This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/811679B6DF1611F0AD11049FDAE4EC9C.roa
File:                     811679B6DF1611F0AD11049FDAE4EC9C.roa (raw, json)
Hash identifier:          AyybS7d271IGjPJk/kWcA4I74+t7yFUK0JQSXaAWNl0=
Subject key identifier:   65:D3:6F:FC:FB:8C:CE:26:6A:70:FF:59:C5:EA:FB:9C:9E:8C:FE:B0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AFEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/811679B6DF1611F0AD11049FDAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 09:13:40 +0000
ROA not before:           Mon 22 Dec 2025 09:13:35 +0000
ROA not after:            Fri 22 Dec 2028 09:13:35 +0000
asID:                     17561
IP address blocks:        154.197.36.0/24 maxlen: 24
                          154.197.37.0/24 maxlen: 24
                          154.197.38.0/24 maxlen: 24
                          154.197.39.0/24 maxlen: 24
                          154.197.92.0/24 maxlen: 24
                          154.200.30.0/24 maxlen: 24
                          154.200.31.0/24 maxlen: 24
                          154.202.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110571 (0x1afeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 22 09:13:35 2025 GMT
            Not After : Dec 22 09:13:35 2028 GMT
        Subject: CN=69490bc4-2d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:b2:92:c6:1b:af:06:a4:37:b3:24:f1:fa:
                    1a:13:d2:2a:12:11:30:66:97:ba:f5:dc:c1:59:51:
                    1e:12:93:5b:7c:10:fb:e6:08:3c:58:4f:bd:de:28:
                    ab:d7:c2:b0:64:6a:96:e5:dd:b7:d8:ce:53:ed:27:
                    01:f3:c0:86:1f:3f:2a:17:7b:a2:6c:00:20:a5:dd:
                    c2:74:cd:09:bd:16:33:b3:17:0d:24:a5:d3:b1:a5:
                    9f:8e:97:72:03:80:5d:05:20:32:47:8f:f5:b9:66:
                    92:cc:20:3d:43:60:63:1b:8d:ec:65:6e:99:a9:bd:
                    20:0d:83:7b:43:4e:dd:56:c6:2b:d4:8c:3e:bd:83:
                    73:8e:70:79:a2:d4:23:09:82:70:3d:63:ee:2d:e8:
                    0c:de:72:bc:53:bf:ed:99:ca:77:3e:61:ff:20:57:
                    6c:ab:aa:bb:78:1f:04:57:15:6f:83:65:89:c2:9f:
                    7b:be:9d:7e:27:e8:84:b1:a6:00:f6:b3:58:5a:0f:
                    7b:4e:2a:41:81:be:c3:43:1b:9d:8d:6b:5e:e8:4c:
                    0d:f2:27:e2:de:b1:4d:3f:b6:8c:21:a0:cf:b6:a2:
                    a6:82:51:43:c4:28:13:1a:f5:9c:34:17:71:c6:bb:
                    14:fd:fa:47:df:3d:e6:1d:9d:0f:52:7a:61:f1:dc:
                    0f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D3:6F:FC:FB:8C:CE:26:6A:70:FF:59:C5:EA:FB:9C:9E:8C:FE:B0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/811679B6DF1611F0AD11049FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.36.0/22
                  154.197.92.0/24
                  154.200.30.0/23
                  154.202.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:e4:9f:1a:ca:fa:a3:73:d1:de:59:da:e4:af:5c:48:b8:af:
         5f:63:53:95:88:ff:31:1f:88:0a:1f:3f:6c:e1:f6:44:37:9f:
         e9:6f:4d:d7:e6:2e:ca:de:28:e4:86:70:57:ca:71:ca:ee:97:
         dc:17:f3:52:2f:ed:ba:95:28:c3:cb:d0:79:62:34:71:c6:d0:
         8d:87:e2:14:ca:fd:94:d1:ff:06:31:34:67:8e:32:8f:5a:0a:
         1c:53:80:36:09:da:91:6f:00:fd:b0:42:df:4d:f7:f3:09:85:
         6a:b8:dd:e3:04:21:70:2f:ed:de:50:15:93:0d:9f:cd:d0:d9:
         6c:ea:18:75:a9:a0:70:eb:c0:2b:0b:87:f8:8d:20:b7:8f:66:
         eb:08:c3:b0:01:7c:3e:1a:bb:d1:bf:3d:9d:37:46:e2:81:b8:
         2a:ca:71:9b:c9:84:52:58:6e:07:1a:19:10:ad:d3:ca:1f:7b:
         7e:54:ee:46:fe:12:84:45:fd:2b:0d:93:17:03:bb:5c:59:39:
         3b:7a:0c:31:f8:2c:df:1b:4a:5d:e5:16:62:b9:67:95:24:5a:
         1e:44:53:88:bd:15:24:07:3c:87:5d:32:97:b6:95:18:69:32:
         73:e5:c9:a5:d7:40:a3:4b:2a:58:35:12:c9:21:6a:e3:4e:88:
         38:e8:fe:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:38:04 2025 by rpki-client