This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/045E6416BF0311F0BEEB7290DAE4EC9C.roa
File:                     045E6416BF0311F0BEEB7290DAE4EC9C.roa (raw, json)
Hash identifier:          6xPpoXL1zdDKTslXgF0V/8lwxhk9IslXiLMDRJdQ3LI=
Subject key identifier:   CA:D4:F7:AF:E9:B7:D1:47:01:5E:62:A0:F6:04:B1:56:49:58:80:84
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A84C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/045E6416BF0311F0BEEB7290DAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 13:33:33 +0000
ROA not before:           Tue 11 Nov 2025 13:33:28 +0000
ROA not after:            Sat 13 Dec 2025 13:33:28 +0000
asID:                     147176
IP address blocks:        154.84.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108620 (0x1a84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 11 13:33:28 2025 GMT
            Not After : Dec 13 13:33:28 2025 GMT
        Subject: CN=69133b2d-e60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:97:d0:a3:7a:3c:f0:12:33:a2:30:ef:56:e2:
                    13:54:a7:42:51:d9:cd:13:6d:25:c7:d6:7a:d2:32:
                    ac:c7:f5:cd:8f:be:93:5f:aa:ee:02:10:11:fd:05:
                    fd:5d:96:0e:d7:91:8c:1c:0a:e7:ad:ba:ee:ff:9b:
                    74:45:39:8b:fe:60:44:e5:b7:58:b7:14:ab:22:33:
                    6d:94:f3:b8:71:ee:f5:0a:b5:79:fa:10:03:a4:86:
                    0e:b1:1c:76:18:9c:59:98:53:39:dd:fb:83:2d:e9:
                    42:ed:a5:de:ca:5e:e9:95:d8:3f:d0:e3:cf:e6:0d:
                    e5:80:12:96:6a:b8:5e:d7:f9:93:30:d0:fc:19:49:
                    29:9f:ca:a0:1d:fa:5e:23:d8:80:5f:50:68:d3:f8:
                    25:ee:7c:d0:09:70:a9:2f:0b:32:0f:b0:7f:b1:df:
                    d7:78:6e:87:3d:aa:4b:39:a9:70:c3:0c:76:97:b5:
                    92:a5:09:54:53:9e:37:85:8e:ff:e5:34:61:8d:59:
                    46:a6:7e:df:55:f1:4b:7c:ce:ce:a5:55:9f:d1:3a:
                    9e:42:29:a6:84:a5:29:d9:ed:01:ab:fa:2a:53:cc:
                    e4:d0:65:d2:b9:63:14:60:c8:48:5e:9b:35:81:05:
                    ec:f5:15:90:b6:dd:66:04:0d:a0:59:4c:1d:ac:3d:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D4:F7:AF:E9:B7:D1:47:01:5E:62:A0:F6:04:B1:56:49:58:80:84
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/045E6416BF0311F0BEEB7290DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:b9:a1:68:ce:37:0f:ff:49:4a:0d:00:26:55:25:18:72:bb:
         68:f9:6a:ba:6d:25:28:d5:8b:54:fe:ee:d4:fd:e3:35:c8:c5:
         e9:82:08:4b:d5:c8:f7:9f:5f:10:cf:79:8f:0b:4f:9e:b1:79:
         81:76:77:0e:16:cf:b1:46:e6:8f:8b:dc:38:56:a0:92:78:0e:
         10:26:2b:2c:74:f2:d6:17:68:69:6f:ac:eb:65:40:0c:b4:20:
         9e:9a:af:b4:7f:18:23:17:ab:fc:cf:61:5b:ec:bd:30:a5:2d:
         41:0c:53:9c:d2:a9:69:2f:6c:63:15:c8:c2:f9:31:b3:29:8d:
         fc:27:1c:a1:ea:53:42:97:f5:0a:43:09:8e:a5:b2:35:2e:04:
         a8:ae:6e:5e:6c:eb:36:85:8c:9c:ef:95:cf:7b:ff:e3:d7:7a:
         cd:76:46:41:10:1c:66:21:33:e6:94:1c:91:9f:b3:18:8e:68:
         38:6f:ce:5e:0c:00:66:81:0c:46:57:e9:5a:e3:18:c3:91:a2:
         55:9c:4f:48:a3:e0:80:2f:f0:82:05:2a:da:7c:b3:24:2a:06:
         5e:61:40:94:7e:51:ac:6c:96:7b:b2:82:07:3a:51:9c:2c:5f:
         5b:d1:15:43:65:36:f3:43:ab:ea:06:f2:b9:b2:74:90:09:e8:
         06:bc:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:29:00 2025 by rpki-client