This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21D8760CD02A11F085A99F89DAE4EC9C.roa
File:                     21D8760CD02A11F085A99F89DAE4EC9C.roa (raw, json)
Hash identifier:          tVMZlI7tZWSbhIaeWzElchdOZwC+3QSJ9MLo3vKgrkA=
Subject key identifier:   E8:37:ED:3E:82:85:DE:30:1B:33:F2:E6:15:15:B8:AE:A6:1F:42:79
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AC27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21D8760CD02A11F085A99F89DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 09:26:23 +0000
ROA not before:           Wed 03 Dec 2025 09:26:18 +0000
ROA not after:            Sat 07 Mar 2026 09:26:18 +0000
asID:                     18229
IP address blocks:        154.210.145.0/24 maxlen: 24
                          154.210.146.0/24 maxlen: 24
                          154.210.147.0/24 maxlen: 24
                          154.210.148.0/24 maxlen: 24
                          154.210.149.0/24 maxlen: 24
                          154.210.150.0/24 maxlen: 24
                          154.210.151.0/24 maxlen: 24
                          154.210.152.0/24 maxlen: 24
                          154.210.153.0/24 maxlen: 24
                          154.210.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109607 (0x1ac27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  3 09:26:18 2025 GMT
            Not After : Mar  7 09:26:18 2026 GMT
        Subject: CN=6930023f-4669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:d7:54:b8:8f:53:44:5d:51:1f:32:0c:75:
                    71:80:43:05:8e:f0:80:ca:3e:2f:7f:ee:f9:90:2c:
                    9e:93:a7:a3:1c:9d:aa:c8:fd:7b:0f:e2:4d:35:5e:
                    73:60:9f:c5:39:04:a4:0a:f4:cb:79:1d:45:b7:0c:
                    d3:fc:ee:c7:50:68:34:f3:a3:52:f7:dc:ad:22:81:
                    1b:22:4d:b8:27:01:7d:87:93:c8:86:be:e5:68:bc:
                    62:27:92:dd:ed:00:0a:18:44:7d:53:bd:56:67:0f:
                    b0:bf:26:a4:b6:ce:fc:78:22:43:15:78:43:47:66:
                    cc:64:2f:db:72:ea:a7:62:e9:40:f4:6e:0d:92:95:
                    c6:ba:f3:18:3e:f8:d7:29:f8:f1:5f:5a:a4:27:02:
                    fc:81:8e:1f:52:96:c7:6f:1c:f6:0d:fe:71:72:5e:
                    73:21:50:6d:ca:bc:fc:1f:44:17:c0:91:f6:e1:71:
                    61:09:32:7e:f0:9b:85:c2:79:df:da:e9:ba:d7:df:
                    3d:fb:da:2d:f8:d6:7f:b1:6b:67:df:46:62:cf:19:
                    ef:c4:12:33:1a:25:3a:7e:84:34:40:90:ee:75:79:
                    e7:67:a1:8d:ee:f0:ad:cb:ac:44:18:51:18:c7:c9:
                    84:b5:bc:2a:67:b3:71:88:9c:c7:5b:75:94:0f:f7:
                    2e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:37:ED:3E:82:85:DE:30:1B:33:F2:E6:15:15:B8:AE:A6:1F:42:79
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21D8760CD02A11F085A99F89DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.145.0-154.210.154.255

    Signature Algorithm: sha256WithRSAEncryption
         37:26:ce:07:f9:24:12:ce:54:db:b3:2b:1e:34:ac:23:b3:16:
         af:d3:8e:6c:5c:c5:7d:ff:8d:c3:b2:b3:09:17:18:7f:67:92:
         64:64:fd:15:a9:55:c6:67:24:e1:74:0b:be:21:55:91:92:36:
         26:5a:28:01:49:0c:b0:82:12:ac:f2:47:3e:c2:a7:1f:8f:ba:
         f4:d1:64:4e:08:5a:fe:84:be:0e:27:08:66:71:e7:dd:4d:fa:
         50:6d:80:85:c5:b3:6d:ed:42:fa:ab:3c:aa:74:75:d6:9a:24:
         e8:1d:08:93:6b:37:67:30:01:54:8b:98:9a:33:7b:69:3d:15:
         ec:ca:b9:f9:49:ae:1a:8a:2a:eb:0c:a2:d3:68:34:4d:8c:2b:
         4a:84:e4:14:84:42:ed:63:6d:24:e2:55:02:ff:f0:f3:15:2c:
         2a:6a:99:e2:1c:a1:15:fd:05:a8:0b:36:ea:ac:2b:a7:2f:11:
         f8:b7:c3:80:a9:21:a6:d8:af:8c:32:c7:3a:48:2a:d2:9e:4d:
         af:45:ff:58:3f:74:8a:8d:c8:7e:04:ce:a8:00:9e:f9:1a:7a:
         f4:e9:91:60:64:34:fe:11:dc:fb:5a:aa:f8:a3:2f:7c:68:a6:
         27:d7:a4:7f:35:bf:49:2d:15:6e:b6:bb:a8:bb:d7:58:53:57:
         33:d8:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:10:52 2025 by rpki-client