This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB920E1AC93C11F09EFB9482DAE4EC9C.roa
File:                     BB920E1AC93C11F09EFB9482DAE4EC9C.roa (raw, json)
Hash identifier:          GPCabzH6hT2LNUhYr6tYKx4l2FkKPETwuMZoaxDKwbE=
Subject key identifier:   96:7C:CD:62:40:0E:E8:ED:E2:74:92:CA:0D:A5:26:2F:40:26:E1:47
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AA71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB920E1AC93C11F09EFB9482DAE4EC9C.roa
Signing time:             Mon 24 Nov 2025 13:51:53 +0000
ROA not before:           Mon 24 Nov 2025 13:51:45 +0000
ROA not after:            Thu 01 Jan 2026 13:51:45 +0000
asID:                     214413
IP address blocks:        154.193.136.0/21 maxlen: 24
                          154.193.144.0/22 maxlen: 24
                          154.193.148.0/22 maxlen: 24
                          154.193.168.0/22 maxlen: 24
                          154.193.172.0/22 maxlen: 24
                          154.193.176.0/22 maxlen: 24
                          154.193.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109169 (0x1aa71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 24 13:51:45 2025 GMT
            Not After : Jan  1 13:51:45 2026 GMT
        Subject: CN=692462f9-1f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:8b:aa:54:94:9a:f1:f4:16:4a:c1:f3:cd:
                    11:03:51:36:1e:d6:14:b8:4a:46:51:aa:81:9b:b4:
                    71:f0:1a:6b:3b:6a:7a:0f:bb:56:68:20:fb:bb:75:
                    87:8e:1b:fd:c8:44:3d:9f:45:8f:1b:14:c5:97:af:
                    08:f6:44:76:e9:f7:c6:08:1c:55:46:da:f9:ea:2b:
                    6b:a0:e1:45:6a:25:bd:fd:56:4e:91:b0:f0:50:92:
                    3f:14:ad:65:7f:3e:bf:d0:6e:1d:7f:46:df:a9:d2:
                    c9:92:06:78:7d:7f:2d:ed:a7:c2:ee:f0:1f:0c:b4:
                    5e:4a:d9:aa:e0:40:f0:5f:3e:36:49:f6:41:4d:da:
                    e1:c0:10:dc:c7:9b:48:58:f1:8e:fb:06:cc:95:e1:
                    1e:62:83:71:9e:63:44:20:3c:eb:f0:0c:ed:95:be:
                    8a:b8:cb:a2:2f:05:7a:dc:1e:5c:7d:d3:18:e1:df:
                    6b:9a:23:e3:ae:fa:a5:78:c9:77:2b:08:b4:51:92:
                    92:1e:7d:b1:33:1e:c6:70:82:5f:db:56:eb:8d:40:
                    5e:41:13:03:74:ec:0d:cc:19:48:86:ba:8b:70:b8:
                    38:77:17:1e:49:fa:e7:21:32:9e:84:82:87:47:23:
                    95:80:e7:38:98:ce:d0:18:10:a1:77:86:e5:34:d5:
                    21:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7C:CD:62:40:0E:E8:ED:E2:74:92:CA:0D:A5:26:2F:40:26:E1:47
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB920E1AC93C11F09EFB9482DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.136.0-154.193.151.255
                  154.193.168.0-154.193.183.255

    Signature Algorithm: sha256WithRSAEncryption
         2a:43:4b:8a:73:e5:a7:a1:7b:75:82:ba:1c:42:bd:ff:e8:0e:
         ec:af:aa:5c:4f:e6:33:89:e5:44:34:af:7d:4e:5e:b7:a2:62:
         17:aa:24:6f:d1:43:8b:62:4b:49:da:19:36:2f:69:54:6c:a4:
         07:ac:55:b4:ff:81:da:ca:1e:80:00:32:f0:d4:9c:a5:f1:6f:
         59:94:96:80:24:a1:10:f5:82:72:84:88:a5:64:3d:b6:69:37:
         c5:ba:03:98:53:ea:ee:4b:ae:be:21:20:e6:3d:ed:b4:d3:57:
         93:5a:e9:31:fb:4d:cc:fc:7a:21:26:d3:3c:ed:6e:1e:de:10:
         c4:b5:52:90:47:3f:0c:90:30:94:8e:cb:44:30:c8:b1:5f:06:
         19:a3:89:06:d0:51:41:01:cb:bb:4b:d5:57:50:fd:d2:e4:2c:
         2f:e0:00:87:6a:d9:bf:38:c8:18:8c:85:3a:26:49:ee:d2:ea:
         e7:7a:b9:32:66:47:1d:1c:47:da:26:bf:3e:3e:ef:5c:8f:5f:
         87:9e:cb:8c:c0:55:04:4a:22:1c:6d:1e:7c:b8:6f:e9:18:27:
         f8:00:10:8f:68:48:74:0e:ca:66:39:22:3d:15:08:30:4c:07:
         17:df:87:17:e9:e2:ac:e1:e9:28:fc:80:4b:74:06:a3:67:18:
         a5:bd:2a:2c
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAapxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTI0MTM1MTQ1WhcNMjYwMTAxMTM1MTQ1WjAYMRYw
FAYDVQQDEw02OTI0NjJmOS0xZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzviLqlSUmvH0FkrB880RA1E2HtYUuEpGUaqBm7Rx8BprO2p6D7tWaCD7
u3WHjhv9yEQ9n0WPGxTFl68I9kR26ffGCBxVRtr56itroOFFaiW9/VZOkbDwUJI/
FK1lfz6/0G4df0bfqdLJkgZ4fX8t7afC7vAfDLReStmq4EDwXz42SfZBTdrhwBDc
x5tIWPGO+wbMleEeYoNxnmNEIDzr8Aztlb6KuMuiLwV63B5cfdMY4d9rmiPjrvql
eMl3Kwi0UZKSHn2xMx7GcIJf21brjUBeQRMDdOwNzBlIhrqLcLg4dxceSfrnITKe
hIKHRyOVgOc4mM7QGBChd4blNNUh0wIDAQABo4ICuzCCArcwHQYDVR0OBBYEFJZ8
zWJADujt4nSSyg2lJi9AJuFHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQjkyMEUxQUM5M0MxMUYwOUVGQjk0ODJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAOawYgDBAOawZAwDAME
A5rBqAMEA5rBsDANBgkqhkiG9w0BAQsFAAOCAQEAKkNLinPlp6F7dYK6HEK9/+gO
7K+qXE/mM4nlRDSvfU5et6JiF6okb9FDi2JLSdoZNi9pVGykB6xVtP+B2soegAAy
8NScpfFvWZSWgCShEPWCcoSIpWQ9tmk3xboDmFPq7kuuviEg5j3ttNNXk1rpMftN
zPx6ISbTPO1uHt4QxLVSkEc/DJAwlI7LRDDIsV8GGaOJBtBRQQHLu0vVV1D90uQs
L+AAh2rZvzjIGIyFOiZJ7tLq53q5MmZHHRxH2ia/Pj7vXI9fh57LjMBVBEoiHG0e
fLhv6Rgn+AAQj2hIdA7KZjkiPRUIMEwHF9+HF+nirOHpKPyAS3QGo2cYpb0qLA==
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:12 2025 by rpki-client