This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7523CF06CEBC11F088BD7E8CDAE4EC9C.roa
File:                     7523CF06CEBC11F088BD7E8CDAE4EC9C.roa (raw, json)
Hash identifier:          DPZqJGri6rlXOS7If7L3n9NLYdCevOeMFe32WvFbAoM=
Subject key identifier:   B2:3E:4B:18:1E:84:22:E8:3A:87:80:80:97:A9:59:60:AA:2E:B2:74
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7523CF06CEBC11F088BD7E8CDAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 13:48:47 +0000
ROA not before:           Mon 01 Dec 2025 13:48:42 +0000
ROA not after:            Wed 31 Dec 2025 13:48:42 +0000
asID:                     62240
IP address blocks:        154.196.21.0/24 maxlen: 24
                          154.196.23.0/24 maxlen: 24
                          154.196.24.0/24 maxlen: 24
                          154.196.25.0/24 maxlen: 24
                          154.196.26.0/24 maxlen: 24
                          154.196.27.0/24 maxlen: 24
                          154.196.28.0/24 maxlen: 24
                          154.196.51.0/24 maxlen: 24
                          154.196.52.0/24 maxlen: 24
                          154.196.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109378 (0x1ab42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  1 13:48:42 2025 GMT
            Not After : Dec 31 13:48:42 2025 GMT
        Subject: CN=692d9cbf-beac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:7c:f8:e3:4b:5d:39:9b:6a:90:2d:8b:54:
                    fd:6e:4c:bb:58:5c:99:ec:b9:0b:0a:b9:73:a3:24:
                    24:4e:57:6d:eb:20:5f:bb:1c:22:b9:10:db:c8:f9:
                    7b:79:e9:26:d7:a9:73:e4:54:6a:73:51:ec:94:41:
                    da:8e:b9:a3:38:7c:be:20:5b:a1:81:71:7d:b6:5a:
                    bb:80:11:6c:60:76:9c:84:22:e3:48:72:02:d8:a4:
                    b4:9c:58:19:e3:d3:ce:94:d7:05:7c:d0:49:56:c1:
                    b1:e5:d9:d1:ba:ee:87:b1:90:64:a6:99:57:4f:26:
                    45:c9:71:a3:67:3f:49:24:c4:cd:92:03:8d:ae:2f:
                    69:8f:e3:2a:da:fa:07:b4:02:16:72:69:9c:46:fd:
                    c4:98:d2:8c:aa:e5:58:2d:5e:b9:f0:fb:53:b3:c3:
                    23:ce:fa:1e:11:66:bb:0f:d4:6a:65:b4:34:5e:ff:
                    98:10:f1:ac:aa:04:d1:22:99:4f:c0:89:9b:0d:99:
                    07:a2:c9:6b:bd:55:ec:44:18:52:4e:c5:98:8b:ea:
                    75:fb:c1:f5:99:fa:ac:82:c2:36:c0:e1:79:fc:25:
                    b7:ed:c3:5a:72:71:44:73:dc:d3:8d:a1:d3:96:0e:
                    ff:58:39:11:b2:dc:54:b9:2c:65:51:2b:52:82:69:
                    11:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3E:4B:18:1E:84:22:E8:3A:87:80:80:97:A9:59:60:AA:2E:B2:74
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7523CF06CEBC11F088BD7E8CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.21.0/24
                  154.196.23.0-154.196.28.255
                  154.196.51.0-154.196.53.255

    Signature Algorithm: sha256WithRSAEncryption
         72:cf:7f:a1:06:da:38:02:5c:1a:4d:d9:44:26:32:77:10:d6:
         a3:8b:39:e7:6c:96:6b:80:18:07:ca:a6:66:1a:71:7e:8d:e7:
         d7:8b:70:e6:39:c6:08:17:20:c2:71:77:ae:10:c6:96:e8:5f:
         bf:b7:73:2b:b1:c7:af:d2:81:fb:2d:7f:f7:b0:13:bd:d6:ab:
         6f:49:20:25:7d:c9:f1:5e:6f:36:0b:6c:72:a4:f8:6a:af:44:
         6e:ba:c0:f1:49:bd:48:68:a0:82:6f:ae:d5:a8:ef:5a:3a:2b:
         62:e8:e7:51:e3:4c:af:2c:e4:1b:c2:96:84:f8:91:47:15:2d:
         d2:fd:3a:d7:7c:1d:6e:a8:1f:b5:3a:a9:76:fc:69:7a:67:23:
         fd:08:c6:07:c4:57:12:82:e8:cc:6b:29:85:72:a2:7c:7d:75:
         ca:1a:58:40:71:e7:9d:2c:5f:07:00:cc:bf:a9:60:48:5a:62:
         ed:d6:8e:fd:9d:9c:7e:90:2c:74:2f:66:d8:04:f0:ba:4f:12:
         8e:a9:fb:99:c6:f4:7e:94:3b:36:bb:bb:0b:3e:bd:65:3e:56:
         bf:8a:9d:63:15:86:d8:41:52:26:33:ac:19:0b:08:78:af:c4:
         46:c7:73:65:de:16:87:74:09:05:df:69:0b:e5:c5:6d:51:93:
         83:02:7d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:16 2025 by rpki-client