This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CD435F0CFC411F0B838077EDAE4EC9C.roa
File:                     9CD435F0CFC411F0B838077EDAE4EC9C.roa (raw, json)
Hash identifier:          YxmtZz++sIHkqUTZa01EniQNTKjqZltaTkK6akomVJ0=
Subject key identifier:   1C:8B:33:DE:C1:10:AB:A5:3D:B2:0B:32:C5:3F:ED:C7:6A:22:7C:2E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ABCF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CD435F0CFC411F0B838077EDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 21:19:40 +0000
ROA not before:           Tue 02 Dec 2025 21:19:33 +0000
ROA not after:            Thu 02 Nov 2028 21:19:33 +0000
asID:                     17561
IP address blocks:        154.216.165.0/24 maxlen: 24
                          154.216.166.0/24 maxlen: 24
                          154.216.167.0/24 maxlen: 24
                          154.216.168.0/24 maxlen: 24
                          154.216.169.0/24 maxlen: 24
                          154.216.170.0/24 maxlen: 24
                          154.216.171.0/24 maxlen: 24
                          154.216.172.0/24 maxlen: 24
                          154.216.173.0/24 maxlen: 24
                          154.216.174.0/24 maxlen: 24
                          154.216.175.0/24 maxlen: 24
                          154.216.176.0/24 maxlen: 24
                          154.216.177.0/24 maxlen: 24
                          154.216.178.0/24 maxlen: 24
                          154.216.179.0/24 maxlen: 24
                          154.216.180.0/24 maxlen: 24
                          154.216.181.0/24 maxlen: 24
                          154.216.182.0/24 maxlen: 24
                          154.216.183.0/24 maxlen: 24
                          154.216.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109519 (0x1abcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  2 21:19:33 2025 GMT
            Not After : Nov  2 21:19:33 2028 GMT
        Subject: CN=692f57ec-a6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:48:1e:97:18:24:45:d1:68:54:be:90:a3:
                    23:36:e5:90:0f:77:fa:e4:44:62:90:01:ef:18:ef:
                    a1:32:3b:85:30:e1:5e:94:fa:0a:01:32:28:90:3f:
                    4d:eb:8c:8d:97:de:6c:ed:78:78:00:70:45:9b:47:
                    2a:bc:4e:11:c8:71:67:22:94:5b:3e:fc:8b:3c:59:
                    d8:ce:bc:c7:c1:85:d8:88:08:1c:25:51:88:21:90:
                    b6:ed:2e:ee:52:06:42:42:94:44:56:01:70:42:c5:
                    eb:28:f6:7f:18:a8:8b:4b:c3:03:85:95:a1:7f:3a:
                    ca:ed:bd:fd:3a:f7:c3:11:e4:f1:43:99:cc:b9:7d:
                    ff:c6:b5:e1:f4:d1:2a:9a:b7:6a:0b:9d:7d:de:60:
                    55:c1:84:20:72:59:01:9a:3c:7a:95:fb:f4:99:ad:
                    d7:77:3a:67:b7:6f:56:08:f6:9a:06:6d:41:81:37:
                    df:3a:09:e3:0b:e9:9f:02:ee:be:b3:9a:ca:93:ff:
                    0b:1c:92:b7:7e:8e:bb:56:56:55:6f:f7:74:c4:f2:
                    c9:24:65:54:83:f2:21:e6:25:5e:c3:b4:fc:26:cb:
                    da:67:01:19:be:9f:9f:4d:2d:e7:19:d7:f1:91:4d:
                    c4:b1:53:c5:0f:2a:58:d1:1f:86:f9:55:fe:a3:7f:
                    ac:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8B:33:DE:C1:10:AB:A5:3D:B2:0B:32:C5:3F:ED:C7:6A:22:7C:2E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CD435F0CFC411F0B838077EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.216.165.0-154.216.184.255

    Signature Algorithm: sha256WithRSAEncryption
         92:f8:f9:f6:60:25:50:e2:68:b2:49:10:7e:7f:d2:43:ac:f1:
         0b:eb:c6:5a:3c:54:f7:98:d7:7d:63:51:01:23:cc:69:ac:d8:
         11:64:87:d7:e8:db:1a:4e:6d:81:f5:9d:95:16:93:d6:6b:32:
         e0:23:88:07:65:2f:4c:0d:28:74:17:2d:fc:fa:3f:25:87:a6:
         d0:1a:91:b9:90:b2:4c:70:fa:88:d1:b1:9d:f4:8a:08:a4:ca:
         5f:0d:18:39:b7:f4:95:38:49:cf:6c:75:2b:22:54:94:c1:05:
         f7:ac:4c:9f:df:0c:e9:ac:f4:45:11:2a:93:fd:b1:96:bf:1a:
         02:ba:69:93:73:91:8f:a6:fd:bc:3d:2c:8b:06:5d:e9:37:27:
         0c:e8:ca:75:37:4f:13:af:1d:ae:70:52:09:b4:7c:d3:9c:66:
         fa:dd:fe:68:3e:c7:78:f6:c4:17:5a:ed:6d:98:dd:17:8b:df:
         62:0e:3a:34:d1:fb:7a:89:68:de:9c:e8:4e:6d:f1:a8:fc:68:
         9d:d6:dc:53:52:b8:ff:b7:78:5f:c9:3c:7f:2d:53:a5:4a:50:
         cc:58:c1:14:21:87:10:2b:b7:cf:3e:c6:82:ea:47:2e:47:3f:
         05:41:dc:78:52:e2:01:a4:d4:4a:19:3d:f5:74:1b:5c:a0:3d:
         42:17:5b:61
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAavPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAyMjExOTMzWhcNMjgxMTAyMjExOTMzWjAYMRYw
FAYDVQQDEw02OTJmNTdlYy1hNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxUpIHpcYJEXRaFS+kKMjNuWQD3f65ERikAHvGO+hMjuFMOFelPoKATIo
kD9N64yNl95s7Xh4AHBFm0cqvE4RyHFnIpRbPvyLPFnYzrzHwYXYiAgcJVGIIZC2
7S7uUgZCQpREVgFwQsXrKPZ/GKiLS8MDhZWhfzrK7b39OvfDEeTxQ5nMuX3/xrXh
9NEqmrdqC5193mBVwYQgclkBmjx6lfv0ma3Xdzpnt29WCPaaBm1BgTffOgnjC+mf
Au6+s5rKk/8LHJK3fo67VlZVb/d0xPLJJGVUg/Ih5iVew7T8JsvaZwEZvp+fTS3n
GdfxkU3EsVPFDypY0R+G+VX+o3+sFwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFByL
M97BEKulPbILMsU/7cdqInwuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Q0Q0MzVGMENGQzQxMUYwQjgzODA3N0VEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACa2KUDBACa2LgwDQYJ
KoZIhvcNAQELBQADggEBAJL4+fZgJVDiaLJJEH5/0kOs8Qvrxlo8VPeY131jUQEj
zGms2BFkh9fo2xpObYH1nZUWk9ZrMuAjiAdlL0wNKHQXLfz6PyWHptAakbmQskxw
+ojRsZ30igikyl8NGDm39JU4Sc9sdSsiVJTBBfesTJ/fDOms9EURKpP9sZa/GgK6
aZNzkY+m/bw9LIsGXek3JwzoynU3TxOvHa5wUgm0fNOcZvrd/mg+x3j2xBda7W2Y
3ReL32IOOjTR+3qJaN6c6E5t8aj8aJ3W3FNSuP+3eF/JPH8tU6VKUMxYwRQhhxAr
t88+xoLqRy5HPwVB3HhS4gGk1EoZPfV0G1ygPUIXW2E=
-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:34 2025 by rpki-client