This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6023D892E0C511F08464FFACDAE4EC9C.roa
File:                     6023D892E0C511F08464FFACDAE4EC9C.roa (raw, json)
Hash identifier:          roXhUO1M/bk33nFldCVMJQGlsdERpflagNhivSy6cJ8=
Subject key identifier:   E1:8C:AE:EC:90:C4:CD:EA:21:3B:75:BB:8B:BE:15:9E:D7:FB:05:1C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B0C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6023D892E0C511F08464FFACDAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 12:37:58 +0000
ROA not before:           Wed 24 Dec 2025 12:37:53 +0000
ROA not after:            Sat 31 Jan 2026 12:37:53 +0000
asID:                     62240
IP address blocks:        154.195.139.0/24 maxlen: 24
                          154.195.143.0/24 maxlen: 24
                          154.195.144.0/24 maxlen: 24
                          154.195.145.0/24 maxlen: 24
                          154.195.146.0/24 maxlen: 24
                          154.195.147.0/24 maxlen: 24
                          154.195.148.0/24 maxlen: 24
                          154.195.149.0/24 maxlen: 24
                          154.195.150.0/24 maxlen: 24
                          154.195.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110784 (0x1b0c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 24 12:37:53 2025 GMT
            Not After : Jan 31 12:37:53 2026 GMT
        Subject: CN=694bdea6-47a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:92:e0:1c:5b:b6:3e:5e:ff:ce:54:10:6c:
                    fe:a5:82:ce:ce:dd:33:56:9a:c4:4d:10:8f:03:7c:
                    bb:74:4f:3b:e7:42:66:eb:93:f3:b9:b9:8b:80:18:
                    e2:9e:e4:42:35:79:2a:d8:5b:29:d8:2f:93:49:b6:
                    de:13:ba:de:87:96:f3:f4:c0:dc:50:be:1a:9d:42:
                    31:94:ac:e5:ed:9a:65:cd:05:f0:16:13:73:09:4d:
                    1c:17:02:b3:bc:74:7f:24:0e:d0:03:78:57:0b:9e:
                    43:6f:4f:10:f0:c7:7f:81:9e:1c:9a:ee:6a:b3:38:
                    86:b2:7a:41:d4:23:ca:7c:e2:4a:4e:f9:f1:7d:b9:
                    6e:f4:f3:b6:76:52:83:b5:64:b9:04:f4:d0:37:fc:
                    23:bb:d7:19:71:8e:d5:00:fa:ca:7b:2e:0f:11:dc:
                    01:ab:61:51:a8:d3:94:95:b9:7d:f9:64:a4:db:5b:
                    5b:12:5a:3a:fe:e8:03:0a:e3:2d:92:8a:3b:3e:e0:
                    38:75:a4:bc:b5:ab:41:d1:6a:c5:07:b3:1a:c0:31:
                    ce:36:55:d6:6d:b2:84:14:d4:78:14:94:c9:87:9c:
                    72:36:07:29:7e:8a:f8:b4:0b:f3:a9:90:20:db:7d:
                    01:b3:5b:aa:59:ca:b8:05:c6:dc:ee:2b:65:3c:74:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8C:AE:EC:90:C4:CD:EA:21:3B:75:BB:8B:BE:15:9E:D7:FB:05:1C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6023D892E0C511F08464FFACDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.139.0/24
                  154.195.143.0-154.195.151.255

    Signature Algorithm: sha256WithRSAEncryption
         bb:56:39:d7:c4:43:e2:1a:83:a3:39:6e:8e:e6:e6:62:c0:25:
         4f:89:b7:d8:58:f0:1f:78:c5:06:11:42:47:3a:bb:cd:f5:de:
         58:1b:4f:15:99:80:38:e9:53:9c:d1:30:42:f9:b0:51:cb:7e:
         f8:43:b0:8b:5d:64:c1:b6:aa:c0:8c:9a:3e:a1:3e:42:38:83:
         3b:ae:9a:fa:95:bd:f8:78:87:10:2a:0c:5e:22:4e:93:1d:5d:
         d1:bc:57:c8:07:4d:09:72:f8:49:d6:80:0a:90:0c:2e:8f:e3:
         db:f2:03:bd:48:b3:86:02:d5:8e:0f:63:ed:85:fb:52:7b:19:
         5e:69:17:1d:b5:9c:24:e2:b9:be:7d:b6:0a:f1:32:cd:48:f5:
         15:86:6c:11:b6:46:24:50:44:e2:01:8f:60:42:e7:72:87:49:
         e8:a8:d1:26:8c:fc:31:a5:86:63:24:ec:34:b7:b7:af:2f:37:
         93:b2:ea:30:04:62:90:bb:2a:c6:42:03:9b:db:90:4c:95:89:
         41:45:48:86:3d:40:b4:42:9e:95:80:86:02:cd:74:22:23:25:
         52:60:cc:dd:a8:e2:0a:c1:7c:b9:c7:5d:3c:9f:a2:f7:c4:e8:
         97:0f:37:ff:cf:7a:bb:23:0e:ab:f7:67:4f:26:20:0c:2e:97:
         bf:e5:da:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:47:01 2025 by rpki-client