This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/898696FCE0D411F08F62FF8ADAE4EC9C.roa
File:                     898696FCE0D411F08F62FF8ADAE4EC9C.roa (raw, json)
Hash identifier:          jXCRr6TLAWBGqLv3hmUTdbu8VgLfbFI41Gv0ODFtR+4=
Subject key identifier:   18:94:4E:CE:85:06:A4:21:5D:2D:BD:09:FB:A1:3A:3C:54:45:D1:C1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B0E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/898696FCE0D411F08F62FF8ADAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 14:26:30 +0000
ROA not before:           Wed 24 Dec 2025 14:26:25 +0000
ROA not after:            Sat 31 Jan 2026 14:26:25 +0000
asID:                     62240
IP address blocks:        154.194.36.0/24 maxlen: 24
                          154.196.65.0/24 maxlen: 24
                          154.196.66.0/24 maxlen: 24
                          154.196.67.0/24 maxlen: 24
                          154.196.69.0/24 maxlen: 24
                          154.196.71.0/24 maxlen: 24
                          154.196.72.0/24 maxlen: 24
                          154.196.73.0/24 maxlen: 24
                          154.196.74.0/24 maxlen: 24
                          154.196.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110819 (0x1b0e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 24 14:26:25 2025 GMT
            Not After : Jan 31 14:26:25 2026 GMT
        Subject: CN=694bf816-9cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:ed:45:30:17:fb:9e:34:e3:28:2f:f9:0e:
                    53:3f:85:54:9e:cf:1f:d4:78:f5:7b:60:cf:69:15:
                    40:8e:a8:da:a1:6e:f2:c5:9e:04:10:60:b2:4b:65:
                    eb:85:a6:81:96:f7:e5:0a:7c:8c:31:80:f0:a3:44:
                    e2:c7:27:47:34:e8:f8:07:12:92:8f:ea:44:87:36:
                    31:26:e9:92:c9:95:55:d5:a0:b9:b2:bc:2c:8a:12:
                    35:94:60:5f:05:cd:84:8d:c5:7d:ef:18:96:f1:28:
                    cc:cf:7f:cc:46:74:32:85:ec:6c:2c:1c:c3:4c:b9:
                    12:ee:7c:d7:60:79:ba:6f:64:ca:ba:e6:44:be:71:
                    1e:b2:e1:d3:d5:a2:89:d4:df:61:b4:98:19:c3:e7:
                    b1:b2:61:b1:49:d7:87:c1:79:c9:a3:95:b0:36:ac:
                    88:47:b0:66:ae:c3:d3:da:03:63:7f:45:fd:de:94:
                    d3:1c:0f:83:af:5c:f1:09:e1:97:0a:7b:30:20:84:
                    22:f7:7f:62:1a:9c:1e:23:df:15:6a:39:27:b6:a9:
                    87:ba:78:64:f7:46:12:cf:91:2f:51:9d:a6:8c:a4:
                    f8:c7:ba:32:72:26:d6:d9:a4:46:27:80:4b:fa:a7:
                    c8:f5:17:43:71:65:c5:5a:34:e1:56:77:de:3f:cf:
                    b9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:94:4E:CE:85:06:A4:21:5D:2D:BD:09:FB:A1:3A:3C:54:45:D1:C1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/898696FCE0D411F08F62FF8ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.36.0/24
                  154.196.65.0-154.196.67.255
                  154.196.69.0/24
                  154.196.71.0-154.196.75.255

    Signature Algorithm: sha256WithRSAEncryption
         d2:79:7f:62:2d:07:79:3d:68:b9:e6:c3:f1:00:47:ff:0a:31:
         0d:08:dd:d6:f2:b0:d3:e9:d8:82:ef:84:ed:2b:06:f7:53:68:
         96:bf:5a:3c:b4:a6:a6:74:38:2c:7e:76:9d:cc:5f:a7:5d:65:
         f6:a8:2d:66:b1:72:36:9c:19:45:3a:56:1c:e3:f0:15:2a:50:
         2c:78:02:ac:ea:ff:21:e2:63:ed:9f:f7:1e:c7:8c:35:3b:9a:
         4d:63:bd:5c:a1:80:3a:ba:4e:49:d6:6c:7d:9a:c1:b4:12:11:
         5c:1d:5a:9f:ee:37:45:14:5f:ad:df:29:a4:07:0b:25:df:66:
         c2:67:8f:c8:ae:f5:26:d1:07:76:28:d2:ac:de:31:40:5d:4f:
         6e:da:91:2a:4a:72:eb:53:43:0d:1c:64:ed:bb:63:e6:71:85:
         86:ac:d1:16:04:e0:7a:88:b9:8c:21:7b:5a:e4:16:ac:67:91:
         15:28:45:87:cd:0d:8a:4f:46:c7:1a:60:b9:90:22:49:f5:f1:
         04:23:b0:85:1a:e4:5a:32:39:18:6e:67:8a:21:e4:4b:ed:6d:
         09:18:59:1c:cf:d0:82:05:a0:5b:ed:c2:da:0d:87:d0:f1:a7:
         dd:5e:f1:6c:3a:09:43:fe:fb:39:0b:4c:ae:30:2c:6e:32:a2:
         8e:06:ee:48
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAbDjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjI0MTQyNjI1WhcNMjYwMTMxMTQyNjI1WjAYMRYw
FAYDVQQDEw02OTRiZjgxNi05Y2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0oHtRTAX+5404ygv+Q5TP4VUns8f1Hj1e2DPaRVAjqjaoW7yxZ4EEGCy
S2XrhaaBlvflCnyMMYDwo0TixydHNOj4BxKSj+pEhzYxJumSyZVV1aC5srwsihI1
lGBfBc2EjcV97xiW8SjMz3/MRnQyhexsLBzDTLkS7nzXYHm6b2TKuuZEvnEesuHT
1aKJ1N9htJgZw+exsmGxSdeHwXnJo5WwNqyIR7BmrsPT2gNjf0X93pTTHA+Dr1zx
CeGXCnswIIQi939iGpweI98VajkntqmHunhk90YSz5EvUZ2mjKT4x7oycibW2aRG
J4BL+qfI9RdDcWXFWjThVnfeP8+5xwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFBiU
Ts6FBqQhXS29CfuhOjxURdHBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OTg2OTZGQ0UwRDQxMUYwOEY2MkZGOEFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAmsIkMAwDBACaxEEDBAKa
xEADBACaxEUwDAMEAJrERwMEAprESDANBgkqhkiG9w0BAQsFAAOCAQEA0nl/Yi0H
eT1ouebD8QBH/woxDQjd1vKw0+nYgu+E7SsG91Nolr9aPLSmpnQ4LH52ncxfp11l
9qgtZrFyNpwZRTpWHOPwFSpQLHgCrOr/IeJj7Z/3HseMNTuaTWO9XKGAOrpOSdZs
fZrBtBIRXB1an+43RRRfrd8ppAcLJd9mwmePyK71JtEHdijSrN4xQF1PbtqRKkpy
61NDDRxk7btj5nGFhqzRFgTgeoi5jCF7WuQWrGeRFShFh80Nik9GxxpguZAiSfXx
BCOwhRrkWjI5GG5niiHkS+1tCRhZHM/QggWgW+3C2g2H0PGn3V7xbDoJQ/77OQtM
rjAsbjKijgbuSA==
-----END CERTIFICATE-----
Generated at Sat Dec 27 16:48:30 2025 by rpki-client