This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/192EACDEBAF311F0A25E92EEDAE4EC9C.roa
File:                     192EACDEBAF311F0A25E92EEDAE4EC9C.roa (raw, json)
Hash identifier:          hA2T1YMqPkzn1HwZ10iWlJyxtfZ2GxEiIrTv3nTJymM=
Subject key identifier:   29:1E:CB:D7:F7:C4:25:08:99:21:6A:55:BE:22:41:D3:B5:4B:39:9B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A7A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/192EACDEBAF311F0A25E92EEDAE4EC9C.roa
Signing time:             Thu 06 Nov 2025 09:29:31 +0000
ROA not before:           Thu 06 Nov 2025 09:29:27 +0000
ROA not after:            Fri 12 Dec 2025 09:29:27 +0000
asID:                     20326
IP address blocks:        154.83.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108456 (0x1a7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  6 09:29:27 2025 GMT
            Not After : Dec 12 09:29:27 2025 GMT
        Subject: CN=690c6a7b-ebe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:07:b8:5f:a6:b0:40:f1:52:47:bf:0d:5e:
                    0a:6d:52:42:9e:56:78:a6:a2:4c:76:37:4b:8a:3a:
                    63:d2:7e:11:b1:c6:34:5c:26:72:2b:50:6c:10:2c:
                    71:88:6f:b6:59:e7:9e:43:ab:4a:af:5c:fb:48:a4:
                    06:76:7f:c2:bc:8d:e7:5d:c6:f6:f0:a4:a4:bc:2e:
                    39:a9:e1:8d:49:3c:a4:43:37:47:08:65:ef:cd:5a:
                    51:a0:69:df:be:fa:01:1a:28:b6:49:77:b5:b9:32:
                    38:6f:8d:8c:35:28:7c:47:87:4f:93:5f:00:53:c9:
                    a5:d8:e9:30:13:28:0e:f6:54:93:49:72:80:63:7a:
                    44:59:44:27:8b:83:05:72:50:f4:4c:25:fe:69:3b:
                    08:8e:b3:0a:60:ef:19:b9:da:c4:02:14:50:bd:45:
                    4f:e1:6b:d3:2e:99:b2:55:63:96:da:a0:50:51:4b:
                    56:e9:f9:ed:27:71:5b:92:cc:d1:d6:b1:31:ef:2e:
                    ed:6f:0c:fc:e4:e6:d2:5a:d7:57:e5:da:90:c8:8c:
                    aa:90:25:89:0c:fa:e2:1f:71:9e:3d:5f:08:d7:34:
                    31:87:69:dc:58:a4:ec:95:ae:cd:66:a5:49:b5:4a:
                    5d:dc:78:6b:16:93:1e:47:ac:8c:15:ac:d3:1a:1b:
                    bf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1E:CB:D7:F7:C4:25:08:99:21:6A:55:BE:22:41:D3:B5:4B:39:9B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/192EACDEBAF311F0A25E92EEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:13:a3:03:2e:2b:7b:af:ef:fc:1a:24:0c:f4:89:64:63:c3:
         5d:19:a5:6d:d7:34:9f:db:3b:61:96:fb:08:1f:9c:77:32:fc:
         e5:a2:3f:94:b8:52:1e:df:92:88:00:6a:ee:33:90:64:6f:7a:
         54:c8:a4:39:77:e2:90:3b:f5:c7:7c:a8:02:a8:81:f5:49:73:
         50:77:2d:1f:3d:12:38:50:37:42:8d:1f:3e:58:a0:de:5d:ab:
         1f:c1:07:34:78:13:ed:37:7b:5b:c6:69:07:fc:52:9b:01:77:
         16:f4:22:4b:23:58:b9:d3:ee:d4:e0:30:07:4d:65:42:fd:db:
         6c:92:d8:47:ab:bb:a9:f7:29:f0:28:74:69:37:6e:eb:ac:3c:
         75:1b:45:6a:b9:cf:6b:5a:79:3a:4f:e0:c0:95:e5:0d:86:80:
         6b:ce:e3:66:89:d4:ff:86:30:1c:69:ac:82:89:31:8f:b2:19:
         01:9a:b5:77:69:8e:dc:42:a2:6f:4a:ab:a0:f3:8d:96:8f:9d:
         e2:91:ac:33:82:75:f4:bb:9e:4d:10:9c:0c:e8:aa:e8:9f:65:
         91:c0:99:29:df:47:c6:7f:4a:ea:5d:5e:e1:b9:cc:65:a2:c0:
         14:9a:d0:0c:33:0b:bd:67:ea:c9:73:03:84:be:0f:6a:a6:41:
         d7:ac:01:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaeoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTA2MDkyOTI3WhcNMjUxMjEyMDkyOTI3WjAYMRYw
FAYDVQQDEw02OTBjNmE3Yi1lYmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm/0HuF+msEDxUke/DV4KbVJCnlZ4pqJMdjdLijpj0n4RscY0XCZyK1Bs
ECxxiG+2WeeeQ6tKr1z7SKQGdn/CvI3nXcb28KSkvC45qeGNSTykQzdHCGXvzVpR
oGnfvvoBGii2SXe1uTI4b42MNSh8R4dPk18AU8ml2OkwEygO9lSTSXKAY3pEWUQn
i4MFclD0TCX+aTsIjrMKYO8ZudrEAhRQvUVP4WvTLpmyVWOW2qBQUUtW6fntJ3Fb
kszR1rEx7y7tbwz85ObSWtdX5dqQyIyqkCWJDPriH3GePV8I1zQxh2ncWKTsla7N
ZqVJtUpd3HhrFpMeR6yMFazTGhu/oQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCke
y9f3xCUImSFqVb4iQdO1SzmbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xOTJFQUNERUJBRjMxMUYwQTI1RTkyRUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlO4MA0GCSqGSIb3DQEB
CwUAA4IBAQCfE6MDLit7r+/8GiQM9IlkY8NdGaVt1zSf2zthlvsIH5x3Mvzloj+U
uFIe35KIAGruM5Bkb3pUyKQ5d+KQO/XHfKgCqIH1SXNQdy0fPRI4UDdCjR8+WKDe
XasfwQc0eBPtN3tbxmkH/FKbAXcW9CJLI1i50+7U4DAHTWVC/dtskthHq7up9ynw
KHRpN27rrDx1G0Vquc9rWnk6T+DAleUNhoBrzuNmidT/hjAcaayCiTGPshkBmrV3
aY7cQqJvSqug842Wj53ikawzgnX0u55NEJwM6Kron2WRwJkp30fGf0rqXV7hucxl
osAUmtAMMwu9Z+rJcwOEvg9qpkHXrAH4
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:29:01 2025 by rpki-client