This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AEE8CDCCECF11F0A7F5CB7DDAE4EC9C.roa
File:                     3AEE8CDCCECF11F0A7F5CB7DDAE4EC9C.roa (raw, json)
Hash identifier:          PXTH0ikZyVCCh+1Wp+O8WaI/rYEaJByclhmxSz4HVCs=
Subject key identifier:   D5:32:5E:B1:27:07:83:3D:16:A5:9B:38:AE:13:8C:CA:D5:47:1D:5E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AEE8CDCCECF11F0A7F5CB7DDAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 16:03:09 +0000
ROA not before:           Mon 01 Dec 2025 16:03:04 +0000
ROA not after:            Thu 04 Jun 2026 16:03:04 +0000
asID:                     24173
IP address blocks:        154.200.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109406 (0x1ab5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  1 16:03:04 2025 GMT
            Not After : Jun  4 16:03:04 2026 GMT
        Subject: CN=692dbc3d-4918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:80:bc:7b:df:a7:e1:d5:a0:bd:c5:bb:ed:
                    80:ff:87:52:8a:65:be:dc:f8:a6:91:49:ae:83:c7:
                    76:0f:8b:5a:79:cd:c6:51:e1:13:1c:1f:dc:24:66:
                    2d:cb:15:d9:a8:20:d3:1d:fe:51:5b:5c:b6:07:eb:
                    d2:f6:97:1a:db:a7:80:ab:fd:98:1d:3c:1d:ae:2a:
                    a6:16:29:97:82:0a:3e:a6:23:58:8c:e6:04:31:61:
                    16:98:3f:83:0f:98:bd:86:54:59:c0:fd:ee:c4:0d:
                    18:81:3f:b6:4f:31:ce:a1:28:17:60:10:b9:03:d6:
                    ab:f8:a3:c6:4f:4b:43:c5:2e:52:be:98:91:24:47:
                    26:a1:a9:29:ba:66:e8:03:f3:5f:bc:54:40:48:c3:
                    28:a3:a5:3c:70:19:26:f2:e6:75:23:cc:be:be:4f:
                    1e:4a:ab:6b:fb:f8:da:11:16:89:65:48:b2:de:7c:
                    d3:6a:53:02:2a:4e:f1:8d:84:33:ae:38:af:cf:ee:
                    3a:dd:33:69:3f:47:aa:5d:28:6b:dc:54:4b:4e:09:
                    29:01:47:55:8d:0d:6e:05:74:fe:34:60:5f:98:6a:
                    15:e0:51:66:89:b9:c3:7b:6a:af:c4:84:c0:66:39:
                    93:74:44:e3:2d:ed:b6:be:65:93:45:86:6e:8b:48:
                    28:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:32:5E:B1:27:07:83:3D:16:A5:9B:38:AE:13:8C:CA:D5:47:1D:5E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AEE8CDCCECF11F0A7F5CB7DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:c9:e3:cf:54:ff:f2:a1:36:1f:ea:97:08:0d:d5:58:40:55:
         18:cf:61:5a:7b:10:39:cf:30:e4:bd:cb:1f:bc:96:a9:f8:6f:
         5e:af:5a:d1:0d:2e:97:79:47:a4:f0:b1:07:de:ba:88:fa:f7:
         a9:67:36:12:be:19:27:38:14:13:e3:64:7e:72:2f:1a:1f:68:
         ff:03:85:50:5a:f5:4e:67:02:eb:bb:26:4e:06:95:88:a9:16:
         c8:0e:56:71:84:6f:26:fb:de:fb:9f:e4:6f:d2:50:0a:b2:59:
         08:f5:3f:5d:59:e2:4d:db:3f:8d:d7:e6:3e:48:b4:c8:53:62:
         33:49:fb:6a:a7:33:31:6d:1e:5c:e8:95:33:b4:a8:aa:75:fc:
         07:0a:fb:3a:e7:17:68:0c:77:d4:e0:31:f5:64:c4:31:bd:c6:
         11:46:ae:74:8b:3c:05:23:ea:ed:88:dd:38:62:8b:a0:ae:ef:
         2d:0f:1a:33:b8:98:d7:1c:69:23:38:f9:5a:b4:8a:48:ea:2f:
         e4:d5:a4:5b:cc:9b:54:70:19:da:e4:a4:95:d6:ba:47:c4:ed:
         df:3e:f6:c6:e6:bc:5f:26:03:4a:96:a0:ff:82:4a:24:7d:7e:
         f4:ce:c7:39:b9:be:6b:3e:33:5c:b0:3e:46:ae:36:14:16:04:
         80:d8:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:32 2025 by rpki-client