This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E1049DECEBD11F09711BE90DAE4EC9C.roa
File:                     4E1049DECEBD11F09711BE90DAE4EC9C.roa (raw, json)
Hash identifier:          ACPKR8NPr7FXpElufE4nj+f8H5JYI9O4eFpSyfvn0/Y=
Subject key identifier:   58:BD:D8:95:7A:54:A9:E5:1A:A6:8D:F7:8B:89:A5:8D:80:0F:56:8B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E1049DECEBD11F09711BE90DAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 13:54:51 +0000
ROA not before:           Mon 01 Dec 2025 13:54:44 +0000
ROA not after:            Wed 31 Dec 2025 13:54:44 +0000
asID:                     62240
IP address blocks:        154.194.72.0/24 maxlen: 24
                          154.194.73.0/24 maxlen: 24
                          154.194.74.0/24 maxlen: 24
                          154.194.89.0/24 maxlen: 24
                          154.194.92.0/24 maxlen: 24
                          154.194.93.0/24 maxlen: 24
                          154.194.98.0/24 maxlen: 24
                          154.196.18.0/24 maxlen: 24
                          154.196.22.0/24 maxlen: 24
                          154.196.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109380 (0x1ab44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  1 13:54:44 2025 GMT
            Not After : Dec 31 13:54:44 2025 GMT
        Subject: CN=692d9e2a-0a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:42:0d:44:f7:15:3b:0a:23:de:f8:56:6c:
                    d6:ab:ce:83:99:e6:4b:bb:56:8c:d7:e5:5b:d4:e7:
                    c2:f4:5c:2f:6e:96:02:64:85:4c:22:f6:02:54:07:
                    80:2b:3d:65:3f:60:d2:dd:3b:59:90:6c:f6:9a:d5:
                    b6:32:55:98:24:86:70:a4:68:e4:29:be:55:5f:2b:
                    59:a1:4b:af:64:18:42:65:62:cf:d3:05:fe:80:0e:
                    1b:b9:3b:db:3b:a0:49:62:6f:29:25:76:ab:f8:cf:
                    9b:d7:8a:9f:97:bd:55:7e:0a:6e:5a:34:d1:04:60:
                    47:b2:2f:5b:86:32:28:45:36:62:c7:b6:28:89:f8:
                    21:67:c8:b5:3d:fb:4a:68:a2:45:f7:21:4d:da:4e:
                    83:e1:51:bd:a5:7b:70:f6:ae:e7:2b:9d:67:b6:4e:
                    0a:79:85:5f:ba:e9:7f:e2:e8:f2:02:d6:cf:25:47:
                    af:e3:79:d3:f9:87:22:94:6d:e8:d8:21:e2:67:54:
                    33:0c:0c:a2:6f:cc:f4:b4:4d:98:79:76:21:4c:cd:
                    01:cb:b6:89:e9:7b:ac:2a:25:a8:1d:c6:51:67:c6:
                    05:b3:44:0a:64:79:d4:5a:47:a4:4f:ba:ec:42:44:
                    54:6e:4a:29:d5:cf:b6:42:04:a8:eb:9c:35:d8:9d:
                    8b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BD:D8:95:7A:54:A9:E5:1A:A6:8D:F7:8B:89:A5:8D:80:0F:56:8B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E1049DECEBD11F09711BE90DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.72.0-154.194.74.255
                  154.194.89.0/24
                  154.194.92.0/23
                  154.194.98.0/24
                  154.196.18.0/24
                  154.196.22.0/24
                  154.196.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ca:c3:fc:bb:2f:6e:f6:8e:cb:ce:5d:98:c5:00:14:d4:18:
         a5:7e:d2:63:7f:14:0c:47:c1:e7:18:74:0d:87:45:51:ce:e0:
         01:14:53:6a:ee:a3:02:50:8b:64:6a:e3:c8:3c:49:19:5b:71:
         72:34:e5:1c:de:a0:3e:8b:ef:0c:78:b5:54:88:68:2d:98:8e:
         32:6e:7c:de:a5:b8:04:e9:80:68:a5:2c:8a:01:a7:c7:1d:5e:
         fe:7a:2b:fd:74:e7:fa:a2:7e:9e:e9:0a:db:38:57:f3:25:2f:
         48:dc:a3:06:1f:90:e6:ed:02:ca:1b:49:95:e9:55:a6:1c:fa:
         a3:d6:aa:11:99:a4:7f:9d:c2:39:9c:86:f4:37:ee:3b:59:30:
         8b:d3:8b:98:b7:4b:5d:16:cf:0d:ed:6e:0a:ba:55:c2:b6:c3:
         e7:4c:a7:f8:fa:e5:9e:c1:fa:4e:86:ef:d4:da:43:7c:c0:16:
         44:2e:f6:1f:9b:4f:91:72:94:21:2f:5f:85:7a:3f:db:c0:45:
         1b:c2:7c:22:28:46:ec:29:08:e6:50:fd:e7:32:fb:a1:c1:86:
         19:de:1f:0e:54:f5:20:2d:2f:46:77:7f:8e:a5:f6:e5:79:6f:
         5b:2e:f9:a6:84:b7:2b:21:b4:0c:d4:30:64:0d:1d:ed:42:1d:
         b0:a3:07:69
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIDAatEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAxMTM1NDQ0WhcNMjUxMjMxMTM1NDQ0WjAYMRYw
FAYDVQQDEw02OTJkOWUyYS0wYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnZRCDUT3FTsKI974VmzWq86DmeZLu1aM1+Vb1OfC9FwvbpYCZIVMIvYC
VAeAKz1lP2DS3TtZkGz2mtW2MlWYJIZwpGjkKb5VXytZoUuvZBhCZWLP0wX+gA4b
uTvbO6BJYm8pJXar+M+b14qfl71VfgpuWjTRBGBHsi9bhjIoRTZix7YoifghZ8i1
PftKaKJF9yFN2k6D4VG9pXtw9q7nK51ntk4KeYVfuul/4ujyAtbPJUev43nT+Yci
lG3o2CHiZ1QzDAyib8z0tE2YeXYhTM0By7aJ6XusKiWoHcZRZ8YFs0QKZHnUWkek
T7rsQkRUbkop1c+2QgSo65w12J2LwQIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFFi9
2JV6VKnlGqaN94uJpY2AD1aLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RTEwNDlERUNFQkQxMUYwOTcxMUJFOTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBAOawkgDBACawkoDBACa
wlkDBAGawlwDBACawmIDBACaxBIDBACaxBYDBACaxDIwDQYJKoZIhvcNAQELBQAD
ggEBAKzKw/y7L272jsvOXZjFABTUGKV+0mN/FAxHwecYdA2HRVHO4AEUU2ruowJQ
i2Rq48g8SRlbcXI05RzeoD6L7wx4tVSIaC2YjjJufN6luATpgGilLIoBp8cdXv56
K/105/qifp7pCts4V/MlL0jcowYfkObtAsobSZXpVaYc+qPWqhGZpH+dwjmchvQ3
7jtZMIvTi5i3S10Wzw3tbgq6VcK2w+dMp/j65Z7B+k6G79TaQ3zAFkQu9h+bT5Fy
lCEvX4V6P9vARRvCfCIoRuwpCOZQ/ecy+6HBhhneHw5U9SAtL0Z3f46l9uV5b1su
+aaEtyshtAzUMGQNHe1CHbCjB2k=
-----END CERTIFICATE-----
Generated at Wed Dec 3 11:45:33 2025 by rpki-client