This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57BA2A66DA7711F09DAFC5A0DAE4EC9C.roa
File:                     57BA2A66DA7711F09DAFC5A0DAE4EC9C.roa (raw, json)
Hash identifier:          zmy+i4S07qlgybeFHrwBSGGDdJ0RVZCQ2RBouwCUi2g=
Subject key identifier:   C4:FC:19:B7:69:25:EB:6E:7A:80:D8:71:2B:DD:B9:C4:63:B5:DE:3B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AE9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57BA2A66DA7711F09DAFC5A0DAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 12:04:16 +0000
ROA not before:           Tue 16 Dec 2025 12:04:11 +0000
ROA not after:            Sat 27 Dec 2025 12:04:11 +0000
asID:                     141883
IP address blocks:        154.204.0.0/24 maxlen: 24
                          154.208.12.0/22 maxlen: 24
                          154.208.16.0/20 maxlen: 24
                          154.212.128.0/24 maxlen: 24
                          154.215.0.0/24 maxlen: 24
                          154.218.0.0/24 maxlen: 24
                          154.221.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110237 (0x1ae9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 16 12:04:11 2025 GMT
            Not After : Dec 27 12:04:11 2025 GMT
        Subject: CN=69414ac0-2e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:63:f5:66:57:89:e6:28:4e:dd:61:d5:3a:
                    20:37:ae:b1:be:5c:ba:63:52:d0:9b:7c:cf:44:15:
                    23:a9:93:5d:87:54:61:b2:88:64:9c:47:ec:10:40:
                    1b:30:c9:a1:4f:e6:9e:86:15:2f:ef:3e:33:78:08:
                    7f:c1:a1:47:12:37:3d:7b:52:5f:13:8a:ca:d2:5f:
                    42:36:4d:83:3a:9f:db:58:a2:a7:49:d4:1b:6a:19:
                    52:ac:d5:6d:50:d2:e2:20:5b:a0:e0:a4:11:10:82:
                    ea:f4:7e:97:0f:da:a3:aa:52:29:b0:35:a3:b4:e0:
                    88:e4:b9:28:9f:c3:05:39:f2:6c:0f:b2:51:56:ea:
                    40:10:9a:6d:6e:9e:20:99:7f:28:90:d0:cb:33:2b:
                    30:a2:2d:61:1b:79:08:90:69:89:81:f0:6f:40:cf:
                    75:0a:31:02:fa:5e:cd:b3:4b:7b:c7:2e:06:d6:11:
                    b8:38:20:25:90:a7:c7:50:55:7b:52:6e:f7:61:13:
                    14:f5:ef:dc:69:6e:5c:73:01:10:b0:5f:d6:d4:32:
                    31:2d:86:1b:26:92:ce:d4:50:8c:12:ef:48:7a:8f:
                    23:11:0a:d6:de:c0:d1:87:64:bc:a1:f1:49:a7:95:
                    a6:34:5e:2e:1b:73:be:66:9a:31:83:59:f9:bf:4c:
                    0f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FC:19:B7:69:25:EB:6E:7A:80:D8:71:2B:DD:B9:C4:63:B5:DE:3B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57BA2A66DA7711F09DAFC5A0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.0.0/24
                  154.208.12.0-154.208.31.255
                  154.212.128.0/24
                  154.215.0.0/24
                  154.218.0.0/24
                  154.221.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:88:2e:42:75:02:a9:b2:2d:6a:af:4d:e4:34:4f:69:57:f9:
         df:6f:55:49:0c:01:05:64:c7:df:80:c9:4b:3d:3f:e9:b6:c6:
         a8:ea:64:9e:5b:3d:d5:9b:47:74:c5:56:71:27:9d:a4:14:1a:
         4d:2f:f5:4b:b1:7a:e2:3e:08:96:91:99:ef:3d:e1:2e:20:76:
         55:1b:00:88:2b:3f:74:f7:3e:fb:75:0b:fb:b4:83:ab:67:79:
         d0:37:02:df:2b:ea:e0:f9:76:5d:83:3c:91:aa:cf:77:4a:bd:
         cd:c7:3b:db:5d:2f:b8:87:00:17:aa:da:46:0a:8d:87:63:0a:
         c8:12:9f:e5:2a:40:f2:ff:ba:a8:86:36:81:49:7d:7a:50:5b:
         dc:24:d8:29:c0:ae:ac:ad:39:b4:29:59:20:20:8f:1b:28:c8:
         31:23:66:73:7f:c2:f2:5e:8e:54:3e:6e:ac:fb:09:81:48:0c:
         70:49:72:f9:85:eb:27:33:77:97:98:14:f3:7f:2f:ca:0a:69:
         51:5a:66:9c:bf:e2:ee:54:2a:9e:66:d4:cd:3e:39:13:84:13:
         ac:cd:4d:af:56:c4:27:fb:f0:17:ef:8e:50:e8:f5:f2:8b:49:
         3f:38:0c:8e:5a:75:e4:1c:14:30:a3:02:03:60:7d:f0:ea:78:
         f4:d1:09:06
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAa6dMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjE2MTIwNDExWhcNMjUxMjI3MTIwNDExWjAYMRYw
FAYDVQQDEw02OTQxNGFjMC0yZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtvdj9WZXieYoTt1h1TogN66xvly6Y1LQm3zPRBUjqZNdh1RhsohknEfs
EEAbMMmhT+aehhUv7z4zeAh/waFHEjc9e1JfE4rK0l9CNk2DOp/bWKKnSdQbahlS
rNVtUNLiIFug4KQREILq9H6XD9qjqlIpsDWjtOCI5Lkon8MFOfJsD7JRVupAEJpt
bp4gmX8okNDLMyswoi1hG3kIkGmJgfBvQM91CjEC+l7Ns0t7xy4G1hG4OCAlkKfH
UFV7Um73YRMU9e/caW5ccwEQsF/W1DIxLYYbJpLO1FCMEu9Ieo8jEQrW3sDRh2S8
ofFJp5WmNF4uG3O+Zpoxg1n5v0wP5QIDAQABo4ICyzCCAscwHQYDVR0OBBYEFMT8
GbdpJetueoDYcSvducRjtd47MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81N0JBMkE2NkRBNzcxMUYwOURBRkM1QTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAmswAMAwDBAKa0AwDBAWa
0AADBACa1IADBACa1wADBACa2gADBACa3QAwDQYJKoZIhvcNAQELBQADggEBACKI
LkJ1AqmyLWqvTeQ0T2lX+d9vVUkMAQVkx9+AyUs9P+m2xqjqZJ5bPdWbR3TFVnEn
naQUGk0v9UuxeuI+CJaRme894S4gdlUbAIgrP3T3Pvt1C/u0g6tnedA3At8r6uD5
dl2DPJGqz3dKvc3HO9tdL7iHABeq2kYKjYdjCsgSn+UqQPL/uqiGNoFJfXpQW9wk
2CnArqytObQpWSAgjxsoyDEjZnN/wvJejlQ+bqz7CYFIDHBJcvmF6yczd5eYFPN/
L8oKaVFaZpy/4u5UKp5m1M0+OROEE6zNTa9WxCf78BfvjlDo9fKLST84DI5adeQc
FDCjAgNgffDqePTRCQY=
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:32:47 2025 by rpki-client