This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1914C814BF0811F0999328B1DAE4EC9C.roa
File:                     1914C814BF0811F0999328B1DAE4EC9C.roa (raw, json)
Hash identifier:          yEPHrNzn0uFZw5RPq3wp72KLpApIoVSAoeqTSP8a5wE=
Subject key identifier:   91:2A:91:67:94:4B:6C:9E:27:47:5C:5D:CF:85:D4:56:E8:AC:52:3E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A859
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1914C814BF0811F0999328B1DAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 14:09:55 +0000
ROA not before:           Tue 11 Nov 2025 14:09:51 +0000
ROA not after:            Tue 13 Oct 2026 14:09:51 +0000
asID:                     138456
IP address blocks:        154.197.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108633 (0x1a859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 11 14:09:51 2025 GMT
            Not After : Oct 13 14:09:51 2026 GMT
        Subject: CN=691343b3-a77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3d:67:e3:14:40:a5:05:d2:d3:73:26:7d:c3:
                    bd:57:9b:31:ef:95:6b:fc:ec:4b:fb:81:ae:64:a5:
                    be:0e:27:ed:28:fb:af:d8:54:21:ef:ea:04:31:be:
                    23:b1:21:32:f7:90:eb:51:96:79:fa:b4:6d:7d:43:
                    99:c4:96:27:67:49:5b:fe:f8:c9:84:4e:8c:69:12:
                    a6:66:04:08:01:e8:f0:c8:09:d1:c2:5c:bc:b1:f0:
                    57:64:47:57:da:58:97:1a:cd:cf:38:ed:a5:32:7c:
                    1b:00:60:77:72:5b:6b:05:31:ae:c0:35:b4:e8:b6:
                    0c:44:b5:7d:0d:3f:80:e1:9a:f4:5e:3b:34:bf:a0:
                    c8:1c:a3:fb:20:60:3d:44:ae:3c:54:2c:74:b3:50:
                    1e:39:a0:63:3c:a9:7e:f5:47:a3:2f:ae:7b:0b:b9:
                    f3:ae:d6:bd:04:58:21:ff:62:27:d4:11:55:0f:e4:
                    30:1a:26:0c:f5:83:b2:7f:6d:25:36:23:a9:fe:45:
                    87:1f:bf:74:1d:bb:4b:7b:f3:64:74:52:2d:d6:2a:
                    e7:7f:90:3d:a0:f4:85:85:73:ec:94:54:6e:a7:69:
                    e8:e5:e1:7e:74:16:a1:37:40:4a:46:de:43:9e:fc:
                    55:a7:3a:9c:fb:c7:61:24:75:70:94:62:b7:35:79:
                    cc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2A:91:67:94:4B:6C:9E:27:47:5C:5D:CF:85:D4:56:E8:AC:52:3E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1914C814BF0811F0999328B1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:25:22:35:6b:68:c0:48:0e:99:d8:9f:10:a9:5d:94:66:66:
         08:9d:eb:45:18:0a:8d:94:e3:3e:47:03:33:40:f3:3d:55:1c:
         75:bb:cc:46:ed:a5:63:1f:75:c3:d2:06:30:66:5b:9b:61:db:
         05:12:27:9d:b8:dc:65:7f:c6:25:c9:30:92:a7:93:49:a9:5a:
         a3:48:be:b7:16:b0:88:c1:be:17:b8:b2:92:0f:f5:3e:eb:55:
         a3:0b:e7:1b:7e:c3:bc:de:0e:9e:1f:a3:61:07:4b:0e:d2:70:
         a2:d1:ce:a9:d4:d9:cb:7d:ac:43:40:d6:00:f1:05:8d:86:65:
         8b:41:f7:68:ef:52:c8:a4:ac:9a:19:27:19:a8:e4:45:fa:05:
         0f:2a:06:ec:51:32:94:b9:4e:54:a1:9f:09:b0:0a:3b:db:37:
         5d:7e:e1:10:c9:c2:26:ba:df:af:d1:5f:a1:32:53:27:72:fe:
         87:1f:55:d6:06:9a:c2:83:a2:c3:dd:ab:8a:00:06:d5:c3:e4:
         78:e9:6c:aa:76:a1:5b:b3:d2:2c:8d:cb:d2:ca:e2:c9:2c:28:
         b4:51:13:e9:05:2c:af:4a:c4:9c:6e:7e:73:3f:91:36:95:7c:
         16:d9:82:a1:5e:5f:8b:d3:66:8f:39:2a:30:c7:ff:f7:ba:bb:
         25:cf:e9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:28:58 2025 by rpki-client