This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74C76CC0B4DB11F09B1EE191DAE4EC9C.roa
File:                     74C76CC0B4DB11F09B1EE191DAE4EC9C.roa (raw, json)
Hash identifier:          9sfFVAQoxtPzCod5SZPppYATRZ8MqgijUHfyIIWnPFg=
Subject key identifier:   A2:26:14:DF:DB:62:D5:14:EA:EA:96:0F:D2:B0:EA:2E:75:63:CA:05
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A660
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74C76CC0B4DB11F09B1EE191DAE4EC9C.roa
Signing time:             Wed 29 Oct 2025 15:25:10 +0000
ROA not before:           Wed 29 Oct 2025 15:25:05 +0000
ROA not after:            Sat 06 Dec 2025 15:25:05 +0000
asID:                     202656
IP address blocks:        154.219.246.0/24 maxlen: 24
                          154.219.247.0/24 maxlen: 24
                          154.219.250.0/24 maxlen: 24
                          154.219.251.0/24 maxlen: 24
                          154.219.252.0/24 maxlen: 24
                          154.219.253.0/24 maxlen: 24
                          154.219.254.0/24 maxlen: 24
                          154.219.255.0/24 maxlen: 24
                          154.221.60.0/24 maxlen: 24
                          154.222.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108128 (0x1a660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 29 15:25:05 2025 GMT
            Not After : Dec  6 15:25:05 2025 GMT
        Subject: CN=690231d6-4385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:5a:b7:8e:8e:a2:39:5d:e5:bf:72:2c:18:
                    bf:ef:70:33:76:15:73:ec:61:ff:55:db:71:b5:85:
                    06:78:6b:33:aa:8d:a3:39:98:dc:d7:31:cb:9d:aa:
                    82:54:33:44:fa:9f:28:94:cc:b4:39:ac:2c:bb:0c:
                    24:a8:4d:c3:df:8c:9e:13:3e:53:7e:db:bb:5b:cb:
                    a0:0c:fe:94:9a:be:e3:e6:41:fc:d9:6a:76:37:b9:
                    df:c0:7a:4d:0a:05:37:38:9f:ab:17:2d:a5:60:6f:
                    64:e0:30:ed:cd:74:fc:55:94:9e:22:29:59:fd:58:
                    aa:06:7f:9f:36:16:72:5d:d0:b0:9c:59:32:66:7a:
                    1c:77:04:5a:50:f6:bc:51:c4:21:73:e8:50:e8:cf:
                    de:b5:16:e2:2b:c6:42:0e:bf:0c:65:3d:e1:a8:07:
                    40:db:20:06:8e:14:81:1f:a7:c5:87:62:49:72:37:
                    39:6c:7a:88:2a:6f:cf:af:77:e1:b8:59:c8:e1:76:
                    d4:57:68:59:40:12:ec:96:c3:2d:3c:61:0e:81:d7:
                    3d:9a:3c:05:dd:23:7a:62:f8:bf:f8:6c:29:95:90:
                    53:b4:14:bd:f0:b9:d1:ad:b8:2b:a4:60:9c:46:90:
                    82:94:31:c2:79:ca:5d:1c:04:c9:9f:74:81:5b:90:
                    71:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:26:14:DF:DB:62:D5:14:EA:EA:96:0F:D2:B0:EA:2E:75:63:CA:05
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74C76CC0B4DB11F09B1EE191DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.246.0/23
                  154.219.250.0-154.219.255.255
                  154.221.60.0/24
                  154.222.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:3d:93:69:8b:de:31:b6:9e:cd:50:eb:2e:2b:7c:42:f1:0f:
         9f:1e:23:ee:03:6e:0d:3b:6f:ce:92:bc:9f:f1:31:31:33:43:
         2e:1c:6e:67:9b:83:d5:39:33:29:0d:4f:92:6c:01:6a:7d:65:
         bf:90:86:f6:ba:36:ef:7b:4f:32:34:dc:30:fe:ec:0c:08:45:
         88:0f:6b:d8:8e:ec:11:e1:cc:26:48:ed:da:3a:18:4c:de:8b:
         25:5b:6b:d0:bd:c5:8a:1c:c1:84:a5:3c:09:c8:ad:f2:79:43:
         f5:78:d0:82:df:ab:fd:31:7f:c1:7d:34:6f:de:49:3c:d1:89:
         f6:25:56:e4:60:71:3b:bd:eb:d9:21:74:90:12:9f:8b:da:bb:
         65:df:f8:0c:41:5d:d5:7e:3b:6b:e9:fb:2b:f0:2c:62:26:d7:
         5b:42:54:24:79:f3:c2:a6:6a:b3:52:2f:01:3c:2f:9d:18:13:
         d0:f5:a1:ec:56:db:30:d0:cb:37:88:fa:93:06:bd:c8:b6:d9:
         a8:67:f5:6f:62:af:f3:95:cb:b9:40:ac:81:d5:63:38:84:96:
         0f:cc:da:cd:4c:d8:50:f9:52:cb:74:97:df:7b:8f:f9:d3:cd:
         21:46:46:1c:79:36:d3:f2:f1:95:eb:5c:9c:2f:8a:96:f1:28:
         d4:09:65:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:07:12 2025 by rpki-client