This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/298C203EB57611F0AF8435E3DAE4EC9C.roa
File:                     298C203EB57611F0AF8435E3DAE4EC9C.roa (raw, json)
Hash identifier:          uD4+N+9LuTBSr1Bov0t0zBVv86f6sjJobLj7CUYu9DU=
Subject key identifier:   4C:45:16:14:2F:64:4F:C4:92:00:4C:AF:85:AD:88:87:57:2C:44:44
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A6A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/298C203EB57611F0AF8435E3DAE4EC9C.roa
Signing time:             Thu 30 Oct 2025 09:52:36 +0000
ROA not before:           Thu 30 Oct 2025 09:52:30 +0000
ROA not after:            Wed 10 Dec 2025 09:52:30 +0000
asID:                     215691
IP address blocks:        154.202.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108199 (0x1a6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 30 09:52:30 2025 GMT
            Not After : Dec 10 09:52:30 2025 GMT
        Subject: CN=69033564-c844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:85:e3:36:1b:34:7c:5c:1c:79:1d:58:d8:c3:
                    f6:e8:48:06:53:95:44:f6:c0:ef:22:24:fe:fd:ac:
                    1e:f7:07:d5:60:d5:26:05:66:8d:33:cf:2b:65:84:
                    98:41:fb:6a:45:d4:33:e7:5c:a5:b3:b7:73:92:95:
                    66:03:85:98:73:16:9a:41:ee:a1:27:60:77:e1:2a:
                    13:04:85:e7:69:dc:c3:ae:db:c0:e7:0f:06:40:9a:
                    8a:1a:db:9a:5e:23:49:79:36:c8:63:8a:b6:45:9d:
                    f7:5d:ca:ba:dd:db:61:2b:5c:e0:bc:45:87:ca:b4:
                    07:b1:5c:2c:ea:b0:78:52:b1:2c:c5:cf:22:cb:49:
                    cc:ce:bc:56:a7:84:82:18:44:43:1b:be:31:a9:67:
                    4a:a8:42:ab:11:7e:46:18:66:88:50:ed:4d:86:77:
                    ba:d2:d4:26:5c:5d:6a:27:30:e7:11:65:15:8b:df:
                    06:e4:92:86:11:79:ad:51:27:00:8b:be:86:36:94:
                    d3:07:12:2b:dc:6d:52:d3:8a:ad:a5:21:c3:cc:01:
                    01:d2:6d:d4:36:6d:77:31:b8:f3:34:9d:32:1d:38:
                    49:a8:a5:b4:00:2d:bd:61:09:43:c4:13:ee:2d:00:
                    f1:19:0f:8a:fc:92:ea:1e:27:d8:cb:ee:ce:93:5a:
                    ae:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:45:16:14:2F:64:4F:C4:92:00:4C:AF:85:AD:88:87:57:2C:44:44
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/298C203EB57611F0AF8435E3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:be:67:54:98:d9:a0:ef:66:17:cb:23:c0:f4:8d:80:a9:db:
         05:f8:7d:eb:89:1f:11:b5:5b:26:89:42:d5:32:4c:ef:c1:47:
         88:7e:fb:01:d2:7f:c3:1a:19:e3:74:56:e8:c3:93:74:7b:4d:
         ab:65:b7:9d:fa:ff:24:78:6b:3d:b7:55:37:3f:29:d0:e2:69:
         c0:1a:2b:4a:f8:b7:e1:ab:8e:e6:15:e2:b7:eb:dd:28:22:fc:
         2c:1a:a1:38:ed:3c:7e:3f:b8:e4:75:82:43:cf:cc:bf:34:5f:
         e4:77:f8:2c:ac:ff:96:09:ea:a5:8e:59:17:39:e6:7c:6b:c5:
         a2:98:51:69:03:87:81:1f:be:e4:bf:b2:cb:34:f6:ef:52:4d:
         26:ce:77:55:87:c9:a8:ed:c4:7e:b7:a5:32:1a:da:f5:83:ee:
         86:3d:26:63:14:8d:e9:c0:94:e8:6b:40:0a:e6:a3:fa:e5:b8:
         80:5b:e4:b5:c9:c0:4c:7c:aa:4d:a4:00:02:91:dd:be:1c:6f:
         1c:48:89:c8:8c:5a:bb:56:af:ab:32:bf:06:dd:bc:47:2c:a7:
         3c:1f:6c:a3:4f:12:c5:ed:ae:15:74:a3:33:e9:1d:ff:8b:3d:
         79:70:48:c0:75:17:60:c3:5b:63:18:49:6c:da:e0:98:19:ab:
         11:68:8d:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaanMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDMwMDk1MjMwWhcNMjUxMjEwMDk1MjMwWjAYMRYw
FAYDVQQDEw02OTAzMzU2NC1jODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4oXjNhs0fFwceR1Y2MP26EgGU5VE9sDvIiT+/awe9wfVYNUmBWaNM88r
ZYSYQftqRdQz51yls7dzkpVmA4WYcxaaQe6hJ2B34SoTBIXnadzDrtvA5w8GQJqK
GtuaXiNJeTbIY4q2RZ33Xcq63dthK1zgvEWHyrQHsVws6rB4UrEsxc8iy0nMzrxW
p4SCGERDG74xqWdKqEKrEX5GGGaIUO1Nhne60tQmXF1qJzDnEWUVi98G5JKGEXmt
UScAi76GNpTTBxIr3G1S04qtpSHDzAEB0m3UNm13MbjzNJ0yHThJqKW0AC29YQlD
xBPuLQDxGQ+K/JLqHifYy+7Ok1quaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFExF
FhQvZE/EkgBMr4WtiIdXLEREMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yOThDMjAzRUI1NzYxMUYwQUY4NDM1RTNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmspKMA0GCSqGSIb3DQEB
CwUAA4IBAQCSvmdUmNmg72YXyyPA9I2AqdsF+H3riR8RtVsmiULVMkzvwUeIfvsB
0n/DGhnjdFbow5N0e02rZbed+v8keGs9t1U3PynQ4mnAGitK+Lfhq47mFeK3690o
IvwsGqE47Tx+P7jkdYJDz8y/NF/kd/gsrP+WCeqljlkXOeZ8a8WimFFpA4eBH77k
v7LLNPbvUk0mzndVh8mo7cR+t6UyGtr1g+6GPSZjFI3pwJToa0AK5qP65biAW+S1
ycBMfKpNpAACkd2+HG8cSInIjFq7Vq+rMr8G3bxHLKc8H2yjTxLF7a4VdKMz6R3/
iz15cEjAdRdgw1tjGEls2uCYGasRaI2D
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:06 2025 by rpki-client