This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/758928B0D05611F0BD897E9BDAE4EC9C.roa
File:                     758928B0D05611F0BD897E9BDAE4EC9C.roa (raw, json)
Hash identifier:          5+WzuwTEGCVYrqc0InfQIEmqt1mmmJzxk+FvNGnt9QM=
Subject key identifier:   0F:D0:F4:B1:78:BE:A2:D7:05:02:91:E9:21:D4:4E:E2:CB:3B:0F:C0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AC8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/758928B0D05611F0BD897E9BDAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 14:43:41 +0000
ROA not before:           Wed 03 Dec 2025 14:43:35 +0000
ROA not after:            Sun 19 Nov 2028 14:43:35 +0000
asID:                     17561
IP address blocks:        154.207.92.0/24 maxlen: 24
                          154.207.93.0/24 maxlen: 24
                          154.207.94.0/24 maxlen: 24
                          154.207.95.0/24 maxlen: 24
                          154.207.96.0/24 maxlen: 24
                          154.207.97.0/24 maxlen: 24
                          154.207.106.0/24 maxlen: 24
                          154.207.107.0/24 maxlen: 24
                          154.207.108.0/24 maxlen: 24
                          154.207.109.0/24 maxlen: 24
                          154.207.110.0/24 maxlen: 24
                          154.207.111.0/24 maxlen: 24
                          154.207.112.0/24 maxlen: 24
                          154.207.113.0/24 maxlen: 24
                          154.207.131.0/24 maxlen: 24
                          154.207.132.0/24 maxlen: 24
                          154.207.135.0/24 maxlen: 24
                          154.207.176.0/24 maxlen: 24
                          154.207.180.0/24 maxlen: 24
                          154.207.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109706 (0x1ac8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  3 14:43:35 2025 GMT
            Not After : Nov 19 14:43:35 2028 GMT
        Subject: CN=69304c9d-0355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:8d:60:f5:c4:6f:f2:be:9f:8a:b8:64:e4:
                    56:b0:ff:e1:57:39:2a:18:bf:a8:51:fc:f0:03:2e:
                    3f:08:2e:10:a8:02:1a:b0:cf:d8:88:df:7a:e4:55:
                    4c:08:de:bc:0a:26:08:59:66:49:ce:72:e0:b3:74:
                    88:6f:79:18:d2:c0:1f:5c:fb:15:19:d8:a5:45:c8:
                    80:11:5e:8b:1f:58:78:92:cb:bf:bd:10:43:0c:6b:
                    7c:54:28:bf:7f:80:75:c6:99:79:d3:3b:67:da:88:
                    58:74:e7:61:f8:af:be:af:65:3e:43:7a:1c:90:db:
                    63:40:04:86:33:fe:6b:f4:ce:dd:d4:b5:da:6b:40:
                    e9:e8:5f:28:3e:fc:26:c3:3e:9b:54:5c:fa:b3:46:
                    dc:16:2e:91:dc:51:4c:b9:8c:9c:0b:0a:02:bf:f0:
                    f4:b6:80:c8:b6:d2:82:09:56:b2:c9:3d:37:ff:39:
                    7b:a6:ea:d7:a6:56:11:03:6a:52:d0:f8:8a:2e:2b:
                    38:fb:df:9f:31:1f:20:fd:3b:32:b1:f5:08:bf:5f:
                    1c:96:48:1e:26:80:38:68:7a:78:3b:b6:c8:30:7d:
                    30:33:e6:30:b8:81:49:d2:01:9c:e0:51:33:2a:9f:
                    02:88:18:09:9e:53:86:7c:64:94:77:a2:6b:32:85:
                    b8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D0:F4:B1:78:BE:A2:D7:05:02:91:E9:21:D4:4E:E2:CB:3B:0F:C0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/758928B0D05611F0BD897E9BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.92.0-154.207.97.255
                  154.207.106.0-154.207.113.255
                  154.207.131.0-154.207.132.255
                  154.207.135.0/24
                  154.207.176.0/24
                  154.207.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:f3:c5:4a:6e:d3:26:d9:99:f6:bb:a0:0e:5e:e0:50:1c:c0:
         9d:59:b5:2c:15:c0:db:de:ba:91:7f:e5:1d:51:d8:b3:24:8c:
         72:c1:bb:be:19:1c:f7:28:3d:77:f6:f5:93:9c:ce:ec:26:7d:
         fd:8a:83:e1:73:9e:ad:78:5d:c9:c4:1b:6f:42:f4:0e:30:1b:
         2d:f4:cc:1c:e5:41:12:e3:5b:bc:ba:dd:04:18:3e:96:dd:9f:
         91:3f:85:9b:b1:23:64:30:80:84:84:9b:37:6d:de:af:de:aa:
         3e:a6:d6:5c:f9:91:0f:b4:4f:87:aa:80:23:cc:3f:94:c4:a5:
         79:03:9c:71:33:ae:c1:f2:2d:e8:03:b9:57:49:90:b4:c0:9c:
         4f:36:29:01:32:ff:42:f6:b1:70:57:b6:4e:92:93:47:2c:df:
         3f:88:c2:9d:11:b4:87:15:a3:70:7b:0b:53:f2:90:c2:5e:5e:
         da:49:ec:f8:d2:0d:73:97:82:37:17:c5:b1:21:af:a2:d5:d5:
         05:0a:06:0b:e7:33:b3:2e:fc:d8:d2:a5:23:d0:2e:46:44:0f:
         e5:21:a8:ee:a3:f1:61:a0:33:26:46:3f:96:90:2f:83:88:d6:
         cd:2c:8a:72:13:c8:da:2a:91:a1:a5:39:c0:2c:ad:59:11:cf:
         7b:c2:26:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:54:28 2025 by rpki-client