This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36F10944CAB411F088337BD0DAE4EC9C.roa
File:                     36F10944CAB411F088337BD0DAE4EC9C.roa (raw, json)
Hash identifier:          zgeMQm0qjbChmg9xVfpaGG8VhLnRDXjX3XDQUPRq/sQ=
Subject key identifier:   4A:30:1B:E2:17:5C:78:3F:FD:D8:7B:25:B1:31:47:53:1F:1C:D3:F4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AA9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36F10944CAB411F088337BD0DAE4EC9C.roa
Signing time:             Wed 26 Nov 2025 10:39:42 +0000
ROA not before:           Wed 26 Nov 2025 10:39:37 +0000
ROA not after:            Fri 05 Dec 2025 10:39:37 +0000
asID:                     44559
IP address blocks:        154.81.40.0/24 maxlen: 24
                          154.81.41.0/24 maxlen: 24
                          154.81.42.0/24 maxlen: 24
                          154.81.43.0/24 maxlen: 24
                          154.81.44.0/24 maxlen: 24
                          154.81.45.0/24 maxlen: 24
                          154.81.46.0/24 maxlen: 24
                          154.81.47.0/24 maxlen: 24
                          154.81.52.0/24 maxlen: 24
                          154.81.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109211 (0x1aa9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 26 10:39:37 2025 GMT
            Not After : Dec  5 10:39:37 2025 GMT
        Subject: CN=6926d8ed-7837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ef:db:1b:42:4a:16:18:4b:42:ed:7a:dc:ff:
                    6d:65:8e:4b:50:14:a5:45:20:1d:c8:d7:a9:37:c8:
                    22:96:8c:eb:ab:52:e6:c0:56:02:39:4d:00:56:b5:
                    50:c9:63:34:c5:2c:bc:94:9c:cc:a0:1f:c5:7b:7d:
                    72:5c:f9:e7:b0:59:a2:aa:30:95:cd:d2:8a:d4:78:
                    22:b3:3a:85:8d:8d:17:be:39:d3:ae:72:80:c9:6c:
                    9d:37:a7:bf:16:f8:2e:8d:97:a7:a8:6a:9e:f3:ca:
                    41:e2:09:21:26:eb:f3:67:e3:bc:56:87:51:65:b1:
                    a2:ad:f1:77:61:ad:15:39:bd:30:36:24:44:45:a7:
                    9f:b6:82:14:12:89:fc:dc:4b:f7:87:82:9b:cc:f8:
                    20:a2:7c:69:f7:d6:ec:56:3a:06:d0:ce:8d:c5:74:
                    63:11:74:6e:40:a8:17:59:f1:1f:f0:95:f9:4a:08:
                    9b:cf:77:09:ac:3b:0d:47:59:94:e9:2c:72:7a:18:
                    64:1f:bf:90:67:9b:9d:96:9f:a2:fd:70:53:6c:cd:
                    4f:44:05:78:73:cb:6d:de:b5:29:c9:7a:b9:c4:96:
                    c6:11:4e:b8:d6:2c:34:d2:4b:f7:b2:3c:f0:98:fe:
                    23:d4:04:c5:e1:31:0c:84:1f:ff:c9:4f:8c:f8:66:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:30:1B:E2:17:5C:78:3F:FD:D8:7B:25:B1:31:47:53:1F:1C:D3:F4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36F10944CAB411F088337BD0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.40.0/21
                  154.81.52.0/24
                  154.81.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:25:78:95:94:9b:5a:65:b5:cd:c7:a7:20:97:92:8d:7f:c4:
         e6:b5:ec:82:b0:16:72:41:41:b4:2d:e0:70:8c:1b:91:b6:7d:
         00:51:6c:c9:33:6a:33:c0:68:13:be:10:3e:81:8e:92:9e:52:
         a5:a6:71:5b:7c:e5:d5:66:12:37:68:38:00:26:d0:e0:98:cc:
         e3:c8:96:56:d7:36:f2:60:18:ca:fa:fb:ff:48:96:49:45:33:
         db:6a:e4:92:74:2b:9a:8e:d5:04:5e:ad:0a:bd:77:3b:fa:27:
         0e:20:0d:6b:2c:08:b6:a7:c8:1c:a0:17:a5:f7:f8:51:e8:2d:
         f5:0b:62:ff:dc:4c:af:8e:26:14:4e:d0:d2:9a:55:b6:d4:01:
         5d:05:ce:76:da:ba:b9:a4:40:7f:7e:ee:c9:07:36:be:3f:70:
         db:c6:50:d2:8c:9a:5e:76:6b:9a:3e:b6:a7:ee:07:4c:07:7d:
         dc:76:25:f4:55:14:6a:e4:ee:d3:c5:3c:be:ae:81:bc:9b:53:
         84:cc:29:a7:ca:08:d0:d6:1c:c5:0a:b5:4c:70:cf:e7:cb:f8:
         ca:bc:44:67:86:83:26:64:6b:f6:46:b8:7a:6e:c4:58:cc:8c:
         92:cf:1e:ec:d5:43:53:f6:5c:eb:f6:3d:77:25:4d:c2:79:e9:
         6b:d5:ed:39
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAaqbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTI2MTAzOTM3WhcNMjUxMjA1MTAzOTM3WjAYMRYw
FAYDVQQDEw02OTI2ZDhlZC03ODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2O/bG0JKFhhLQu163P9tZY5LUBSlRSAdyNepN8gilozrq1LmwFYCOU0A
VrVQyWM0xSy8lJzMoB/Fe31yXPnnsFmiqjCVzdKK1HgiszqFjY0XvjnTrnKAyWyd
N6e/FvgujZenqGqe88pB4gkhJuvzZ+O8VodRZbGirfF3Ya0VOb0wNiRERaeftoIU
Eon83Ev3h4KbzPggonxp99bsVjoG0M6NxXRjEXRuQKgXWfEf8JX5Sgibz3cJrDsN
R1mU6SxyehhkH7+QZ5udlp+i/XBTbM1PRAV4c8tt3rUpyXq5xJbGEU641iw00kv3
sjzwmP4j1ATF4TEMhB//yU+M+GbALwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFEow
G+IXXHg//dh7JbExR1MfHNP0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNkYxMDk0NENBQjQxMUYwODgzMzdCRDBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDmlEoAwQAmlE0AwQAmlHC
MA0GCSqGSIb3DQEBCwUAA4IBAQCMJXiVlJtaZbXNx6cgl5KNf8TmteyCsBZyQUG0
LeBwjBuRtn0AUWzJM2ozwGgTvhA+gY6SnlKlpnFbfOXVZhI3aDgAJtDgmMzjyJZW
1zbyYBjK+vv/SJZJRTPbauSSdCuajtUEXq0KvXc7+icOIA1rLAi2p8gcoBel9/hR
6C31C2L/3EyvjiYUTtDSmlW21AFdBc522rq5pEB/fu7JBza+P3DbxlDSjJpedmua
Pran7gdMB33cdiX0VRRq5O7TxTy+roG8m1OEzCmnygjQ1hzFCrVMcM/ny/jKvERn
hoMmZGv2Rrh6bsRYzIySzx7s1UNT9lzr9j13JU3Ceelr1e05
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:29:00 2025 by rpki-client