This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F84DE24C91411F08AC7758CDAE4EC9C.roa
File:                     8F84DE24C91411F08AC7758CDAE4EC9C.roa (raw, json)
Hash identifier:          q2AI4zlyfjZoGGAqoWVqackdemmkQCulNTQlFP0wAx0=
Subject key identifier:   83:00:09:2E:7A:FA:FC:2A:CB:CC:A4:43:E8:50:C3:6B:26:A4:5E:E4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AA3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F84DE24C91411F08AC7758CDAE4EC9C.roa
Signing time:             Mon 24 Nov 2025 09:04:20 +0000
ROA not before:           Mon 24 Nov 2025 09:04:15 +0000
ROA not after:            Tue 30 Dec 2025 09:04:15 +0000
asID:                     32043
IP address blocks:        154.194.5.0/24 maxlen: 24
                          154.195.8.0/24 maxlen: 24
                          154.195.9.0/24 maxlen: 24
                          154.195.10.0/24 maxlen: 24
                          154.195.11.0/24 maxlen: 24
                          154.195.12.0/24 maxlen: 24
                          154.195.13.0/24 maxlen: 24
                          154.203.8.0/22 maxlen: 24
                          154.203.12.0/22 maxlen: 24
                          154.203.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109117 (0x1aa3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 24 09:04:15 2025 GMT
            Not After : Dec 30 09:04:15 2025 GMT
        Subject: CN=69241f93-5a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8b:dc:fc:79:2f:68:91:a9:98:3a:a0:4e:4b:
                    e9:b5:36:58:1a:94:40:9b:7a:f0:2d:b7:0f:e9:49:
                    1e:56:c5:b2:6d:30:a1:1a:5c:6d:50:0f:4b:1c:eb:
                    6a:cc:50:15:5b:cc:7b:85:11:a8:60:f7:ab:bb:78:
                    26:9f:b6:47:83:72:d5:16:82:76:be:01:0b:74:7d:
                    9e:ed:70:24:80:48:ab:3f:bc:ac:b0:95:59:a6:7a:
                    fc:35:73:e6:17:8b:59:de:95:a3:d2:97:d6:c9:71:
                    0d:4b:2c:d3:31:81:c9:a8:5b:55:e4:55:8a:76:17:
                    69:1e:60:65:dd:65:3d:15:ff:f1:dd:f2:6d:18:eb:
                    84:ab:81:84:30:c0:f7:c2:22:78:7a:74:b1:57:31:
                    18:dd:47:13:bd:89:ef:ad:7a:64:5e:18:28:73:48:
                    89:3a:78:65:54:db:0d:be:19:5d:b7:f8:e1:2a:fa:
                    5c:09:6e:43:9b:1d:ef:7c:72:ae:e9:2f:00:c0:82:
                    05:26:b5:27:03:d7:76:fe:ce:02:d8:40:90:a6:a3:
                    e9:32:f8:cf:5c:c1:53:9f:d2:39:eb:12:e4:a5:8f:
                    5c:1b:c6:44:bb:80:77:2d:9d:e4:73:61:95:78:d0:
                    cb:36:1d:ef:0f:46:10:ea:27:9d:90:f4:51:d0:22:
                    18:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:00:09:2E:7A:FA:FC:2A:CB:CC:A4:43:E8:50:C3:6B:26:A4:5E:E4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F84DE24C91411F08AC7758CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.5.0/24
                  154.195.8.0-154.195.13.255
                  154.203.8.0/21
                  154.203.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:ca:b1:47:11:43:cc:f2:6f:72:8a:f7:8e:a0:5c:d6:59:eb:
         2e:0d:af:9d:82:28:8c:58:26:b6:61:9e:66:ed:bb:a3:55:a1:
         49:62:04:56:72:2f:32:f7:04:f5:4a:87:33:65:a9:93:f1:a3:
         e1:21:c2:db:22:ff:e7:c4:d5:0f:15:a1:bd:ea:67:06:a4:e7:
         dc:ef:75:64:9d:ad:8b:63:cd:9d:aa:76:8d:b5:35:89:90:d6:
         10:04:65:d8:e0:4d:81:d0:df:34:d1:d8:44:c3:e1:73:9a:fd:
         71:e0:6e:1e:e7:3d:1b:44:e6:f5:46:d9:b1:47:fe:0f:4a:12:
         52:8a:6f:46:a3:0e:1a:b5:2a:83:45:d3:89:77:55:24:45:c8:
         fc:cd:e3:22:e8:85:d0:ba:ba:57:01:05:68:f4:e9:3d:89:d7:
         38:f1:c2:af:8b:b4:3e:eb:2c:24:3c:4e:ad:56:9e:62:03:a6:
         9d:b9:aa:5d:d9:ed:d4:17:46:ea:42:70:95:2d:c0:de:73:dd:
         5f:84:5f:e3:a9:9e:06:d0:7c:8f:ff:fc:5e:32:dd:59:b3:bf:
         75:c6:5c:b7:b0:0c:d1:84:2f:31:33:00:8a:fb:b9:a8:e6:f3:
         ad:4c:0b:c3:80:2a:84:d1:21:c6:2d:d3:38:6b:43:28:2b:15:
         82:b7:83:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:13 2025 by rpki-client