This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB89885AE0D311F09D5C6A86DAE4EC9C.roa
File:                     AB89885AE0D311F09D5C6A86DAE4EC9C.roa (raw, json)
Hash identifier:          +hPJKbLSU/WpOMs0WuRKLqgu+TEc0FPkfgeWbss1vc8=
Subject key identifier:   9F:ED:63:40:2E:50:F6:29:25:F3:1B:63:F7:A3:51:22:77:FA:A0:F3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B0E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB89885AE0D311F09D5C6A86DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 14:20:17 +0000
ROA not before:           Wed 24 Dec 2025 14:20:11 +0000
ROA not after:            Sat 31 Jan 2026 14:20:11 +0000
asID:                     62240
IP address blocks:        154.194.99.0/24 maxlen: 24
                          154.194.100.0/24 maxlen: 24
                          154.194.101.0/24 maxlen: 24
                          154.194.102.0/24 maxlen: 24
                          154.194.104.0/24 maxlen: 24
                          154.194.105.0/24 maxlen: 24
                          154.194.106.0/24 maxlen: 24
                          154.194.107.0/24 maxlen: 24
                          154.194.108.0/24 maxlen: 24
                          154.196.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110817 (0x1b0e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 24 14:20:11 2025 GMT
            Not After : Jan 31 14:20:11 2026 GMT
        Subject: CN=694bf6a1-dd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:82:b4:61:fd:9a:07:1f:5e:0e:50:45:d1:73:
                    0a:b4:99:4c:c2:57:6f:05:7f:24:ab:91:7e:fd:3b:
                    bf:a4:37:35:e6:d4:3e:d2:4d:55:94:69:bc:41:28:
                    1f:a0:12:ff:8c:de:fb:85:56:bf:7c:16:07:dc:5a:
                    1c:d0:f0:bc:fc:b9:43:32:8c:c3:a0:74:b0:64:73:
                    ab:bf:96:16:c4:4f:5e:51:ff:0b:8f:03:87:8d:c5:
                    9b:42:5c:34:97:82:20:ff:aa:43:35:1d:05:0e:02:
                    fb:3f:b6:ea:55:2b:55:52:7b:84:1b:be:0b:1b:24:
                    bd:f6:b7:64:5c:1b:95:4d:ab:68:6e:3f:1a:22:9f:
                    04:0b:d5:fd:67:ec:2e:b3:32:6b:79:53:ae:85:dc:
                    0e:37:94:cd:57:02:17:5d:cd:b4:b9:1c:26:fe:8e:
                    e0:27:3d:31:0e:6c:8b:05:6d:12:ea:b5:a4:42:a7:
                    45:38:45:b3:f9:50:ae:be:58:ee:ed:ae:ca:70:b5:
                    12:94:02:67:8a:05:6d:b4:63:6b:d8:07:d5:9f:8f:
                    92:81:3f:00:74:71:a3:72:42:90:e4:8e:74:cc:d5:
                    ab:f1:8e:10:c9:9d:db:a7:8d:30:2d:40:90:ce:cf:
                    e9:86:d4:4b:95:8f:dd:2f:aa:bd:de:61:ba:4f:54:
                    2c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:ED:63:40:2E:50:F6:29:25:F3:1B:63:F7:A3:51:22:77:FA:A0:F3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB89885AE0D311F09D5C6A86DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.99.0-154.194.102.255
                  154.194.104.0-154.194.108.255
                  154.196.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:c6:ed:4a:d1:2c:73:46:4d:ee:6f:76:10:62:d7:a3:8d:c2:
         45:fb:77:e8:51:89:9d:52:8d:f2:a7:fc:89:08:4c:e1:a1:a9:
         2a:35:51:19:d5:8e:65:53:65:a5:bb:cc:27:91:5b:b4:89:37:
         36:cb:65:fb:d6:b6:78:3a:3c:1d:71:ad:c2:c1:e8:7a:0d:3a:
         cf:7b:47:ee:c3:4b:9c:62:0b:fb:7e:ea:95:9a:09:5e:d4:29:
         bd:53:d9:2c:b3:07:8e:11:39:0f:d9:5d:ac:e0:cf:2b:4e:20:
         a5:d9:54:2f:21:06:a7:ee:92:81:5d:1f:f2:9b:86:4b:41:1b:
         a0:bc:16:ac:05:a4:20:a6:12:a0:eb:09:63:4d:c1:2d:6c:ce:
         b1:e3:4d:d5:74:7f:cf:c7:3d:ff:9e:46:c5:b0:a0:e9:ce:bf:
         a6:44:2b:82:c7:bf:0b:b1:48:31:5d:a0:0f:28:64:c0:18:b7:
         0c:35:06:ec:37:67:78:3b:a4:79:fc:0d:91:2f:e1:94:c5:0b:
         29:d9:55:8b:ea:ee:c0:05:08:b2:45:a0:07:1d:0c:e1:09:0b:
         41:83:03:16:7a:28:de:49:7a:04:b8:82:39:75:7f:50:84:87:
         3a:db:22:19:75:c2:45:09:c4:49:e2:3a:16:c3:c5:98:fc:5f:
         84:c6:7f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:48:29 2025 by rpki-client