This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EBBF358E04A11F09783589CDAE4EC9C.roa
File:                     4EBBF358E04A11F09783589CDAE4EC9C.roa (raw, json)
Hash identifier:          XQWm0gL4sobr6vnGMZB2nX1GVnroIXrPhBig3ASwjLE=
Subject key identifier:   09:83:F1:E2:FD:D3:8A:A9:EC:66:1F:0D:94:D2:63:F4:54:D8:6A:7A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B077
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EBBF358E04A11F09783589CDAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 21:57:01 +0000
ROA not before:           Tue 23 Dec 2025 21:56:55 +0000
ROA not after:            Thu 29 Jan 2026 21:56:55 +0000
asID:                     134365
IP address blocks:        154.194.248.0/21 maxlen: 24
                          154.194.248.0/24 maxlen: 24
                          154.194.249.0/24 maxlen: 24
                          154.194.250.0/24 maxlen: 24
                          154.194.251.0/24 maxlen: 24
                          154.194.252.0/24 maxlen: 24
                          154.194.253.0/24 maxlen: 24
                          154.194.254.0/24 maxlen: 24
                          154.194.255.0/24 maxlen: 24
                          154.198.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 24 Jan 2026 06:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110711 (0x1b077)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 23 21:56:55 2025 GMT
            Not After : Jan 29 21:56:55 2026 GMT
        Subject: CN=694b102c-60d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:45:e2:78:f3:3e:06:fb:e5:09:0f:4f:c1:ca:
                    32:89:73:a4:db:60:c0:3a:93:3d:f0:3c:41:fb:a5:
                    73:ec:50:ca:a4:84:4e:cc:53:e3:5a:83:28:22:39:
                    ab:5d:99:54:3c:95:f2:14:44:0c:d0:3f:c5:64:76:
                    bc:23:5f:61:1f:a2:ef:12:03:50:b3:3c:7f:8f:91:
                    e7:39:53:ee:e5:b9:54:c4:30:79:c5:da:cd:a5:5e:
                    fc:3d:6c:60:9a:88:bb:23:7b:46:19:c7:12:21:42:
                    af:00:91:e3:0a:7b:14:9c:40:89:ba:d7:de:49:26:
                    1c:db:7e:98:61:1c:c1:3d:3d:76:68:9b:19:b0:5f:
                    2b:de:1f:05:e3:31:4a:41:3e:8b:b8:18:df:75:26:
                    b8:9b:f4:71:9a:60:a2:08:e1:d7:bc:e7:f2:f9:1f:
                    c7:fc:03:46:85:78:1e:d2:5b:39:67:47:79:50:a0:
                    87:46:2e:0e:2d:25:97:89:4b:4f:67:da:e6:1f:68:
                    ed:d1:a6:f0:a7:67:a1:24:29:2b:90:e9:3a:1d:d7:
                    96:42:16:e9:d7:c7:04:1e:4f:07:10:47:40:86:25:
                    e4:ef:f8:c0:dd:58:ff:ea:29:6e:68:80:9c:11:4b:
                    34:32:de:10:31:57:94:a6:89:fe:3e:3f:10:9c:1d:
                    31:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:83:F1:E2:FD:D3:8A:A9:EC:66:1F:0D:94:D2:63:F4:54:D8:6A:7A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EBBF358E04A11F09783589CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.248.0/21
                  154.198.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:6c:79:5e:da:4f:77:9f:8d:0d:8f:3e:8e:36:e3:a6:24:9c:
         72:bf:f1:87:4c:af:82:e2:8e:67:22:9b:56:d0:3e:cf:38:f6:
         ac:3f:52:f8:04:9f:51:42:33:1e:07:25:4b:ce:62:04:0a:6f:
         62:53:ae:50:75:b3:ad:bc:81:70:63:fd:3e:8b:af:59:d2:22:
         de:c2:ef:cb:4a:ba:03:17:24:f6:f4:06:d9:d0:8c:ea:7c:16:
         80:66:37:a3:7c:c7:3b:7e:b6:de:b0:ac:48:e5:a3:70:0c:2d:
         4d:d1:a4:c6:3e:cf:ac:ac:5e:e2:ec:00:af:49:54:5c:8c:0b:
         59:52:28:29:23:82:af:2e:e9:0e:5f:21:f3:f7:b1:36:cc:0d:
         c6:b7:75:02:68:cf:c8:65:3e:ae:c6:19:6e:80:31:b7:f0:f4:
         0f:41:fb:39:39:d9:42:4c:78:c0:69:29:7b:86:0b:a4:fc:0b:
         0e:da:b3:d1:8f:76:40:ac:cb:8d:2d:a9:bf:dc:0d:ca:29:b4:
         dd:42:49:d8:60:84:be:f2:7d:e1:64:a2:ec:a9:30:e5:f1:b5:
         5d:03:77:49:a8:2f:d1:ed:27:67:a3:2b:2a:20:2d:89:bb:30:
         7d:77:e6:0d:3f:ea:79:dc:99:28:54:3e:0f:a8:ba:4d:2e:cf:
         cc:88:8b:a3
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAbB3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjIzMjE1NjU1WhcNMjYwMTI5MjE1NjU1WjAYMRYw
FAYDVQQDEw02OTRiMTAyYy02MGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5UXiePM+BvvlCQ9PwcoyiXOk22DAOpM98DxB+6Vz7FDKpIROzFPjWoMo
IjmrXZlUPJXyFEQM0D/FZHa8I19hH6LvEgNQszx/j5HnOVPu5blUxDB5xdrNpV78
PWxgmoi7I3tGGccSIUKvAJHjCnsUnECJutfeSSYc236YYRzBPT12aJsZsF8r3h8F
4zFKQT6LuBjfdSa4m/RxmmCiCOHXvOfy+R/H/ANGhXge0ls5Z0d5UKCHRi4OLSWX
iUtPZ9rmH2jt0abwp2ehJCkrkOk6HdeWQhbp18cEHk8HEEdAhiXk7/jA3Vj/6ilu
aICcEUs0Mt4QMVeUpon+Pj8QnB0xUQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFAmD
8eL904qp7GYfDZTSY/RU2Gp6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RUJCRjM1OEUwNEExMUYwOTc4MzU4OUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDmsL4AwQCmsYoMA0GCSqG
SIb3DQEBCwUAA4IBAQAGbHle2k93n40Njz6ONuOmJJxyv/GHTK+C4o5nIptW0D7P
OPasP1L4BJ9RQjMeByVLzmIECm9iU65QdbOtvIFwY/0+i69Z0iLewu/LSroDFyT2
9AbZ0IzqfBaAZjejfMc7frbesKxI5aNwDC1N0aTGPs+srF7i7ACvSVRcjAtZUigp
I4KvLukOXyHz97E2zA3Gt3UCaM/IZT6uxhlugDG38PQPQfs5OdlCTHjAaSl7hguk
/AsO2rPRj3ZArMuNLam/3A3KKbTdQknYYIS+8n3hZKLsqTDl8bVdA3dJqC/R7Sdn
oysqIC2JuzB9d+YNP+p53JkoVD4PqLpNLs/MiIuj
-----END CERTIFICATE-----
Generated at Thu Jan 22 15:16:26 2026 by rpki-client