This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F022918CD04D11F08F7F2EE4DAE4EC9C.roa
File:                     F022918CD04D11F08F7F2EE4DAE4EC9C.roa (raw, json)
Hash identifier:          hpVg1F1fUbpnmcHowtopZ0z5GJeAp9FmhcTdmUcbk3M=
Subject key identifier:   8E:1C:7B:E9:52:BB:5D:28:F1:EB:F1:71:34:DC:19:54:71:BD:8D:23
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AC6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F022918CD04D11F08F7F2EE4DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 13:42:41 +0000
ROA not before:           Wed 03 Dec 2025 13:42:33 +0000
ROA not after:            Mon 05 Jan 2026 13:42:33 +0000
asID:                     202656
IP address blocks:        154.219.214.0/24 maxlen: 24
                          154.219.215.0/24 maxlen: 24
                          154.219.216.0/24 maxlen: 24
                          154.220.1.0/24 maxlen: 24
                          154.221.1.0/24 maxlen: 24
                          154.221.53.0/24 maxlen: 24
                          154.221.54.0/24 maxlen: 24
                          154.221.55.0/24 maxlen: 24
                          154.221.62.0/24 maxlen: 24
                          154.221.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 11:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109678 (0x1ac6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  3 13:42:33 2025 GMT
            Not After : Jan  5 13:42:33 2026 GMT
        Subject: CN=69303e51-8ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:b7:8c:96:33:79:13:e8:e5:19:a1:e7:5e:
                    ab:00:11:66:f1:87:59:fd:d3:09:1b:22:e8:c7:44:
                    d4:0f:ee:1d:a4:76:5d:f4:92:df:7d:df:b4:ae:8d:
                    e0:3d:62:fc:91:da:89:8a:e2:b5:68:99:40:63:40:
                    df:ba:b3:1f:be:af:3e:85:0c:ec:82:aa:e0:ee:1a:
                    b6:51:28:ee:80:6a:0e:90:96:b3:01:22:6e:cf:fe:
                    c1:f8:e7:ee:77:41:55:f4:c1:15:d0:49:51:ab:a9:
                    9a:20:71:cc:35:2d:68:78:bb:e7:e7:b0:40:a8:46:
                    86:1e:c4:6b:f0:c9:e7:9b:bb:44:29:f4:36:1f:0f:
                    0e:d6:1a:cb:26:53:14:a1:e5:6c:73:ce:ff:92:1d:
                    cc:65:77:7c:58:31:53:04:20:3d:84:99:28:4c:02:
                    fe:6f:40:98:2c:ae:61:c7:10:d3:8e:35:6e:06:e5:
                    e6:74:57:cf:a2:74:11:42:cd:d5:ac:b3:9f:89:27:
                    cb:e8:65:c8:48:d4:bf:a1:07:2b:db:74:ce:78:b9:
                    c7:48:49:f6:42:2f:10:02:93:0f:a9:9d:a5:d6:04:
                    93:14:bf:36:02:f7:d0:ce:e2:50:81:e1:f8:96:bb:
                    a3:dd:48:72:66:63:eb:a7:69:5f:f8:26:46:e9:63:
                    00:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1C:7B:E9:52:BB:5D:28:F1:EB:F1:71:34:DC:19:54:71:BD:8D:23
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F022918CD04D11F08F7F2EE4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.214.0-154.219.216.255
                  154.220.1.0/24
                  154.221.1.0/24
                  154.221.53.0-154.221.55.255
                  154.221.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:03:49:a4:87:ca:7d:36:07:9c:a4:fb:33:b0:4a:96:3b:dd:
         34:3e:a5:6b:ef:71:fe:a1:e4:04:2b:41:a7:6a:a0:96:ff:43:
         ac:22:ab:85:01:d7:69:a5:59:c3:d6:07:08:1b:a8:b6:28:71:
         2e:39:64:46:bc:3f:83:e7:71:6b:1c:2f:d7:c8:5d:f4:5a:9b:
         52:e5:9c:f1:96:4b:2a:3e:29:8d:d1:85:1b:eb:b4:10:cb:af:
         a8:8f:33:71:47:66:73:b1:ab:a6:63:d5:5a:e7:c7:42:f5:ad:
         61:37:b6:7f:fc:0d:a0:51:e2:02:19:58:d2:c8:76:67:ac:9c:
         2b:d0:03:12:57:b3:df:15:47:2f:0f:2e:bd:79:b1:af:77:b2:
         f6:cb:00:59:81:97:d0:bd:68:0a:cd:d3:dc:0f:ad:bd:c1:65:
         ce:44:b7:71:f4:2a:f2:52:1f:cf:51:c3:b0:40:fb:f6:82:55:
         3f:fc:1a:22:07:2d:9f:d3:59:f1:c4:b1:2a:d3:7f:d3:6e:2c:
         66:94:73:6a:bf:83:08:f9:98:b8:61:ce:8e:0b:76:12:a0:73:
         4c:a0:4f:bc:da:75:b9:ed:1a:b0:2d:98:02:30:c1:d7:35:86:
         12:0e:00:40:54:f0:76:dc:81:13:4b:c2:26:ff:5d:01:2e:38:
         1a:78:b6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 15:37:51 2025 by rpki-client