This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D1C2C70DF1B11F0AF6F60BCDAE4EC9C.roa
File:                     7D1C2C70DF1B11F0AF6F60BCDAE4EC9C.roa (raw, json)
Hash identifier:          zZ1p+cjhHGKzcc2idse5RmYxLj+cEl45GwD+TBx38Hs=
Subject key identifier:   F7:90:F2:C1:98:C9:73:B7:8F:13:1D:9D:ED:D2:B1:78:A5:8D:A4:59
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AFEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D1C2C70DF1B11F0AF6F60BCDAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 09:49:21 +0000
ROA not before:           Mon 22 Dec 2025 09:49:15 +0000
ROA not after:            Fri 18 Dec 2026 09:49:15 +0000
asID:                     140224
IP address blocks:        154.205.222.0/24 maxlen: 24
                          154.205.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 08:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110575 (0x1afef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 22 09:49:15 2025 GMT
            Not After : Dec 18 09:49:15 2026 GMT
        Subject: CN=69491421-e26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:69:d6:11:bf:8d:31:4c:d8:01:8e:b5:12:a8:
                    bb:9b:1d:5a:cb:a0:07:ea:08:04:67:06:ac:ca:34:
                    2d:2f:c6:84:99:8f:b7:af:0b:bd:f9:18:dd:24:a6:
                    39:56:74:ab:09:d0:42:70:6f:58:c3:e0:0b:73:84:
                    93:99:98:8b:93:c9:52:41:c6:28:2c:f8:6d:9c:56:
                    df:f6:7d:b6:06:76:e5:c3:c6:25:b2:5a:3d:3e:c7:
                    10:09:d4:76:d5:e1:8e:16:ed:88:60:86:d1:77:90:
                    9e:e8:4c:99:e7:17:2d:92:f4:7e:18:06:a5:83:43:
                    bc:43:9d:8d:b0:ca:7a:c7:52:88:4b:09:72:3e:e7:
                    69:16:86:93:25:da:f0:56:96:c0:a6:e5:36:0e:4d:
                    f1:d4:3c:2e:20:57:05:60:8f:81:e4:e3:c3:85:19:
                    ca:cd:12:ac:15:ff:78:f4:19:33:bc:db:11:b9:71:
                    97:90:c1:7c:56:f7:2a:27:35:8e:f2:e8:b8:84:94:
                    4f:d4:9b:f9:43:cb:3f:bc:13:d6:76:34:bd:bf:c9:
                    ad:de:e5:0d:07:64:3f:05:a7:81:db:f0:02:b8:2f:
                    35:4d:1a:46:92:31:6f:10:5c:d2:a0:85:d6:82:21:
                    cb:12:ca:b4:83:d1:da:9a:d9:47:ba:62:2a:c1:c7:
                    3e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:90:F2:C1:98:C9:73:B7:8F:13:1D:9D:ED:D2:B1:78:A5:8D:A4:59
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D1C2C70DF1B11F0AF6F60BCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:c6:15:ce:dd:e7:6f:bd:0c:e9:0e:47:54:71:bc:00:4b:ad:
         f9:1a:a9:e9:46:f3:cb:87:44:f8:86:3c:32:c9:f8:fd:63:46:
         46:28:5a:24:96:eb:a6:40:c1:2f:6b:94:01:b5:b9:8b:49:77:
         28:c6:59:b4:09:07:40:76:95:ea:b6:12:fa:c4:2c:a2:0f:f0:
         d4:25:f2:c0:fc:6e:60:7d:ce:09:8f:ca:72:07:88:3f:7e:96:
         d8:dc:d3:2b:fc:84:7e:2a:b5:01:e3:39:7b:5d:25:45:a1:59:
         2b:c6:1b:bf:b0:d8:73:6c:f5:51:24:9b:a7:58:61:7a:69:94:
         9d:ff:34:fd:86:2d:e6:30:b9:00:a1:33:81:fa:a3:7c:97:ae:
         67:52:e2:59:54:42:ba:76:be:c6:43:89:ce:8e:1b:c4:84:a0:
         18:19:b5:db:b6:0d:d5:60:9f:ff:5f:0a:c1:05:5a:79:fc:8f:
         9d:55:54:a5:f8:13:c6:bf:99:0e:ba:d8:de:1c:30:66:45:9f:
         35:4d:09:7c:ee:c3:6b:d5:2b:26:75:cb:55:ca:cc:28:68:aa:
         39:76:c9:4c:b4:0b:91:8f:f6:0f:9a:3d:e5:21:92:f0:83:ac:
         32:97:bd:32:c8:c3:13:10:5c:78:c6:ff:64:a2:40:25:98:99:
         e0:14:21:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAa/vMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjIyMDk0OTE1WhcNMjYxMjE4MDk0OTE1WjAYMRYw
FAYDVQQDEw02OTQ5MTQyMS1lMjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3GnWEb+NMUzYAY61Eqi7mx1ay6AH6ggEZwasyjQtL8aEmY+3rwu9+Rjd
JKY5VnSrCdBCcG9Yw+ALc4STmZiLk8lSQcYoLPhtnFbf9n22Bnblw8Ylslo9PscQ
CdR21eGOFu2IYIbRd5Ce6EyZ5xctkvR+GAalg0O8Q52NsMp6x1KISwlyPudpFoaT
JdrwVpbApuU2Dk3x1DwuIFcFYI+B5OPDhRnKzRKsFf949BkzvNsRuXGXkMF8Vvcq
JzWO8ui4hJRP1Jv5Q8s/vBPWdjS9v8mt3uUNB2Q/BaeB2/ACuC81TRpGkjFvEFzS
oIXWgiHLEsq0g9HamtlHumIqwcc+EwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPeQ
8sGYyXO3jxMdne3SsXiljaRZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RDFDMkM3MERGMUIxMUYwQUY2RjYwQkNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms3eMA0GCSqGSIb3DQEB
CwUAA4IBAQCNxhXO3edvvQzpDkdUcbwAS635GqnpRvPLh0T4hjwyyfj9Y0ZGKFok
luumQMEva5QBtbmLSXcoxlm0CQdAdpXqthL6xCyiD/DUJfLA/G5gfc4Jj8pyB4g/
fpbY3NMr/IR+KrUB4zl7XSVFoVkrxhu/sNhzbPVRJJunWGF6aZSd/zT9hi3mMLkA
oTOB+qN8l65nUuJZVEK6dr7GQ4nOjhvEhKAYGbXbtg3VYJ//XwrBBVp5/I+dVVSl
+BPGv5kOutjeHDBmRZ81TQl87sNr1SsmdctVyswoaKo5dslMtAuRj/YPmj3lIZLw
g6wyl70yyMMTEFx4xv9kokAlmJngFCEt
-----END CERTIFICATE-----
Generated at Tue Dec 23 09:38:00 2025 by rpki-client