05:47:23:06:A6:6B:54:70:1B:32:68:C6:C3:E1:09:6B:BF:A9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2E1CC4D02011F0B0A363CBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.197.0-154.209.205.255
                  154.209.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:ea:30:ee:31:2e:24:34:39:48:65:83:31:e7:26:64:08:f2:
         9f:10:be:a4:e6:00:8b:00:27:ff:21:ef:43:3f:33:fe:4b:11:
         33:b2:9b:72:88:65:0f:74:c2:12:18:16:87:bd:9c:a2:d8:07:
         bb:e8:3c:57:60:44:35:42:26:6e:1c:a0:82:fe:ba:98:08:b6:
         46:f4:4e:34:b1:41:28:68:76:87:be:d9:46:d4:5e:26:c4:67:
         f3:90:72:e5:6e:4b:84:f5:54:e6:8b:23:b6:ec:81:ce:eb:c5:
         a1:cf:c2:e1:6d:58:26:72:6b:ae:40:10:00:c5:85:31:11:06:
         fd:58:a1:38:91:4b:95:c9:10:a0:37:b7:b9:b4:f3:8a:72:0a:
         46:9d:1c:93:9a:0f:a4:52:51:fb:a0:81:d5:24:31:ee:f2:cf:
         ed:d3:a2:51:41:ca:18:1b:f0:c5:bb:3b:49:37:09:06:fa:51:
         de:8f:62:41:46:9d:2d:f1:0d:c3:a0:87:66:9a:dc:51:0b:ad:
         af:d8:33:da:b1:df:7b:79:d0:dd:66:e7:b5:69:11:b3:e4:42:
         03:35:88:07:42:3d:17:b6:c7:0e:ad:2b:98:99:a9:ea:25:3e:
         1d:ba:f7:3a:a7:90:5a:72:14:6b:73:eb:83:1c:bd:d2:99:08:
         27:7a:d7:bb
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAawPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAzMDgxNTAwWhcNMjYwMTA1MDgxNTAwWjAYMRYw
FAYDVQQDEw02OTJmZjE4OS02MzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp4NHWvGpWI0Q245VCBCnIIq1lWevV4W1WvPbkXwzWWHgzsbChGY85iX8
xo73OsE8F366hNqSs1lMEHAsAL6RKfLl66KmgPFwFdL4ApVi3JDe6HpncxcJtVhT
019JcyV3tWylfJXvb/H/5gJSQbM4wAIPHXfGU/9gKOktIB6Hkhb3eO4dLj3hZejk
95JuanbreqS75E9W4ICfxlzmf6TpI3a3WePBJp0V67oaKpUQIOdYgOubSeYdSY42
YakRCpcbPpjRT3sgtTcjd4J62wkSm3+s2aUtHcpxNxOC//AyfvcNsawo0K8VkYw/
kf/kYb3Z7RV2nNfZnhYLdbx3HGbDpwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFIhc
BUcjBqZrVHAbMmjGw+EJa7+pMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQzJFMUNDNEQwMjAxMUYwQjBBMzYzQ0JEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACa0cUDBAGa0cwDBACa
0c8wDQYJKoZIhvcNAQELBQADggEBAGXqMO4xLiQ0OUhlgzHnJmQI8p8QvqTmAIsA
J/8h70M/M/5LETOym3KIZQ90whIYFoe9nKLYB7voPFdgRDVCJm4coIL+upgItkb0
TjSxQShodoe+2UbUXibEZ/OQcuVuS4T1VOaLI7bsgc7rxaHPwuFtWCZya65AEADF
hTERBv1YoTiRS5XJEKA3t7m084pyCkadHJOaD6RSUfuggdUkMe7yz+3TolFByhgb
8MW7O0k3CQb6Ud6PYkFGnS3xDcOgh2aa3FELra/YM9qx33t50N1m57VpEbPkQgM1
iAdCPRe2xw6tK5iZqeolPh269zqnkFpyFGtz64McvdKZCCd617s=
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:29:00 2025 by rpki-client