This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5E9C10CCB7C11F0B885A7B7DAE4EC9C.roa
File:                     E5E9C10CCB7C11F0B885A7B7DAE4EC9C.roa (raw, json)
Hash identifier:          EzVxTVBDd1qEIciMyQx+zj1Ui4hyFS9MBK2qoAeby2c=
Subject key identifier:   45:8D:F9:CA:38:37:15:B0:06:6B:B9:EB:67:2D:CE:FC:1C:62:C1:67
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AAD3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5E9C10CCB7C11F0B885A7B7DAE4EC9C.roa
Signing time:             Thu 27 Nov 2025 10:36:15 +0000
ROA not before:           Thu 27 Nov 2025 10:36:09 +0000
ROA not after:            Fri 06 Mar 2026 10:36:09 +0000
asID:                     135377
IP address blocks:        154.81.12.0/24 maxlen: 24
                          154.81.13.0/24 maxlen: 24
                          154.81.14.0/24 maxlen: 24
                          154.81.15.0/24 maxlen: 24
                          154.83.196.0/24 maxlen: 24
                          154.83.197.0/24 maxlen: 24
                          154.83.198.0/24 maxlen: 24
                          154.83.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109267 (0x1aad3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 27 10:36:09 2025 GMT
            Not After : Mar  6 10:36:09 2026 GMT
        Subject: CN=6928299e-4484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:89:bd:bb:8b:78:5e:75:99:a7:37:2c:26:
                    d4:01:90:0b:48:bb:00:39:85:ff:d4:72:54:a5:59:
                    8b:64:a0:2b:7b:00:c8:7d:22:3a:ec:03:d5:20:9b:
                    34:01:0b:2a:25:2d:3c:9e:eb:b8:a5:76:2c:b8:e4:
                    77:21:cf:77:61:d4:40:7d:3d:6b:e0:1b:ff:cf:76:
                    bd:29:dc:f1:92:f9:67:6c:da:38:4d:9d:99:c6:03:
                    b9:71:fa:c4:da:ae:e3:43:17:5e:1e:16:a9:71:63:
                    fd:26:79:08:ac:d2:ca:82:ca:f7:66:6f:c5:cf:82:
                    f2:4d:3e:ea:04:55:5f:0e:38:4e:b1:c2:fa:b1:2f:
                    1b:cb:38:57:e0:6c:ce:20:f0:c3:ce:3c:e1:5f:37:
                    5c:37:ab:88:f2:34:19:ce:ab:92:5a:9e:9c:cb:71:
                    86:40:95:41:ea:68:36:4f:22:97:8e:28:8a:d3:b3:
                    42:ce:90:9c:08:2c:12:9e:11:62:b8:77:35:fc:75:
                    e9:76:04:b5:45:6e:53:62:4c:e9:f5:2c:42:bb:a1:
                    98:37:54:0f:87:36:2c:62:59:d5:6c:0f:e7:0f:c2:
                    fb:3b:19:5d:b9:d4:2c:e0:71:a3:5a:ca:57:fb:83:
                    f6:20:02:8c:c0:67:6b:5e:82:b7:2f:2e:ac:ab:b6:
                    af:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8D:F9:CA:38:37:15:B0:06:6B:B9:EB:67:2D:CE:FC:1C:62:C1:67
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5E9C10CCB7C11F0B885A7B7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.12.0/22
                  154.83.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:4a:c9:87:94:67:b6:78:89:39:05:23:3e:e1:76:c5:40:fc:
         b8:87:d5:42:7e:18:42:18:c7:97:25:a5:8b:74:1f:65:d6:1b:
         af:d7:4b:3b:0d:7b:49:62:6e:33:bd:9b:4d:32:d3:09:21:a3:
         82:ae:a5:27:22:a6:23:3b:c7:3c:d4:70:66:35:10:cd:31:d3:
         c2:71:14:2f:9a:f6:3a:9a:d6:d4:64:38:31:37:51:7b:c7:d6:
         0f:db:00:18:26:61:6e:0b:10:fb:e7:8d:db:d5:e3:71:77:95:
         b7:7e:d8:e7:ef:a3:33:87:9c:6a:ac:4b:65:58:1f:90:0d:ac:
         e1:40:78:c5:c8:b0:d5:bc:3e:92:2f:c9:e4:75:d5:f1:0e:50:
         97:59:0f:47:4a:9e:b9:55:c2:21:24:fa:55:a9:0d:15:41:d5:
         54:08:60:70:01:a3:f3:49:f7:ba:84:4f:99:92:d2:e7:89:3e:
         fd:a7:b1:64:56:98:5f:60:87:b2:2e:e5:10:b0:f5:8d:f6:5b:
         a4:6a:5c:18:1b:5b:82:f4:9d:27:eb:cd:aa:d7:cb:0e:46:8d:
         9b:77:f9:5e:e0:17:18:3d:c5:17:ee:82:8b:73:4d:a1:aa:fb:
         49:7e:d3:c7:73:14:71:ba:7b:d7:a7:ce:1a:a4:7f:77:98:1e:
         56:a0:38:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:20 2025 by rpki-client