This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ED2120ECFBD11F0ADADB1CEDAE4EC9C.roa
File:                     2ED2120ECFBD11F0ADADB1CEDAE4EC9C.roa (raw, json)
Hash identifier:          hquzNKVx7Ts7JGf4UM5hA8c7jJj83iLNSzfKEQbzbAE=
Subject key identifier:   AD:E6:1E:9B:E9:17:2E:EF:95:CD:F5:F3:B6:F2:67:D5:CF:7B:4C:B3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ABC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ED2120ECFBD11F0ADADB1CEDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 20:26:29 +0000
ROA not before:           Tue 02 Dec 2025 20:26:24 +0000
ROA not after:            Tue 06 Jun 2028 20:26:24 +0000
asID:                     17561
IP address blocks:        154.201.6.0/24 maxlen: 24
                          154.212.0.0/24 maxlen: 24
                          154.212.8.0/24 maxlen: 24
                          154.212.9.0/24 maxlen: 24
                          154.212.10.0/24 maxlen: 24
                          154.212.11.0/24 maxlen: 24
                          154.212.12.0/24 maxlen: 24
                          154.212.13.0/24 maxlen: 24
                          154.212.14.0/24 maxlen: 24
                          154.212.15.0/24 maxlen: 24
                          154.212.16.0/24 maxlen: 24
                          154.212.17.0/24 maxlen: 24
                          154.212.18.0/24 maxlen: 24
                          154.212.19.0/24 maxlen: 24
                          154.212.20.0/24 maxlen: 24
                          154.212.21.0/24 maxlen: 24
                          154.212.22.0/24 maxlen: 24
                          154.212.23.0/24 maxlen: 24
                          154.212.24.0/24 maxlen: 24
                          154.212.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109505 (0x1abc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  2 20:26:24 2025 GMT
            Not After : Jun  6 20:26:24 2028 GMT
        Subject: CN=692f4b75-e6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:62:a0:78:95:5f:06:09:4e:6b:28:f3:e8:
                    32:13:86:3d:bd:ef:fd:6c:01:83:82:e5:2d:55:81:
                    b9:a2:33:84:9d:d1:72:c7:d8:fd:e1:5c:3d:ed:a3:
                    cb:39:1d:72:7d:2f:2e:65:b3:cf:bb:a8:da:01:9a:
                    c6:16:3f:33:03:08:04:1c:5f:57:9f:7c:e1:a2:9d:
                    5e:09:95:06:d3:93:02:13:e3:43:4a:09:8d:c3:0e:
                    3a:51:e9:6e:53:7a:25:4d:03:df:4f:5d:04:b8:6c:
                    9c:e2:81:e2:bc:6b:cb:b3:30:26:0b:98:df:25:ee:
                    e3:53:45:12:d0:14:11:b2:a1:54:62:4c:c9:b3:e6:
                    85:f1:ec:42:9d:85:5d:ac:f5:f3:4a:b1:76:8e:59:
                    7e:e8:77:ab:50:a9:63:c2:d1:30:27:fe:2e:06:5d:
                    06:b1:16:c8:8f:f4:36:40:da:70:12:c6:74:1c:e6:
                    86:dd:c1:03:dd:b8:08:97:8c:07:6e:c2:f0:54:92:
                    4c:e3:ca:b7:50:bf:1c:23:9d:07:ab:d2:b4:2c:9f:
                    91:13:fb:71:52:19:39:2f:85:74:2b:f9:86:f2:45:
                    17:43:bb:fd:37:ff:8d:1d:d4:26:a1:23:d5:28:a0:
                    00:c9:27:2b:8b:28:1c:bf:a2:cf:65:78:63:72:86:
                    7f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E6:1E:9B:E9:17:2E:EF:95:CD:F5:F3:B6:F2:67:D5:CF:7B:4C:B3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ED2120ECFBD11F0ADADB1CEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.6.0/24
                  154.212.0.0/24
                  154.212.8.0-154.212.25.255

    Signature Algorithm: sha256WithRSAEncryption
         0d:49:b1:c1:a7:87:a8:c1:78:1f:82:70:5f:e1:fb:ef:13:5a:
         17:32:d8:bb:e2:db:8b:cf:2e:e2:4c:d1:f0:e7:08:67:73:ec:
         ba:86:46:90:bb:06:d8:f5:a2:6c:01:fe:b0:e3:32:3d:af:0d:
         a3:51:d6:77:6a:74:f6:7d:46:1f:52:01:fb:4c:6f:0d:12:ab:
         90:b7:44:1d:5a:f7:21:24:57:72:44:e2:45:25:11:ed:a8:b8:
         ad:06:f5:9b:73:13:65:fb:bd:8a:c9:6a:46:a2:92:b0:06:ed:
         5c:7c:1d:ef:a4:a0:35:85:92:64:2b:4c:b6:37:0d:58:75:23:
         38:78:8a:e0:d1:61:98:8a:78:90:e0:01:ab:00:aa:5f:59:fc:
         ce:60:7a:5b:cb:b3:7f:54:82:a4:4a:6c:0d:9b:65:3f:5c:72:
         90:2d:30:67:7b:4f:d4:5e:f8:c9:a9:4b:4d:4e:c2:db:02:b7:
         75:3c:18:84:16:70:71:eb:22:00:51:58:e5:e2:02:77:42:4b:
         99:f1:24:e9:49:6d:44:e1:a4:00:0a:0e:a5:53:03:ea:46:47:
         96:de:be:59:a2:0e:f7:c1:3f:3e:e3:4b:b1:1f:6b:6b:d5:d3:
         d9:0f:07:18:b5:85:0b:d8:5d:e6:16:9a:cf:1b:b6:28:df:f6:
         0d:3a:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:05 2025 by rpki-client