This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86778656DB3E11F0A776E681DAE4EC9C.roa
File:                     86778656DB3E11F0A776E681DAE4EC9C.roa (raw, json)
Hash identifier:          m46ccW7L9FrzXN7q+5IspijYneTj8dqcJiGExz4nK+o=
Subject key identifier:   2E:56:0F:D6:46:A8:56:E3:50:7C:68:E5:CD:12:A1:95:CA:E8:9F:CC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AEE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86778656DB3E11F0A776E681DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 11:50:06 +0000
ROA not before:           Wed 17 Dec 2025 11:49:59 +0000
ROA not after:            Sun 17 Dec 2028 11:49:59 +0000
asID:                     17561
IP address blocks:        154.218.207.0/24 maxlen: 24
                          154.218.208.0/24 maxlen: 24
                          154.218.209.0/24 maxlen: 24
                          154.218.210.0/24 maxlen: 24
                          154.218.211.0/24 maxlen: 24
                          154.218.212.0/24 maxlen: 24
                          154.218.213.0/24 maxlen: 24
                          154.218.214.0/24 maxlen: 24
                          154.218.215.0/24 maxlen: 24
                          154.218.216.0/24 maxlen: 24
                          154.218.217.0/24 maxlen: 24
                          154.218.218.0/24 maxlen: 24
                          154.218.219.0/24 maxlen: 24
                          154.218.220.0/24 maxlen: 24
                          154.218.221.0/24 maxlen: 24
                          154.218.222.0/24 maxlen: 24
                          154.218.223.0/24 maxlen: 24
                          154.218.224.0/24 maxlen: 24
                          154.218.225.0/24 maxlen: 24
                          154.218.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110312 (0x1aee8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 11:49:59 2025 GMT
            Not After : Dec 17 11:49:59 2028 GMT
        Subject: CN=694298ee-f2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:80:0c:88:d9:55:b2:9d:66:ca:b5:34:25:2f:
                    3d:b7:d8:e5:03:bd:fa:8d:70:bd:90:f4:05:23:ae:
                    e8:c2:6f:f9:9c:92:f2:49:f8:7d:7d:7a:96:1c:d7:
                    34:31:31:d5:12:bc:d8:af:da:47:2c:a5:1e:77:c4:
                    6e:c3:ba:18:88:c8:73:a3:e0:cd:81:74:29:96:f1:
                    0d:74:d8:51:3f:51:35:44:17:a7:0f:70:f9:fd:8d:
                    cb:74:17:0e:ab:94:f4:a8:8b:b0:c7:68:a5:13:b4:
                    0f:f0:74:89:2c:ef:50:46:ec:de:44:c0:62:32:03:
                    2c:ed:00:dd:76:b2:cb:3f:fb:b9:05:12:83:f1:df:
                    69:6d:29:08:d8:89:aa:b1:a6:02:99:0d:ac:94:fd:
                    cb:d9:59:dc:60:05:34:f2:1f:45:1f:55:a0:5d:9a:
                    22:a0:23:33:55:10:74:5c:cd:5b:68:59:34:bc:88:
                    ba:0d:cc:cb:05:81:fb:d4:07:0c:8c:61:72:df:e1:
                    a4:b0:1e:1f:44:fb:e4:82:ef:51:a0:6b:b5:4a:f5:
                    a7:fc:1e:2e:93:99:4c:a9:1a:da:8a:71:8c:b1:33:
                    a4:ca:20:4f:94:19:32:cc:1b:95:47:9d:8f:45:bc:
                    f3:1c:43:45:f1:f3:8c:59:cd:80:7d:5e:36:92:b1:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:56:0F:D6:46:A8:56:E3:50:7C:68:E5:CD:12:A1:95:CA:E8:9F:CC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86778656DB3E11F0A776E681DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.218.207.0-154.218.226.255

    Signature Algorithm: sha256WithRSAEncryption
         a9:b1:89:02:cd:7d:13:36:b7:66:21:ec:ad:99:b6:ba:80:e5:
         39:f4:5c:0d:89:55:f5:bf:1f:08:4c:f3:27:5f:8e:94:68:ba:
         76:93:2c:07:0e:f9:63:0b:15:be:a1:26:fc:4b:79:1f:9e:a5:
         c8:19:51:90:1c:84:54:30:df:0e:9e:b9:51:d7:5e:58:9a:a5:
         c9:84:e2:1a:16:b5:79:4c:8c:d5:1b:a0:a9:a6:4c:22:ca:08:
         59:af:2c:e6:c9:33:00:29:3e:44:44:df:41:7e:e7:bd:16:84:
         10:86:3e:d1:db:18:8a:d9:30:73:4a:0c:d6:79:24:49:a7:ca:
         48:72:31:a4:15:12:c7:f6:8a:2f:b4:15:aa:06:f9:69:54:8d:
         61:70:c8:7e:2c:08:bd:3f:2a:8d:4c:74:c4:bc:c5:76:20:3b:
         62:99:5d:7c:63:ad:5d:a8:0e:7f:19:b3:25:db:be:f8:23:28:
         4b:64:4d:7a:13:39:53:fb:9d:49:22:39:43:e7:68:77:7e:d1:
         b5:b9:3f:bc:96:a5:1f:b7:06:1e:8a:2d:40:4a:01:a3:45:7c:
         25:b0:1c:36:43:90:7c:7f:3a:92:bf:09:c0:f0:1b:4a:2f:f6:
         42:5c:6a:e8:53:5d:61:c1:f8:b4:e9:ef:9d:b0:53:60:a6:f4:
         16:0f:6b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:09:32 2025 by rpki-client