This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57B63CA0E16911F0AD8A80B9DAE4EC9C.roa
File:                     57B63CA0E16911F0AD8A80B9DAE4EC9C.roa (raw, json)
Hash identifier:          uVi0Pos/VzQL9TxCFyadmEgAVxUuYq2nyUQm0GpJdpw=
Subject key identifier:   65:27:9B:6C:C0:1F:CE:29:6F:BF:93:4D:06:06:D8:2F:2D:15:3C:78
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B12E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57B63CA0E16911F0AD8A80B9DAE4EC9C.roa
Signing time:             Thu 25 Dec 2025 08:11:41 +0000
ROA not before:           Thu 25 Dec 2025 08:11:36 +0000
ROA not after:            Sat 31 Jan 2026 08:11:36 +0000
asID:                     62240
IP address blocks:        154.194.82.0/24 maxlen: 24
                          154.195.127.0/24 maxlen: 24
                          154.195.128.0/24 maxlen: 24
                          154.195.129.0/24 maxlen: 24
                          154.195.130.0/24 maxlen: 24
                          154.195.131.0/24 maxlen: 24
                          154.195.132.0/24 maxlen: 24
                          154.195.133.0/24 maxlen: 24
                          154.195.134.0/24 maxlen: 24
                          154.195.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110894 (0x1b12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 25 08:11:36 2025 GMT
            Not After : Jan 31 08:11:36 2026 GMT
        Subject: CN=694cf1bd-ba1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8d:b6:93:c8:6f:c7:38:01:3b:ce:93:9d:5f:
                    4e:73:1a:3d:20:f6:b9:f9:3b:97:06:39:e5:ab:5c:
                    fa:92:25:a0:6d:1e:a2:75:77:52:27:0c:89:4f:33:
                    b6:f8:0a:34:53:8f:03:03:42:7b:c5:5c:dd:39:8d:
                    18:68:f9:01:0c:c4:a2:88:b4:51:c1:34:f4:1d:78:
                    a5:f6:a9:e4:b0:f0:05:1e:45:60:71:92:67:af:b6:
                    ba:4f:cb:a8:3c:7b:c1:a7:a3:4d:a5:f8:84:98:68:
                    25:d6:89:e1:4c:3e:49:ca:19:56:ed:7e:cc:2d:09:
                    0c:81:36:5d:74:7a:d9:c3:32:e6:7e:f6:f5:74:7e:
                    df:9c:4d:f9:8b:6f:64:c1:82:04:42:4b:57:e3:e1:
                    90:63:a7:99:fd:21:74:c8:61:3e:cd:5e:36:91:19:
                    98:0d:aa:b2:ea:d2:58:b1:80:db:6f:ba:17:be:6b:
                    40:ab:f4:45:b1:d7:1f:f2:bc:b0:01:76:6b:e1:12:
                    e1:5c:88:f5:ae:62:23:61:48:c0:63:d2:1a:47:b6:
                    c4:2d:2c:fc:19:13:f0:d1:5c:43:56:2c:69:d5:52:
                    c5:5a:be:fe:55:62:13:98:70:ae:53:57:b1:a6:a2:
                    9d:6d:99:38:c7:3b:df:38:04:6e:19:dd:78:c3:fb:
                    a1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:27:9B:6C:C0:1F:CE:29:6F:BF:93:4D:06:06:D8:2F:2D:15:3C:78
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57B63CA0E16911F0AD8A80B9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.82.0/24
                  154.195.127.0-154.195.135.255

    Signature Algorithm: sha256WithRSAEncryption
         4b:99:4d:54:da:44:a5:a6:16:95:c5:6a:2a:97:33:7a:da:86:
         b7:53:54:87:08:99:5e:b3:e1:87:65:47:61:3b:6e:09:5e:8d:
         fa:c6:74:af:6d:27:76:5f:1c:34:c4:76:2c:68:0d:a7:09:10:
         a9:5c:ae:7d:b3:66:fa:07:25:8f:ec:61:a1:34:7c:00:01:3e:
         7b:5a:46:09:07:cf:1e:ed:8b:b3:ba:07:ff:6d:4c:74:93:c8:
         9b:85:26:f5:9c:38:55:b6:6e:e8:b8:3f:c0:d3:9f:34:e6:ba:
         5b:d7:a6:f1:50:24:b8:58:57:d2:dc:1e:20:d0:83:d6:f2:12:
         cf:d5:ea:8f:1b:05:2d:5e:4a:32:74:ea:69:02:e1:a6:cf:3a:
         8a:09:26:d7:83:17:df:86:81:03:92:c3:22:ee:6c:09:5c:59:
         d8:8b:b0:59:77:0a:0a:97:61:69:35:61:18:a7:60:dc:70:ad:
         86:00:e7:5c:7a:00:9e:1f:b7:cb:34:8e:7e:4f:25:e3:78:46:
         39:35:38:95:bc:ec:89:f9:ab:8a:a0:b9:90:f8:cc:59:b1:ce:
         1f:2d:30:86:41:79:f4:20:8b:4c:87:06:26:ba:ac:98:03:85:
         36:00:ac:33:cb:bf:cf:bc:81:69:86:93:1b:8e:ab:06:90:60:
         4d:ad:ec:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:48:15 2025 by rpki-client