This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD904368CFC611F0A19DF58BDAE4EC9C.roa
File:                     BD904368CFC611F0A19DF58BDAE4EC9C.roa (raw, json)
Hash identifier:          npyqHOg1GBFXpR7OixGQ7SvbGaKCAp/6E+2/8py4Kqc=
Subject key identifier:   0E:9B:53:D4:8D:52:E4:4D:85:B3:4C:EF:2C:CE:5A:EE:7D:8E:96:88
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ABD3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD904368CFC611F0A19DF58BDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 21:34:54 +0000
ROA not before:           Tue 02 Dec 2025 21:34:48 +0000
ROA not after:            Fri 03 Nov 2028 21:34:48 +0000
asID:                     17561
IP address blocks:        154.212.32.0/24 maxlen: 24
                          154.214.45.0/24 maxlen: 24
                          154.214.46.0/24 maxlen: 24
                          154.214.47.0/24 maxlen: 24
                          154.214.48.0/24 maxlen: 24
                          154.214.49.0/24 maxlen: 24
                          154.214.50.0/24 maxlen: 24
                          154.214.51.0/24 maxlen: 24
                          154.214.52.0/24 maxlen: 24
                          154.214.53.0/24 maxlen: 24
                          154.214.54.0/24 maxlen: 24
                          154.214.55.0/24 maxlen: 24
                          154.214.56.0/24 maxlen: 24
                          154.214.57.0/24 maxlen: 24
                          154.214.58.0/24 maxlen: 24
                          154.214.59.0/24 maxlen: 24
                          154.214.60.0/24 maxlen: 24
                          154.214.61.0/24 maxlen: 24
                          154.214.62.0/24 maxlen: 24
                          154.214.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109523 (0x1abd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  2 21:34:48 2025 GMT
            Not After : Nov  3 21:34:48 2028 GMT
        Subject: CN=692f5b7e-527c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:00:ba:68:7f:fd:6b:0e:79:e6:4f:f1:77:
                    35:67:f5:9d:a4:d1:92:26:67:8f:54:f7:67:ef:94:
                    bf:84:34:ad:ea:36:05:df:a7:7a:ad:ee:21:80:d1:
                    93:0e:21:14:1f:73:7d:e8:6c:ef:5a:03:77:71:df:
                    95:3f:c0:6d:ae:d5:8f:f6:4f:56:47:1c:97:98:0c:
                    0a:53:88:b2:a7:13:2e:ad:64:90:16:3b:9b:8b:19:
                    ae:4a:72:56:ec:7b:17:54:2a:fc:5a:05:98:9f:43:
                    b4:01:71:08:62:5d:c2:05:02:c8:1d:5f:e7:f4:c5:
                    eb:f0:06:73:bd:66:36:98:8b:6d:ab:07:0b:0c:f2:
                    39:b1:4e:a3:94:6b:f0:fa:45:58:d4:88:d4:4b:3f:
                    57:3e:63:c2:ec:01:18:27:39:0c:08:5a:4a:64:36:
                    d6:3e:4f:37:b0:49:f8:db:98:aa:0c:5b:c5:f3:c2:
                    37:f1:18:a8:42:5a:d6:ce:2f:a6:fa:3c:2b:91:35:
                    ee:a7:d1:be:98:0c:a3:af:73:24:fe:c1:79:71:0c:
                    fe:f3:b2:aa:f7:46:38:8f:9d:99:b2:c6:93:4e:1e:
                    5a:23:af:a7:cc:d7:4b:72:42:37:45:18:08:32:97:
                    c5:f9:7b:db:66:2b:f7:cd:3b:be:b1:b8:36:34:be:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9B:53:D4:8D:52:E4:4D:85:B3:4C:EF:2C:CE:5A:EE:7D:8E:96:88
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD904368CFC611F0A19DF58BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.32.0/24
                  154.214.45.0-154.214.63.255

    Signature Algorithm: sha256WithRSAEncryption
         3e:90:7f:79:91:01:bd:9a:69:19:f8:51:79:a7:ab:5d:7a:c0:
         d4:24:a6:35:96:bb:72:10:6f:b0:43:3e:03:ac:4d:f9:91:26:
         8b:e0:5a:a0:8d:e6:7c:ad:58:8b:40:4d:32:14:bd:00:75:6d:
         5f:27:8e:2a:1f:1e:66:45:13:ce:98:27:a6:8a:d7:63:ce:7a:
         31:10:18:0c:65:05:a1:ec:41:2a:99:9f:d3:9d:7d:36:65:1f:
         d6:b1:0f:7c:ef:af:8b:fd:e9:80:71:97:dd:0b:31:b6:1d:39:
         a8:3c:5c:78:0e:68:82:77:e1:b1:5f:da:f0:c8:20:d7:96:07:
         c5:33:ec:0f:a9:c2:07:90:4f:74:c4:0d:e0:09:d5:fc:2a:0e:
         bd:fe:8c:85:a8:ab:02:45:bd:4e:c6:72:c9:90:8a:3b:b4:7e:
         aa:2a:7e:ad:e1:90:90:ee:e3:2c:69:f0:a9:78:16:e7:76:7a:
         81:9b:d7:41:f2:a3:8c:81:d1:14:10:a7:08:73:6d:a4:43:e7:
         8c:01:0e:d4:b9:fd:a4:44:9d:4b:cb:3c:53:32:ef:e5:c7:05:
         9b:ec:bf:a0:cf:c7:87:3e:30:9b:7a:6c:36:29:f8:65:9c:d4:
         93:af:35:32:fb:13:6f:14:ae:bf:3d:11:2d:1f:5e:1e:cf:d3:
         a4:49:6e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:00 2025 by rpki-client