This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BCE5662CF7611F0BA123D9CDAE4EC9C.roa
File:                     3BCE5662CF7611F0BA123D9CDAE4EC9C.roa (raw, json)
Hash identifier:          GDo9i6khW8HutjFpkaixg0cFjkYv0KcPZNUocWNczZI=
Subject key identifier:   A9:E1:8E:03:74:78:A0:A2:86:80:2F:A4:A2:30:6D:60:DC:D8:BC:6F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB85
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BCE5662CF7611F0BA123D9CDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 11:58:37 +0000
ROA not before:           Tue 02 Dec 2025 11:58:32 +0000
ROA not after:            Wed 31 Dec 2025 11:58:32 +0000
asID:                     62240
IP address blocks:        154.196.33.0/24 maxlen: 24
                          154.196.36.0/24 maxlen: 24
                          154.196.40.0/24 maxlen: 24
                          154.196.41.0/24 maxlen: 24
                          154.196.42.0/24 maxlen: 24
                          154.196.43.0/24 maxlen: 24
                          154.196.44.0/24 maxlen: 24
                          154.196.45.0/24 maxlen: 24
                          154.196.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109445 (0x1ab85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  2 11:58:32 2025 GMT
            Not After : Dec 31 11:58:32 2025 GMT
        Subject: CN=692ed46d-726b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b2:c9:42:71:e3:07:0d:29:c7:fa:24:71:cb:
                    02:7e:06:25:46:a2:79:e7:90:cf:50:22:e7:69:35:
                    f8:a7:0a:83:2e:8b:68:07:bc:38:71:50:5e:7d:ad:
                    5a:60:5a:10:08:a7:3f:90:f5:63:37:e1:0f:37:70:
                    0a:dc:7f:45:87:d8:08:5f:7c:12:2e:d5:fc:37:eb:
                    70:77:47:ed:53:fd:48:21:83:13:08:7f:65:80:be:
                    d8:26:13:3e:76:9d:e2:69:7b:6d:a9:f1:2a:67:92:
                    f2:46:2d:f9:86:21:a3:ea:98:74:b9:a8:47:80:c4:
                    b2:52:8b:02:30:1e:e3:06:71:3f:16:05:d9:16:7a:
                    0b:8f:79:5b:26:73:3c:3b:4f:d0:af:79:9d:07:f1:
                    f4:fc:4f:a5:6f:33:e5:d8:a8:7f:1e:0a:d5:56:7b:
                    31:9f:df:74:20:9d:2b:b8:e6:30:58:62:91:5f:6a:
                    5d:96:f4:70:58:db:c0:16:d8:2f:92:17:a7:ed:58:
                    7b:63:25:ce:da:7c:ac:79:17:21:52:34:8a:09:08:
                    51:78:b8:ad:3e:dd:47:90:82:b4:d3:57:dd:6f:61:
                    1e:96:6b:f4:8d:dd:2b:18:1a:1b:8a:00:57:5a:b8:
                    af:4c:6a:83:1f:c9:a5:be:7a:8d:94:3f:d0:fe:0b:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E1:8E:03:74:78:A0:A2:86:80:2F:A4:A2:30:6D:60:DC:D8:BC:6F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BCE5662CF7611F0BA123D9CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.33.0/24
                  154.196.36.0/24
                  154.196.40.0-154.196.46.255

    Signature Algorithm: sha256WithRSAEncryption
         8a:75:80:a8:7d:49:23:18:97:f6:6a:31:a5:6b:79:09:5d:4e:
         bb:35:55:6a:71:e6:64:ce:0e:7b:17:21:38:d1:b2:bd:8f:c3:
         fe:cf:d0:c5:41:2d:41:be:85:79:ee:77:d1:00:b8:f0:31:7f:
         a4:5c:12:63:7c:7f:fb:af:4c:10:70:c2:06:78:d0:18:2f:a9:
         54:e0:56:0d:e8:c3:31:eb:fe:f7:8c:d7:4f:ba:c7:98:22:50:
         cb:6f:0c:b1:2d:50:66:43:59:e8:3e:fc:15:64:f5:7d:89:58:
         e5:38:bf:c2:77:ea:fd:4b:6a:cc:38:3e:37:e9:01:81:cc:a6:
         90:f6:68:a7:02:e8:e3:bf:61:50:2d:84:25:c1:6e:ab:8a:af:
         d2:8a:71:57:89:a6:38:48:21:f3:0a:77:5e:0c:2b:3b:5f:c5:
         3c:7b:7a:11:bc:ff:39:31:c8:a6:47:b8:cc:08:98:82:52:88:
         45:cb:4b:9b:fb:bd:53:5a:54:9f:37:b4:f9:39:dd:e3:d3:5c:
         64:9d:b6:2a:9e:b2:7d:08:dd:e5:64:1e:0a:cd:c4:cd:6e:d5:
         ca:b1:c1:d0:d5:3d:f6:55:64:25:f9:89:e5:78:f1:d6:e1:91:
         36:f6:2c:23:47:3c:92:84:9f:a1:ed:a6:ea:df:90:50:e9:5a:
         b5:aa:f3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:21 2025 by rpki-client