This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/912BAB6ACEC111F09EA530AADAE4EC9C.roa
File:                     912BAB6ACEC111F09EA530AADAE4EC9C.roa (raw, json)
Hash identifier:          dZtYPABp93EZ4ixZFzZU17wgf1I1+yOZ/Eix78RS/mU=
Subject key identifier:   CA:8F:8D:F4:DD:6C:3B:FE:3A:BA:3E:6F:BC:84:71:F0:28:61:AE:7E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/912BAB6ACEC111F09EA530AADAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 14:25:21 +0000
ROA not before:           Mon 01 Dec 2025 14:25:16 +0000
ROA not after:            Wed 31 Dec 2025 14:25:16 +0000
asID:                     62240
IP address blocks:        154.195.113.0/24 maxlen: 24
                          154.195.141.0/24 maxlen: 24
                          154.195.142.0/24 maxlen: 24
                          154.196.68.0/24 maxlen: 24
                          154.196.70.0/24 maxlen: 24
                          154.196.76.0/24 maxlen: 24
                          154.196.77.0/24 maxlen: 24
                          154.196.78.0/24 maxlen: 24
                          154.196.79.0/24 maxlen: 24
                          154.196.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109390 (0x1ab4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  1 14:25:16 2025 GMT
            Not After : Dec 31 14:25:16 2025 GMT
        Subject: CN=692da551-ec38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:b1:f6:ed:76:6f:25:4b:fb:38:c1:e6:79:
                    c7:c7:70:aa:90:fe:dc:53:8d:0e:4f:1d:1c:92:03:
                    cf:32:22:e5:4e:24:b5:6a:4f:0f:cf:2d:4a:77:c2:
                    ca:8e:60:68:25:6b:7f:e7:7b:4b:0f:a0:d2:36:4b:
                    f7:a9:ad:12:f5:fd:4d:77:46:95:76:3c:e2:af:18:
                    2c:95:f2:65:2a:bd:85:d9:e8:2b:5d:1a:ee:43:01:
                    6f:7f:e7:92:af:ee:98:68:d2:6d:97:f0:a5:f2:25:
                    35:b4:bd:84:f2:e1:c3:73:fc:23:7e:e5:8c:06:c3:
                    0c:62:87:87:9a:41:94:4b:ed:09:6f:e1:39:93:28:
                    08:e4:20:61:be:d5:b9:b7:d4:e9:78:4a:5c:53:20:
                    71:11:84:ef:8f:12:51:a8:df:be:c4:a4:f8:33:ff:
                    15:80:2d:7e:d5:ac:3f:80:1a:05:b3:1e:18:ad:d6:
                    59:60:15:ec:fd:f2:6b:f2:da:63:91:4a:f2:b9:f8:
                    5e:89:4b:87:14:b7:9e:fe:99:6e:cb:72:be:c6:30:
                    7c:cd:f7:a6:bd:5c:0e:db:dc:3f:56:38:3f:6c:9e:
                    cb:b3:d2:bd:a5:17:9f:8a:e7:81:59:67:6b:0c:9a:
                    c9:0b:ca:c9:52:f8:28:f9:58:52:c3:6b:7f:8f:0c:
                    de:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8F:8D:F4:DD:6C:3B:FE:3A:BA:3E:6F:BC:84:71:F0:28:61:AE:7E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/912BAB6ACEC111F09EA530AADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.113.0/24
                  154.195.141.0-154.195.142.255
                  154.196.68.0/24
                  154.196.70.0/24
                  154.196.76.0-154.196.80.255

    Signature Algorithm: sha256WithRSAEncryption
         04:4f:b4:bb:34:c6:02:12:f8:a5:3d:8d:2e:0c:03:ad:cc:6f:
         2b:fd:c9:57:2c:30:dc:e4:1c:91:31:fa:e4:01:c1:94:e1:61:
         36:37:c1:eb:af:8e:8a:f0:70:2a:72:ba:47:7a:89:9e:c7:de:
         ec:8d:6a:ab:08:28:47:54:55:86:74:17:aa:bc:53:bb:81:26:
         1b:29:59:a8:70:ad:9a:bf:77:a1:e2:02:7b:41:70:4d:50:ce:
         61:ac:7e:65:f1:69:c4:3d:80:b8:59:12:9b:f6:a9:14:b8:81:
         d3:95:cf:3d:f2:77:c3:0a:98:b6:e9:e6:71:8f:ea:db:17:17:
         cd:27:ce:07:81:d8:5d:94:b4:22:5d:ec:37:1e:df:f6:01:b3:
         8a:03:96:e3:fe:6b:90:22:97:1b:51:40:c7:86:44:88:64:e2:
         69:d2:23:f1:1f:13:e6:8e:5e:60:e0:99:03:13:ed:a8:de:94:
         b7:62:67:5e:3f:bd:e2:2e:32:7d:66:d0:b8:bd:34:76:91:5c:
         ad:6e:f3:ac:d7:13:85:be:d3:4a:8a:08:32:f6:31:3e:10:f5:
         80:0e:e3:c2:bf:80:dd:44:28:28:0f:38:78:4f:9a:f9:f6:53:
         bd:05:30:2a:9d:2a:d3:d1:8d:b7:75:5f:89:56:c1:06:a2:4b:
         39:8b:30:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:29:01 2025 by rpki-client