This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF480124E0C911F0918627C8DAE4EC9C.roa
File:                     AF480124E0C911F0918627C8DAE4EC9C.roa (raw, json)
Hash identifier:          ZT9RInfZdGtQKgv++6fvQLeZhPeUpFLxfBkhusVqldM=
Subject key identifier:   92:03:1B:E7:75:24:E7:AE:82:DF:16:E3:58:57:B2:93:B9:73:26:CE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B0CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF480124E0C911F0918627C8DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 13:08:48 +0000
ROA not before:           Wed 24 Dec 2025 13:08:44 +0000
ROA not after:            Sat 31 Jan 2026 13:08:44 +0000
asID:                     62240
IP address blocks:        154.195.29.0/24 maxlen: 24
                          154.195.30.0/24 maxlen: 24
                          154.195.31.0/24 maxlen: 24
                          154.195.96.0/24 maxlen: 24
                          154.195.188.0/24 maxlen: 24
                          154.195.189.0/24 maxlen: 24
                          154.195.190.0/24 maxlen: 24
                          154.195.191.0/24 maxlen: 24
                          154.196.82.0/24 maxlen: 24
                          154.196.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110794 (0x1b0ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 24 13:08:44 2025 GMT
            Not After : Jan 31 13:08:44 2026 GMT
        Subject: CN=694be5e0-cd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:f3:a4:4d:0c:1b:57:d4:d9:ad:f9:5f:90:
                    5d:18:05:bf:24:16:d3:7a:b9:29:b3:22:9c:c6:3b:
                    26:04:be:f9:22:e2:2c:98:4f:ee:c2:d5:71:6d:0f:
                    b8:01:59:02:80:30:89:dc:3c:f6:b7:25:8b:da:9e:
                    85:b4:6d:83:c0:55:f1:4d:74:4b:d8:26:04:30:77:
                    84:b8:21:49:c8:6a:2f:87:27:05:b0:8c:aa:37:5b:
                    e4:c3:56:da:83:29:c4:64:3c:9c:7e:ab:d9:e8:03:
                    1d:cc:35:4d:2e:90:53:08:6b:52:8c:c5:50:28:67:
                    eb:bd:3a:75:31:8f:fd:6b:9b:dc:94:02:62:1d:1c:
                    49:c1:b7:c7:dd:cb:7d:7c:4e:86:f8:c5:3b:f8:14:
                    cf:6c:59:9c:e1:dd:83:c1:cf:63:79:46:71:8f:92:
                    58:fe:2e:c2:32:9f:12:93:20:ae:d1:07:72:d1:38:
                    af:3f:7b:82:17:35:db:51:03:5f:d7:ee:e8:05:d4:
                    dc:a8:c9:2e:d0:6c:26:08:5b:a7:81:56:21:9b:4c:
                    a2:9e:dd:c3:4a:cc:82:a1:18:ef:a8:16:28:4d:9c:
                    33:8b:29:6b:c1:d9:40:34:e5:c8:bc:2f:59:cd:b4:
                    09:40:c7:48:b3:00:36:3c:ca:13:ee:ff:88:bd:99:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:03:1B:E7:75:24:E7:AE:82:DF:16:E3:58:57:B2:93:B9:73:26:CE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF480124E0C911F0918627C8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.29.0-154.195.31.255
                  154.195.96.0/24
                  154.195.188.0/22
                  154.196.82.0/24
                  154.196.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a1:02:ec:ed:50:3d:c2:9d:d4:5c:80:cc:c0:0e:04:62:be:
         10:12:de:99:33:0e:c7:88:27:44:67:c1:e9:ce:70:b9:b7:9d:
         64:01:bc:29:1f:75:15:5a:ed:20:43:fa:fb:40:c5:4a:ec:66:
         50:b4:8a:aa:c1:c2:eb:66:b0:04:d1:1c:3d:45:29:22:b4:b9:
         78:b5:9f:10:a5:43:78:d4:47:90:e1:bf:9e:d7:82:eb:9e:56:
         bb:b0:12:96:ca:21:54:23:92:99:f2:19:f6:2c:4b:ae:bb:bc:
         cb:be:50:e7:6d:a5:1e:31:c3:b9:04:19:b2:10:23:14:97:6f:
         a7:1f:6b:49:69:57:60:74:c7:61:b1:2e:25:51:35:2d:8f:eb:
         e1:64:86:47:b0:ef:4e:19:97:4d:76:fa:29:08:3a:ab:11:58:
         43:05:24:95:96:0c:36:5a:1c:4c:89:8c:0e:1a:73:bd:79:5b:
         2c:59:b7:11:4a:9b:f4:b3:a7:d3:72:92:a8:85:58:74:3a:51:
         8a:1b:fa:60:8e:1f:a1:ad:7d:28:26:06:37:90:eb:b5:1d:51:
         98:25:86:d5:57:41:fe:66:9c:c4:6a:c0:7d:5b:72:85:71:65:
         74:3b:89:84:8a:2d:49:49:fb:74:82:45:31:98:2a:e7:2c:88:
         ab:13:d8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:48:29 2025 by rpki-client