This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95B1B3C6C14E11F0A6533E8FDAE4EC9C.roa
File:                     95B1B3C6C14E11F0A6533E8FDAE4EC9C.roa (raw, json)
Hash identifier:          rCwHyDab+YY7qqs+4+wqaJ770hMdqFRqMsoFicdVFQg=
Subject key identifier:   2D:72:49:5D:93:3A:06:19:92:80:1D:68:42:B1:63:8A:30:A7:56:56
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A916
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95B1B3C6C14E11F0A6533E8FDAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 11:39:31 +0000
ROA not before:           Fri 14 Nov 2025 11:39:27 +0000
ROA not after:            Tue 16 Dec 2025 11:39:27 +0000
asID:                     22773
IP address blocks:        154.82.11.0/24 maxlen: 24
                          154.82.12.0/24 maxlen: 24
                          154.82.13.0/24 maxlen: 24
                          154.82.14.0/24 maxlen: 24
                          154.82.15.0/24 maxlen: 24
                          154.85.12.0/24 maxlen: 24
                          154.85.22.0/24 maxlen: 24
                          154.85.23.0/24 maxlen: 24
                          154.85.104.0/24 maxlen: 24
                          154.85.105.0/24 maxlen: 24
                          154.85.106.0/24 maxlen: 24
                          154.85.107.0/24 maxlen: 24
                          154.85.108.0/24 maxlen: 24
                          154.85.109.0/24 maxlen: 24
                          154.85.110.0/24 maxlen: 24
                          154.85.111.0/24 maxlen: 24
                          154.85.112.0/24 maxlen: 24
                          154.85.113.0/24 maxlen: 24
                          154.85.114.0/24 maxlen: 24
                          154.85.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108822 (0x1a916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 14 11:39:27 2025 GMT
            Not After : Dec 16 11:39:27 2025 GMT
        Subject: CN=691714f3-f9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:e5:39:35:f5:2b:d0:aa:d8:e0:22:5e:bc:
                    49:ae:fb:17:ff:87:66:44:24:d9:81:73:ee:a6:d8:
                    b7:40:15:92:4e:cc:87:09:66:1f:74:03:cf:70:59:
                    4a:f2:d8:98:4d:b2:7d:29:a6:35:8f:24:98:a3:e7:
                    b5:29:71:d2:b9:22:10:61:8b:36:4a:d2:7d:6f:da:
                    7c:c8:db:2b:20:0a:14:fa:b5:42:87:d6:7e:c9:55:
                    77:a8:ca:63:a9:00:23:07:87:05:22:3f:29:cc:db:
                    95:35:fd:61:7d:46:72:f6:4f:27:5a:62:9b:1e:93:
                    65:fb:76:54:b3:ae:1f:ee:5e:42:32:d3:6f:22:ad:
                    47:4e:71:b5:8c:6c:88:fb:1f:ca:ea:20:2a:a7:42:
                    4a:2f:a7:17:24:52:08:a2:ac:8d:80:4f:f8:bf:7e:
                    d6:48:6f:90:4e:b3:9f:d5:44:e8:97:fe:44:e6:30:
                    d5:c4:d2:8e:62:27:83:04:ff:1b:31:77:cf:28:6a:
                    c7:05:f6:22:55:77:60:26:af:2c:d4:6c:98:0c:ab:
                    72:41:8b:c4:88:ae:71:9e:1b:b1:ad:3e:71:26:f4:
                    58:0d:b8:26:67:87:96:9e:6c:ce:57:d3:74:bc:fc:
                    db:87:c9:e6:11:cd:af:65:20:dd:2f:c4:55:3b:43:
                    ba:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:72:49:5D:93:3A:06:19:92:80:1D:68:42:B1:63:8A:30:A7:56:56
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95B1B3C6C14E11F0A6533E8FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.11.0-154.82.15.255
                  154.85.12.0/24
                  154.85.22.0/23
                  154.85.104.0-154.85.115.255

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:b5:cd:58:0a:fd:27:fe:ff:a0:b9:b2:d9:6f:0f:35:66:
         c2:2b:75:36:f2:b7:60:aa:18:10:7f:85:d1:61:0b:b1:a9:92:
         79:f0:14:4c:bf:dc:c0:02:61:16:aa:b5:40:72:91:a7:a1:a0:
         b5:03:fd:c2:7c:a6:ef:99:40:18:1a:b2:01:b2:82:d7:fc:98:
         56:a4:bb:4d:90:0f:17:6c:76:2e:15:3e:3a:4c:6d:b3:2a:08:
         7e:35:09:b2:21:9d:3e:a2:30:b1:ac:ca:3f:6c:3d:c8:0d:8a:
         58:ee:73:12:ea:e3:99:ac:61:df:39:bd:d8:14:9f:82:34:ed:
         fa:56:dd:04:81:ac:0f:a8:ed:d0:1c:3a:69:90:b6:a3:3b:b0:
         35:ad:ee:ce:0c:a4:b4:e8:7d:5e:ae:43:2f:8d:6a:8e:7a:f8:
         7a:de:58:f9:c0:a9:8f:20:0f:79:a6:c3:9d:06:02:71:5d:69:
         46:4d:3e:5c:96:e3:8f:7a:19:c6:ce:50:b1:0c:b8:59:03:0e:
         da:04:2f:5c:3b:55:43:56:8b:05:3f:d4:dd:e4:dd:fd:02:38:
         60:dc:6c:30:47:8a:84:1d:97:91:00:8e:2b:2d:a0:54:97:dd:
         04:65:b3:3b:04:0c:ee:82:d0:e2:22:81:c7:9c:94:eb:de:1f:
         d9:a0:d8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:01 2025 by rpki-client