This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A648D4AD03D11F08E9E6D7CDAE4EC9C.roa
File:                     0A648D4AD03D11F08E9E6D7CDAE4EC9C.roa (raw, json)
Hash identifier:          7xoX3i/zZYHxI1Me0g8QYZAuVT6jnTf5+daIsW5gDcY=
Subject key identifier:   B7:34:F2:65:C7:3C:7C:A0:E1:7F:E5:27:71:93:BF:88:FA:AC:F1:AB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AC55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A648D4AD03D11F08E9E6D7CDAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 11:41:47 +0000
ROA not before:           Wed 03 Dec 2025 11:41:38 +0000
ROA not after:            Mon 27 Nov 2028 11:41:38 +0000
asID:                     17561
IP address blocks:        154.90.160.0/24 maxlen: 24
                          154.90.161.0/24 maxlen: 24
                          154.90.162.0/24 maxlen: 24
                          154.90.163.0/24 maxlen: 24
                          154.90.164.0/24 maxlen: 24
                          154.90.165.0/24 maxlen: 24
                          154.90.166.0/24 maxlen: 24
                          154.90.167.0/24 maxlen: 24
                          154.90.168.0/24 maxlen: 24
                          154.90.169.0/24 maxlen: 24
                          154.90.170.0/24 maxlen: 24
                          154.90.171.0/24 maxlen: 24
                          154.90.216.0/24 maxlen: 24
                          154.90.217.0/24 maxlen: 24
                          154.90.218.0/24 maxlen: 24
                          154.90.219.0/24 maxlen: 24
                          154.90.220.0/24 maxlen: 24
                          154.90.221.0/24 maxlen: 24
                          154.90.222.0/24 maxlen: 24
                          154.90.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109653 (0x1ac55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  3 11:41:38 2025 GMT
            Not After : Nov 27 11:41:38 2028 GMT
        Subject: CN=693021fb-a796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:00:aa:ce:45:b3:bb:dc:e6:98:2f:18:ed:
                    ba:30:8a:79:86:cb:7c:d1:55:43:c0:dc:13:8c:db:
                    f3:04:d0:67:61:51:b6:eb:b7:a7:0a:64:2a:fa:af:
                    11:65:42:d5:ce:5c:7e:dd:6b:b2:c1:bb:56:ad:66:
                    f5:ca:23:e1:c4:dd:eb:ac:24:b2:27:6b:72:5e:10:
                    82:c3:5e:63:f3:58:01:5e:ac:aa:be:15:d7:70:e6:
                    7b:85:f6:37:bc:90:b3:e6:c6:dd:86:39:b7:f4:7e:
                    6c:7b:bb:12:7e:87:09:25:0f:b7:a4:5b:03:12:fd:
                    61:4b:fa:6e:3f:fd:bc:2f:c0:33:a2:15:a4:02:6c:
                    5b:4e:db:3b:f8:01:c1:5a:8c:49:59:7a:b5:6c:a5:
                    43:dd:2c:8d:0c:fe:8f:2f:42:db:63:68:d0:7d:d1:
                    5f:c9:e7:49:79:fb:45:03:06:85:80:93:ac:d3:6e:
                    91:78:cb:1f:5f:2a:81:44:92:97:6e:fa:86:73:7e:
                    82:d3:3d:1a:5a:00:dc:6b:90:34:ba:f8:ee:bc:59:
                    10:4e:3f:3b:a1:25:f1:e9:e1:ae:b4:9d:de:3c:02:
                    ad:10:5f:e0:c0:db:b4:fa:ed:ca:37:3e:cb:ba:eb:
                    ba:d5:e3:1f:7e:a8:94:9c:e1:1d:15:d5:35:77:fb:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:34:F2:65:C7:3C:7C:A0:E1:7F:E5:27:71:93:BF:88:FA:AC:F1:AB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A648D4AD03D11F08E9E6D7CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.160.0-154.90.171.255
                  154.90.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:18:33:e7:e7:74:fb:bc:0c:13:34:4b:ca:c7:a1:b6:ba:f2:
         59:e1:c2:64:0b:cb:01:ce:4a:27:aa:a1:e0:74:c7:c8:7e:41:
         dc:26:cf:c4:e0:35:7b:4a:39:2b:0b:7b:7f:74:68:34:c6:5e:
         39:c2:65:35:88:9a:bf:b5:0b:35:b7:94:ee:04:f4:cb:06:10:
         58:53:2e:a5:0d:18:3e:1c:2d:ee:8e:46:7a:88:5a:33:19:71:
         7b:2e:27:21:6e:78:7e:e3:05:d6:4b:97:a2:52:19:c8:14:be:
         64:13:71:f2:83:fe:67:c5:76:1e:10:80:5a:10:df:6a:39:5d:
         f6:a0:af:fc:55:45:b9:13:5c:a8:ac:98:7f:3f:2f:a0:ba:bb:
         56:f3:03:4e:91:50:1a:99:4b:03:41:0d:d9:82:a6:46:76:92:
         1f:09:a8:ae:7a:80:4c:8e:6c:ba:54:2b:7a:39:a7:25:84:cf:
         1d:0a:a7:28:97:a7:17:a2:01:8a:3e:b6:79:7c:82:a1:bf:26:
         5f:0f:3a:b5:61:43:33:9a:4e:c2:55:cf:56:05:5c:07:77:7d:
         6a:60:4d:0f:71:db:99:10:82:cc:43:e0:9c:ca:3d:01:48:dc:
         6e:5c:85:10:be:6b:73:bd:4a:ee:db:75:bb:a9:94:a3:01:77:
         1d:1d:87:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:07:04 2025 by rpki-client