This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBA930B8E0CF11F0B5CD47ECDAE4EC9C.roa
File:                     BBA930B8E0CF11F0B5CD47ECDAE4EC9C.roa (raw, json)
Hash identifier:          gT5SWOcpP7LLSgauzGfXuvNn+xFnyWk3zEvQzwPHw8s=
Subject key identifier:   79:7A:85:C9:77:0A:2E:BF:4E:88:D4:47:FC:60:4B:8D:33:4E:BC:94
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B0D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBA930B8E0CF11F0B5CD47ECDAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 13:52:06 +0000
ROA not before:           Wed 24 Dec 2025 13:52:02 +0000
ROA not after:            Sat 31 Jan 2026 13:52:02 +0000
asID:                     62240
IP address blocks:        154.194.76.0/24 maxlen: 24
                          154.194.77.0/24 maxlen: 24
                          154.194.78.0/24 maxlen: 24
                          154.194.94.0/24 maxlen: 24
                          154.194.95.0/24 maxlen: 24
                          154.194.96.0/24 maxlen: 24
                          154.194.97.0/24 maxlen: 24
                          154.194.103.0/24 maxlen: 24
                          154.196.20.0/24 maxlen: 24
                          154.196.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110809 (0x1b0d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 24 13:52:02 2025 GMT
            Not After : Jan 31 13:52:02 2026 GMT
        Subject: CN=694bf006-389e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e7:1d:dd:40:13:77:dc:8e:d7:ab:1f:f8:77:
                    28:23:23:8e:7b:cf:5c:09:9e:43:f4:52:0f:64:a5:
                    9c:46:65:10:91:66:1b:88:d5:ee:49:cd:2d:4f:ed:
                    af:e6:d7:7b:2d:1f:ff:a1:03:71:8e:b6:da:bb:6b:
                    54:4b:b6:4c:c5:cc:ae:92:d6:b6:bc:28:61:d3:22:
                    b0:b7:5a:4b:6e:a3:64:7e:ba:12:0b:2c:1d:fe:8f:
                    20:21:a5:3d:72:0f:ab:14:62:0b:b6:ea:f7:d2:00:
                    8c:6e:a3:8a:cf:ac:15:76:1d:a5:ff:28:33:04:f8:
                    bb:98:b9:38:f0:44:ec:81:cb:b9:17:bf:c2:27:2d:
                    eb:7d:0d:84:ab:96:41:a4:bb:12:f3:0d:d8:df:73:
                    70:3c:06:8f:5f:a5:ad:e7:65:8d:d2:d2:89:3d:dd:
                    82:05:dd:4d:b7:97:a8:f7:a8:50:33:0e:68:17:e0:
                    06:13:ae:db:44:cb:fd:fc:32:1e:bc:e8:52:96:8c:
                    2d:9f:44:89:4b:2b:3b:4c:5a:09:96:ad:0a:e6:7c:
                    00:b7:55:a6:25:c3:b2:e9:9d:ac:ce:db:fc:02:52:
                    29:18:39:e1:ff:12:07:79:31:55:4a:d9:08:5c:9c:
                    a5:e9:8e:36:fe:7f:e0:a0:f3:57:95:7a:ec:9c:bc:
                    be:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7A:85:C9:77:0A:2E:BF:4E:88:D4:47:FC:60:4B:8D:33:4E:BC:94
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBA930B8E0CF11F0B5CD47ECDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.76.0-154.194.78.255
                  154.194.94.0-154.194.97.255
                  154.194.103.0/24
                  154.196.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:df:d2:82:d6:db:4f:76:6c:26:cf:a2:e5:c1:dc:8c:a2:4f:
         b4:11:48:f9:9c:4d:cb:89:a8:d5:bd:f3:50:92:9c:2f:6e:3a:
         ff:46:11:f7:72:47:9d:f8:08:c1:93:4a:10:f7:53:73:f7:e5:
         e0:b2:40:fa:5f:ba:1e:aa:cf:b8:c3:9a:0c:0b:8d:78:c4:3c:
         61:87:e5:0b:59:25:bd:9b:98:7a:61:f6:3e:31:ae:90:c2:9f:
         4b:7d:ef:aa:33:0c:18:02:2e:c1:91:73:21:47:1a:c2:fa:b1:
         72:cc:a4:7e:a8:45:08:81:9f:70:f9:0c:58:16:0c:54:1f:55:
         c6:16:69:2e:ed:45:77:13:e0:8a:41:2a:3d:3d:2e:ac:b3:7c:
         cc:6c:6c:d3:5a:73:0f:b6:2b:f9:0d:e6:e1:30:91:93:03:bf:
         c0:13:64:ad:e1:7e:97:53:ee:91:3e:b3:14:0b:1d:68:7c:01:
         79:a4:2d:fb:08:92:ed:50:7d:7f:f0:59:14:67:6e:e1:f2:b2:
         0c:9b:1a:b0:09:19:35:9e:ee:4e:50:57:c8:82:94:83:5e:db:
         86:8e:82:c0:bf:8f:47:12:7a:b3:3b:a0:91:e1:7e:25:bd:a9:
         b0:06:43:9f:7a:f4:90:dd:03:1c:e7:d9:22:8b:ea:32:79:16:
         34:4f:a1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:46:13 2025 by rpki-client