This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DE289A6CE9211F0BE090D89DAE4EC9C.roa
File:                     5DE289A6CE9211F0BE090D89DAE4EC9C.roa (raw, json)
Hash identifier:          AvYDyOvPP0S+m7y60eXWcDZ8M0gKyWc6e7azr0VZlgE=
Subject key identifier:   16:AD:79:40:84:E2:48:50:3C:20:26:5C:7B:DF:6A:43:58:60:4A:61
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DE289A6CE9211F0BE090D89DAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 08:47:29 +0000
ROA not before:           Mon 01 Dec 2025 08:47:24 +0000
ROA not after:            Wed 31 Dec 2025 08:47:24 +0000
asID:                     62240
IP address blocks:        154.90.173.0/24 maxlen: 24
                          154.94.34.0/24 maxlen: 24
                          154.94.39.0/24 maxlen: 24
                          154.94.42.0/24 maxlen: 24
                          154.94.45.0/24 maxlen: 24
                          154.94.57.0/24 maxlen: 24
                          154.94.58.0/24 maxlen: 24
                          154.94.61.0/24 maxlen: 24
                          154.94.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109348 (0x1ab24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  1 08:47:24 2025 GMT
            Not After : Dec 31 08:47:24 2025 GMT
        Subject: CN=692d5621-96b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:14:6d:8a:8c:bb:c8:68:cc:b2:51:b5:db:1a:
                    c4:0f:23:22:dc:17:3f:0a:62:2d:db:4a:af:4e:59:
                    63:1b:81:f0:a4:4b:e6:56:ea:da:d6:89:06:61:40:
                    62:a8:3b:d6:ef:aa:b3:b4:76:a2:ea:6c:6b:4e:e7:
                    0d:5d:dc:e4:1a:40:09:58:35:8d:39:a1:86:4e:c8:
                    4c:d1:7b:e6:3b:cb:06:e3:8c:5d:8a:87:ca:01:18:
                    a9:16:9f:77:88:7f:80:8f:f5:ee:24:c7:d0:e4:f4:
                    f0:5e:bd:b3:fb:95:ae:27:02:6b:64:0a:22:65:35:
                    42:21:c8:22:32:48:dd:8f:61:d4:bf:f7:bc:21:4f:
                    b4:62:9c:24:98:86:ac:80:be:87:26:a0:d4:68:bb:
                    09:74:1a:69:6e:6f:68:bd:99:23:3e:4f:ce:13:00:
                    ee:fa:32:15:a1:e5:6d:6d:56:63:f2:9d:43:a5:45:
                    22:48:57:02:07:3e:35:73:57:46:d6:23:f8:68:5a:
                    fe:e2:b4:3b:f8:f8:b3:bc:e2:84:b8:c4:f5:1b:47:
                    18:84:4d:7e:2e:21:37:bc:a7:f4:09:3f:34:16:c0:
                    a0:0c:97:9e:8c:3b:75:a7:80:c7:02:41:a1:1f:67:
                    60:50:b0:11:d9:df:b2:36:03:3d:1d:eb:b7:70:5f:
                    86:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AD:79:40:84:E2:48:50:3C:20:26:5C:7B:DF:6A:43:58:60:4A:61
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DE289A6CE9211F0BE090D89DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.173.0/24
                  154.94.34.0/24
                  154.94.39.0/24
                  154.94.42.0/24
                  154.94.45.0/24
                  154.94.57.0-154.94.58.255
                  154.94.61.0-154.94.62.255

    Signature Algorithm: sha256WithRSAEncryption
         7a:0c:ad:be:4b:76:27:72:b2:11:b8:f1:df:65:46:72:2f:aa:
         fa:7e:8e:0c:3e:99:80:a0:14:a2:29:8d:e5:33:c3:b5:39:a8:
         11:a8:3a:0f:e2:24:50:ec:75:0f:87:d0:0e:e2:44:39:59:f6:
         34:27:4b:af:90:08:5e:7e:e6:8d:59:92:53:11:5b:d8:cd:cc:
         11:8f:8b:3b:4c:f2:b5:b0:ae:56:62:e7:28:c2:bb:2a:f0:98:
         26:be:7c:75:cd:53:be:ba:e0:74:81:f8:09:29:32:50:21:01:
         d3:3d:7b:eb:9c:ec:34:4d:25:60:46:90:6d:af:3c:87:90:6d:
         a1:ea:ae:ad:b6:68:70:03:a2:a4:a2:65:21:d8:6b:3e:dc:58:
         28:41:59:00:70:d6:04:29:1b:51:de:6e:96:44:54:c5:b5:20:
         39:41:eb:1d:16:e2:1c:2d:2d:8f:ab:33:2b:d6:88:56:22:30:
         93:ca:54:2e:e3:04:ef:66:dd:55:2f:3f:b1:c8:1c:67:08:3c:
         86:92:a2:e8:0e:71:89:dd:67:f3:a7:69:73:f8:8b:e4:5a:5c:
         84:3a:cf:73:67:0f:7b:c3:1e:05:79:d9:43:92:6d:ac:d7:a6:
         e3:7b:ab:d0:37:00:25:22:40:fe:73:84:53:65:d6:61:44:64:
         a9:4b:c5:d6
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIDAaskMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAxMDg0NzI0WhcNMjUxMjMxMDg0NzI0WjAYMRYw
FAYDVQQDEw02OTJkNTYyMS05NmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4hRtioy7yGjMslG12xrEDyMi3Bc/CmIt20qvTlljG4HwpEvmVura1okG
YUBiqDvW76qztHai6mxrTucNXdzkGkAJWDWNOaGGTshM0XvmO8sG44xdiofKARip
Fp93iH+Aj/XuJMfQ5PTwXr2z+5WuJwJrZAoiZTVCIcgiMkjdj2HUv/e8IU+0Ypwk
mIasgL6HJqDUaLsJdBppbm9ovZkjPk/OEwDu+jIVoeVtbVZj8p1DpUUiSFcCBz41
c1dG1iP4aFr+4rQ7+PizvOKEuMT1G0cYhE1+LiE3vKf0CT80FsCgDJeejDt1p4DH
AkGhH2dgULAR2d+yNgM9Heu3cF+GpQIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFBat
eUCE4khQPCAmXHvfakNYYEphMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81REUyODlBNkNFOTIxMUYwQkUwOTBEODlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAmlqtAwQAml4iAwQAml4n
AwQAml4qAwQAml4tMAwDBACaXjkDBACaXjowDAMEAJpePQMEAJpePjANBgkqhkiG
9w0BAQsFAAOCAQEAegytvkt2J3KyEbjx32VGci+q+n6ODD6ZgKAUoimN5TPDtTmo
Eag6D+IkUOx1D4fQDuJEOVn2NCdLr5AIXn7mjVmSUxFb2M3MEY+LO0zytbCuVmLn
KMK7KvCYJr58dc1TvrrgdIH4CSkyUCEB0z1765zsNE0lYEaQba88h5BtoequrbZo
cAOipKJlIdhrPtxYKEFZAHDWBCkbUd5ulkRUxbUgOUHrHRbiHC0tj6szK9aIViIw
k8pULuME72bdVS8/scgcZwg8hpKi6A5xid1n86dpc/iL5FpchDrPc2cPe8MeBXnZ
Q5JtrNem43ur0DcAJSJA/nOEU2XWYURkqUvF1g==
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:29:00 2025 by rpki-client