This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D94EAF40D04811F09D61EAC4DAE4EC9C.roa
File:                     D94EAF40D04811F09D61EAC4DAE4EC9C.roa (raw, json)
Hash identifier:          6eaK+3U067DD0vTf98CbIpJFUGjNFVDgluecqncTABc=
Subject key identifier:   56:6D:3E:25:4E:A1:C9:62:4F:98:E4:9A:3A:22:96:93:BF:CE:8D:95
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AC62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D94EAF40D04811F09D61EAC4DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 13:06:15 +0000
ROA not before:           Wed 03 Dec 2025 13:06:09 +0000
ROA not after:            Mon 05 Jan 2026 13:06:09 +0000
asID:                     202656
IP address blocks:        154.219.246.0/24 maxlen: 24
                          154.219.247.0/24 maxlen: 24
                          154.219.250.0/24 maxlen: 24
                          154.219.251.0/24 maxlen: 24
                          154.219.252.0/24 maxlen: 24
                          154.219.253.0/24 maxlen: 24
                          154.219.254.0/24 maxlen: 24
                          154.219.255.0/24 maxlen: 24
                          154.221.60.0/24 maxlen: 24
                          154.222.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 11:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109666 (0x1ac62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  3 13:06:09 2025 GMT
            Not After : Jan  5 13:06:09 2026 GMT
        Subject: CN=693035c7-a792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e9:15:ae:a8:2a:93:36:3f:0e:63:7f:62:16:
                    1e:f2:05:13:b1:9b:ac:47:eb:d8:68:5f:d1:0f:8b:
                    a5:2a:e7:b2:db:3f:3e:33:d9:eb:8e:04:20:87:05:
                    d6:8c:7f:66:0b:4b:68:cf:e8:0d:f5:db:a1:5a:3a:
                    a4:98:54:dc:8c:8e:a2:ae:81:9c:cf:6a:7f:81:53:
                    6c:cd:7f:53:1d:77:c8:70:e2:c0:9b:77:e1:e5:97:
                    79:c5:76:0f:98:08:fb:61:6b:7e:c6:3e:2b:72:d5:
                    e2:a0:c2:12:4d:59:fc:3c:f9:bb:70:74:d9:6a:b4:
                    5f:ce:b4:0b:2c:f3:ec:2c:30:2a:99:a6:5f:32:90:
                    16:16:94:0e:3c:44:ea:0d:ed:73:90:3d:4c:f0:b4:
                    4c:ca:18:0a:b4:d9:76:6a:29:3b:2e:46:49:d6:3d:
                    9c:fc:59:f2:76:2a:10:8f:f1:18:60:7b:15:6c:25:
                    4b:10:38:af:2a:cf:78:b8:26:4d:ca:c9:8d:f4:ad:
                    42:20:1d:de:53:1d:b7:be:34:c9:4a:df:99:f8:a4:
                    dd:ff:e7:31:ef:43:96:14:5b:1b:07:78:eb:e6:03:
                    35:db:d4:af:bc:db:36:bf:d9:b4:62:c9:2c:2f:f2:
                    6d:b9:1f:4b:e5:9e:b9:06:b8:7a:bc:7d:b7:e3:c1:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6D:3E:25:4E:A1:C9:62:4F:98:E4:9A:3A:22:96:93:BF:CE:8D:95
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D94EAF40D04811F09D61EAC4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.246.0/23
                  154.219.250.0-154.219.255.255
                  154.221.60.0/24
                  154.222.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:34:d3:eb:5a:d7:1b:52:a2:91:af:5a:8d:92:6d:c0:41:52:
         c8:d9:f7:d9:34:97:d9:74:c5:91:fb:f7:e4:0b:e2:df:bd:24:
         69:c7:7b:eb:a6:c6:f2:a4:e3:84:e3:9a:ff:3d:a6:32:da:f8:
         38:3c:d7:17:88:52:be:89:15:f7:36:29:2d:2a:d0:32:6e:3d:
         2c:5b:f5:ce:31:1b:7f:8e:56:4f:9a:79:da:0e:e2:d7:76:ac:
         11:de:c1:0c:93:ae:bf:8b:28:7a:fe:b8:2b:86:d4:8b:c7:2c:
         e5:d0:44:6f:97:d9:6f:9b:b9:ca:d5:13:68:db:8e:e6:61:8c:
         6b:8a:78:65:25:c6:7f:b8:68:06:9e:50:fe:5c:e0:40:71:fb:
         5e:08:1b:dd:5e:27:e3:b6:b1:ff:73:5b:5c:d4:2e:93:04:47:
         5f:52:70:94:b8:a5:1a:4b:e2:4e:dd:bb:22:8a:a3:0e:9d:52:
         b0:c6:59:5f:ee:47:fc:64:10:16:92:b2:c8:cc:f0:a6:50:ce:
         c8:9e:d6:e1:c6:32:b6:bb:4a:fe:93:cd:35:1a:2e:f3:e7:7d:
         58:0c:d9:4e:a3:37:9c:b4:4a:22:b3:ce:c9:0a:fc:5b:32:84:
         f1:aa:af:50:55:83:38:97:e2:91:3c:23:75:27:f1:25:6f:7a:
         bc:2c:98:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 15:37:46 2025 by rpki-client