This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21EB5BF4D1C011F09B605D7DDAE4EC9C.roa
File:                     21EB5BF4D1C011F09B605D7DDAE4EC9C.roa (raw, json)
Hash identifier:          q4WyKOsVRc5JWv1I2wfI22Wl64XZ+VgjwVRQDyq43DI=
Subject key identifier:   07:00:60:11:FA:E9:44:90:38:7A:E2:06:27:D7:C0:B1:71:2C:11:E0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AD11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21EB5BF4D1C011F09B605D7DDAE4EC9C.roa
Signing time:             Fri 05 Dec 2025 09:52:39 +0000
ROA not before:           Fri 05 Dec 2025 09:52:34 +0000
ROA not after:            Wed 17 Dec 2025 09:52:34 +0000
asID:                     138915
IP address blocks:        154.95.72.0/22 maxlen: 24
                          154.95.96.0/22 maxlen: 24
                          154.95.100.0/22 maxlen: 24
                          154.95.104.0/22 maxlen: 24
                          154.95.108.0/22 maxlen: 24
                          154.95.112.0/22 maxlen: 24
                          154.95.116.0/22 maxlen: 24
                          154.95.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109841 (0x1ad11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  5 09:52:34 2025 GMT
            Not After : Dec 17 09:52:34 2025 GMT
        Subject: CN=6932ab66-96f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:9c:11:d6:02:b7:a9:27:ca:ea:59:f2:81:
                    19:76:d9:b1:9f:8a:d0:42:c8:ec:bd:92:7e:bd:00:
                    f4:0d:dc:20:2b:85:c7:5c:26:3c:8a:75:df:39:ac:
                    77:5a:5a:04:f2:aa:01:e0:5f:df:30:8a:1b:cd:c6:
                    ae:d2:97:cf:45:7c:46:60:45:fd:c3:25:c4:90:f6:
                    c8:c8:a5:9a:cc:3a:cf:b4:5e:3c:cd:06:5b:ea:b3:
                    e1:0d:e1:5f:35:43:3f:b9:30:e6:a2:1c:7d:3c:99:
                    c1:15:bf:93:0d:f8:87:f8:ea:30:14:cd:82:07:ae:
                    4f:e4:f9:3c:5f:50:77:77:79:ef:62:33:77:7f:85:
                    6d:64:b6:c3:59:47:2b:d2:01:69:ce:ae:9e:6f:84:
                    bb:cf:52:d7:25:38:84:d4:54:7a:4b:77:3d:23:e0:
                    3d:d4:41:60:cf:62:fc:ac:1b:21:94:8c:24:b4:d1:
                    d0:f7:71:0e:e5:39:fd:5a:d7:fa:a0:af:e1:94:8d:
                    49:ff:39:7c:e0:37:eb:f2:aa:5f:38:87:34:fd:05:
                    e6:c5:bd:d3:e3:eb:71:9e:0d:b0:b9:48:0b:df:c5:
                    f0:49:12:1c:79:48:74:0a:bc:20:3d:16:46:21:8e:
                    c1:0a:4e:b0:76:ab:9e:90:fe:38:94:ae:0b:60:f5:
                    fe:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:00:60:11:FA:E9:44:90:38:7A:E2:06:27:D7:C0:B1:71:2C:11:E0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21EB5BF4D1C011F09B605D7DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.72.0/22
                  154.95.96.0-154.95.121.255

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:8d:5b:f9:16:d8:ec:b1:62:6f:99:21:07:6f:70:53:0b:
         6f:dd:66:1c:40:87:5a:6a:c2:6f:9c:b2:da:03:de:96:5d:f9:
         2f:68:77:c4:1e:64:94:72:08:1c:30:91:4e:3b:f5:8c:16:63:
         81:22:eb:1b:7d:a0:2f:1f:87:d8:5e:77:a6:17:af:1b:0e:77:
         84:72:a2:51:55:7c:f1:e4:79:f6:bc:56:9e:6b:16:04:90:72:
         de:ac:67:60:30:e8:73:81:30:a6:ef:b9:ec:2a:e2:5f:ab:fc:
         1a:d0:06:e8:73:15:44:a5:be:6e:18:00:51:45:d9:14:89:b1:
         a7:16:31:c4:0a:42:27:36:5d:34:5f:49:a3:0f:5d:02:95:c0:
         6c:47:38:4c:9d:90:14:63:74:7b:47:e4:cc:1d:3f:75:ff:17:
         23:8b:74:c0:fd:55:18:0b:66:02:88:58:a1:04:01:9f:e3:c1:
         7e:fa:a0:0d:58:48:ee:4f:89:db:79:03:d7:ab:4c:78:c2:4e:
         57:0e:81:ea:8e:fb:b7:59:13:70:bb:a0:82:1b:21:7d:7a:6e:
         e5:e8:65:80:59:1f:f9:9e:bf:7d:3f:75:61:5b:6d:69:03:68:
         b9:98:de:6f:c2:c4:92:30:1b:be:da:d9:7b:2e:d5:0c:71:c8:
         e6:05:57:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:16:22 2025 by rpki-client