This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5957B3E8DF0911F096C8E1CBDAE4EC9C.roa
File:                     5957B3E8DF0911F096C8E1CBDAE4EC9C.roa (raw, json)
Hash identifier:          87yTFa/um1mqUFkpknSphgtEJ+BiuNuoLf+XnyAa6OA=
Subject key identifier:   10:ED:4B:5C:97:88:2E:0A:FF:36:99:97:21:3B:44:D9:6F:60:BE:28
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AFC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5957B3E8DF0911F096C8E1CBDAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 07:39:30 +0000
ROA not before:           Mon 22 Dec 2025 07:39:25 +0000
ROA not after:            Mon 26 Jan 2026 07:39:25 +0000
asID:                     6079
IP address blocks:        154.194.45.0/24 maxlen: 24
                          154.194.57.0/24 maxlen: 24
                          154.194.60.0/24 maxlen: 24
                          154.194.61.0/24 maxlen: 24
                          154.194.194.0/24 maxlen: 24
                          154.194.204.0/24 maxlen: 24
                          154.194.205.0/24 maxlen: 24
                          154.194.224.0/24 maxlen: 24
                          154.194.228.0/24 maxlen: 24
                          154.194.229.0/24 maxlen: 24
                          154.194.230.0/24 maxlen: 24
                          154.194.231.0/24 maxlen: 24
                          154.199.16.0/24 maxlen: 24
                          154.199.17.0/24 maxlen: 24
                          154.199.19.0/24 maxlen: 24
                          154.199.20.0/24 maxlen: 24
                          154.199.21.0/24 maxlen: 24
                          154.199.22.0/24 maxlen: 24
                          154.199.23.0/24 maxlen: 24
                          154.199.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 08:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110528 (0x1afc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 22 07:39:25 2025 GMT
            Not After : Jan 26 07:39:25 2026 GMT
        Subject: CN=6948f5b2-7ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:94:e7:e7:ac:bd:a1:aa:eb:e6:ea:7d:71:48:
                    c0:77:ff:d2:08:14:85:f3:78:38:06:a9:93:ff:08:
                    fb:c4:1c:90:b0:94:0b:4a:95:6b:84:ad:76:b1:05:
                    88:e7:c2:83:67:0f:6a:ca:50:e0:09:a8:d8:32:e1:
                    31:c4:25:4f:38:40:94:86:ae:89:fc:98:22:91:bf:
                    c7:48:ab:af:40:ce:c4:7b:97:ed:82:d8:2f:11:fd:
                    f0:c4:38:ab:ca:47:78:1a:8b:d4:f3:a2:46:db:8c:
                    32:51:c9:c4:2b:fd:ff:88:ed:cb:f9:a4:b8:88:73:
                    52:fc:fc:3d:ef:60:54:ce:e6:60:12:a7:0c:68:6f:
                    89:fe:63:71:21:a6:13:af:e9:59:d9:95:ab:42:68:
                    08:90:91:fa:5e:28:7e:8a:c2:7d:cf:91:9c:78:bc:
                    24:b1:ab:56:b1:30:4f:fe:bb:f3:15:ad:39:99:c5:
                    fe:c4:7f:5d:94:88:1e:5c:a8:ad:1f:c8:fa:22:f5:
                    e1:c5:51:9f:0e:42:1c:92:dc:40:6d:74:c4:20:14:
                    c8:7e:34:9e:ca:2d:b6:1c:4d:ae:80:b9:9c:9d:a0:
                    3c:29:45:6d:a3:b6:9a:72:76:49:cf:a1:f6:40:6f:
                    89:6b:52:e2:c2:91:b0:f2:91:3c:f3:cb:7a:09:dc:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:ED:4B:5C:97:88:2E:0A:FF:36:99:97:21:3B:44:D9:6F:60:BE:28
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5957B3E8DF0911F096C8E1CBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.45.0/24
                  154.194.57.0/24
                  154.194.60.0/23
                  154.194.194.0/24
                  154.194.204.0/23
                  154.194.224.0/24
                  154.194.228.0/22
                  154.199.16.0/23
                  154.199.19.0-154.199.23.255
                  154.199.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:e7:ce:66:74:db:e1:b3:de:12:d9:6f:7d:ee:47:1b:12:ff:
         0a:26:50:f7:71:6c:f1:4c:c1:4c:4d:62:07:e9:0e:95:96:21:
         d6:03:dd:ad:a9:25:7e:7a:87:8a:7e:f7:6c:07:b4:e1:b8:44:
         f5:a6:29:4c:34:a3:d3:cb:48:c4:ac:b1:cb:9f:12:b7:6a:f1:
         60:63:ff:0c:60:b4:38:ba:b4:4d:5e:97:84:d2:e9:97:c9:4b:
         b2:c0:05:eb:52:c9:af:94:74:a0:e8:6a:97:ff:a3:b1:68:cb:
         37:60:63:23:83:42:bd:14:c9:7c:3b:8d:f3:58:13:22:e1:ca:
         59:43:0d:98:d0:d9:ea:b0:83:a3:e6:78:70:b7:f8:d4:8d:13:
         a1:7b:9e:f5:24:ca:52:44:45:97:dc:01:a2:3a:d6:95:4e:0d:
         81:7c:d2:61:3b:44:a5:4e:c9:be:9b:4c:4e:35:68:f6:fd:6d:
         f1:db:15:13:83:fc:e4:7e:8b:65:dc:d6:db:17:b3:f0:e0:91:
         98:46:dc:53:a6:e9:78:69:dd:ba:f4:04:df:4e:d6:dc:36:63:
         05:0a:ea:77:53:61:0b:85:f8:4c:9a:35:f6:58:09:1f:6d:e4:
         73:b2:47:e7:77:e5:75:45:21:1a:c1:c1:29:ce:14:2c:89:84:
         09:da:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:17:36 2025 by rpki-client