This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF5EBD8DF0E11F0B66A14EADAE4EC9C.roa
File:                     8DF5EBD8DF0E11F0B66A14EADAE4EC9C.roa (raw, json)
Hash identifier:          aYq+qA0i/KL8hijEjqK/XX5XCuM7QZMmOxRxcKahv4c=
Subject key identifier:   DF:D2:B4:8B:E6:36:06:C7:D3:E2:83:1D:F9:54:06:58:53:C1:57:FB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AFD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF5EBD8DF0E11F0B66A14EADAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 08:16:46 +0000
ROA not before:           Mon 22 Dec 2025 08:16:41 +0000
ROA not after:            Sun 27 Dec 2026 08:16:41 +0000
asID:                     201411
IP address blocks:        154.84.156.0/24 maxlen: 24
                          154.84.157.0/24 maxlen: 24
                          154.84.158.0/24 maxlen: 24
                          154.84.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 08:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110544 (0x1afd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 22 08:16:41 2025 GMT
            Not After : Dec 27 08:16:41 2026 GMT
        Subject: CN=6948fe6d-1249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:a1:66:c3:d5:52:be:4d:36:b9:d5:68:15:
                    5c:91:a6:3d:15:51:b5:3c:a9:35:0f:5d:e3:40:5f:
                    e0:e6:24:66:33:29:c5:70:5c:3c:91:c9:fe:c3:82:
                    2e:54:4b:40:ab:88:ca:3f:9d:69:87:83:46:56:7e:
                    f4:ff:81:8a:fb:ff:e1:f0:43:c8:2f:46:b6:15:5a:
                    c9:b3:75:81:72:5f:1e:1c:63:2b:54:e7:f1:78:e3:
                    5d:a3:61:d6:e7:22:fa:f7:28:0c:86:f5:5c:27:1d:
                    ab:92:4c:08:11:f3:09:b0:ba:c4:bf:18:b1:d2:15:
                    af:da:c4:d5:8e:2f:60:9a:fe:23:a4:5d:a3:d8:c1:
                    b4:40:26:e7:bf:83:6e:6c:07:5f:46:71:01:8e:33:
                    84:4a:07:d0:0c:53:13:bf:8f:ca:a1:f3:e5:e1:57:
                    ae:5a:fe:d2:da:1b:f7:25:ec:2e:aa:a9:18:7a:7a:
                    69:0e:72:9e:b7:c3:90:65:31:f9:d9:01:0b:b6:42:
                    f1:46:c5:de:0f:77:d8:dd:d5:df:ed:ad:1b:d7:46:
                    07:92:0f:32:5a:40:ff:30:2f:c4:ca:c9:15:58:d2:
                    28:d6:c1:bc:bc:bc:51:23:89:bd:56:75:0a:78:90:
                    5a:50:45:d2:44:92:3a:2c:6a:71:62:20:37:98:58:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D2:B4:8B:E6:36:06:C7:D3:E2:83:1D:F9:54:06:58:53:C1:57:FB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF5EBD8DF0E11F0B66A14EADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:24:6b:7f:c8:05:2b:8f:01:63:e7:77:1d:4c:d5:90:2a:d9:
         67:1b:35:46:c2:35:18:6b:21:46:c7:0e:0b:16:37:6f:e3:54:
         97:84:5e:f1:1d:c5:0b:3d:4e:ff:70:59:f4:09:7d:e5:d5:d9:
         de:05:02:69:86:5a:dd:4d:37:9e:8b:91:ee:6d:23:ef:b1:6b:
         6e:64:7f:17:12:f7:d6:fa:ae:fd:07:4b:2f:9e:cf:61:5b:91:
         8b:3f:04:6e:6b:7e:8a:48:af:d2:9a:f7:9a:0a:07:99:52:be:
         7a:21:51:24:40:91:41:3a:e1:63:a5:ef:68:52:fb:f7:d1:bf:
         3c:fd:48:8c:35:98:45:6b:70:41:54:85:64:58:2b:43:19:c9:
         7e:d7:10:2c:63:02:aa:db:b2:2a:41:b4:d0:05:11:33:2d:ef:
         37:9f:c9:77:b3:39:e9:29:0a:7f:eb:a8:b1:d5:e1:74:f2:d1:
         7c:b6:57:07:b0:34:52:43:a9:f7:f7:d2:0e:5e:25:ce:d5:99:
         ee:80:64:64:c5:e7:1f:f4:81:5c:12:22:12:4a:90:f4:95:ab:
         23:34:3a:dc:d1:05:c7:c9:33:18:02:8e:7d:e2:e7:4d:5f:3e:
         94:6c:d2:3d:83:64:86:5b:50:0b:d5:da:1f:33:e8:51:02:89:
         db:a6:95:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAa/QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjIyMDgxNjQxWhcNMjYxMjI3MDgxNjQxWjAYMRYw
FAYDVQQDEw02OTQ4ZmU2ZC0xMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx6KhZsPVUr5NNrnVaBVckaY9FVG1PKk1D13jQF/g5iRmMynFcFw8kcn+
w4IuVEtAq4jKP51ph4NGVn70/4GK+//h8EPIL0a2FVrJs3WBcl8eHGMrVOfxeONd
o2HW5yL69ygMhvVcJx2rkkwIEfMJsLrEvxix0hWv2sTVji9gmv4jpF2j2MG0QCbn
v4NubAdfRnEBjjOESgfQDFMTv4/KofPl4VeuWv7S2hv3JewuqqkYenppDnKet8OQ
ZTH52QELtkLxRsXeD3fY3dXf7a0b10YHkg8yWkD/MC/EyskVWNIo1sG8vLxRI4m9
VnUKeJBaUEXSRJI6LGpxYiA3mFgHXwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN/S
tIvmNgbH0+KDHflUBlhTwVf7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84REY1RUJEOERGMEUxMUYwQjY2QTE0RUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlScMA0GCSqGSIb3DQEB
CwUAA4IBAQCzJGt/yAUrjwFj53cdTNWQKtlnGzVGwjUYayFGxw4LFjdv41SXhF7x
HcULPU7/cFn0CX3l1dneBQJphlrdTTeei5HubSPvsWtuZH8XEvfW+q79B0svns9h
W5GLPwRua36KSK/SmveaCgeZUr56IVEkQJFBOuFjpe9oUvv30b88/UiMNZhFa3BB
VIVkWCtDGcl+1xAsYwKq27IqQbTQBREzLe83n8l3sznpKQp/66ix1eF08tF8tlcH
sDRSQ6n399IOXiXO1ZnugGRkxecf9IFcEiISSpD0lasjNDrc0QXHyTMYAo594udN
Xz6UbNI9g2SGW1AL1dofM+hRAonbppVY
-----END CERTIFICATE-----
Generated at Tue Dec 23 09:38:08 2025 by rpki-client