This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48491D08CF3211F0B7713DEFDAE4EC9C.roa
File:                     48491D08CF3211F0B7713DEFDAE4EC9C.roa (raw, json)
Hash identifier:          EBruHbpE5KnMdf5+EO+ieNW9fY0AAZkB0x7TG905XwU=
Subject key identifier:   74:CC:84:C1:76:45:99:C2:31:BC:F2:65:B9:8D:D8:C3:97:31:5C:C9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB63
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48491D08CF3211F0B7713DEFDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 03:52:12 +0000
ROA not before:           Tue 02 Dec 2025 03:52:07 +0000
ROA not after:            Sat 03 Jan 2026 03:52:07 +0000
asID:                     17497
IP address blocks:        154.196.140.0/24 maxlen: 24
                          154.196.142.0/24 maxlen: 24
                          154.196.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109411 (0x1ab63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  2 03:52:07 2025 GMT
            Not After : Jan  3 03:52:07 2026 GMT
        Subject: CN=692e626c-735b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:93:e2:dd:71:a4:54:c6:d9:94:5d:70:d3:
                    fb:a8:c2:5c:49:9c:a8:ff:58:5c:20:a9:4f:f0:f7:
                    19:46:f2:06:21:9f:93:00:3b:ba:c0:2e:c9:1f:a9:
                    d6:23:5b:f7:0d:c0:81:3e:d3:72:4a:28:bb:1b:ec:
                    44:a1:cf:d0:1b:91:66:13:2a:c8:89:93:ee:17:7c:
                    2f:b9:22:cb:cb:0a:f6:2a:60:be:86:86:7f:5b:45:
                    90:0b:38:aa:6e:42:9b:66:c1:ce:5b:3c:3f:4c:b1:
                    46:09:be:dc:07:8f:e2:66:07:ea:4b:e5:8c:5b:ae:
                    8e:18:f6:dd:95:ef:9d:1d:ea:de:a3:16:e9:d2:2d:
                    28:88:bf:c5:b1:3d:c4:aa:c7:93:2e:d9:a9:3c:1e:
                    86:a2:32:3f:bc:50:c9:ad:28:8f:7c:0b:aa:45:00:
                    94:9b:68:bd:bc:3d:f0:ed:8f:27:9e:f7:3c:6e:b4:
                    6e:71:2d:82:e9:d0:78:52:be:88:10:d0:a3:86:37:
                    7b:f3:48:96:84:e1:58:28:ce:13:14:6b:ed:f1:05:
                    1f:34:f8:a9:59:7b:d5:2c:fb:39:9d:76:f6:75:74:
                    1a:79:8c:5d:3a:a8:2b:6a:1c:d4:74:54:cf:19:fc:
                    4b:99:db:e6:43:46:e8:ee:2e:2d:13:31:2b:52:33:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CC:84:C1:76:45:99:C2:31:BC:F2:65:B9:8D:D8:C3:97:31:5C:C9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48491D08CF3211F0B7713DEFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.140.0/24
                  154.196.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:2b:ef:b6:f7:9f:d5:3e:a0:eb:f2:5d:bb:08:29:2f:4d:0f:
         92:68:bf:05:fe:97:b3:fb:a8:e4:b6:b0:d0:13:26:9c:89:02:
         6c:ec:a2:5d:af:fb:cc:a5:f6:c8:1f:14:b1:88:3d:fa:7d:d5:
         d8:17:9d:dd:11:02:b1:8a:f1:d2:4c:41:5f:f0:2b:03:5a:1b:
         9b:0d:63:5f:a0:97:f6:a6:f6:48:c4:87:2c:ed:43:23:27:30:
         97:66:f1:79:73:95:d3:f1:6f:50:6e:a8:ad:2b:5b:31:be:6a:
         a7:f3:37:42:2f:35:62:2f:24:38:d7:3b:12:65:c2:fa:cd:50:
         c3:57:a3:b1:33:45:22:ca:0c:3a:c9:b5:7e:4e:02:74:7f:a3:
         01:cb:bb:9b:56:e0:17:1f:d8:e8:11:12:bb:18:37:30:2a:aa:
         0f:33:90:b6:2b:67:b1:10:c5:23:3a:96:c9:a4:f7:83:27:0f:
         4f:37:04:a2:2c:ef:2a:d0:04:0a:1d:50:3a:28:a2:fe:68:af:
         28:8c:a3:32:2c:25:4e:dc:a0:48:09:cd:53:ef:66:12:03:cc:
         65:69:c5:db:64:79:35:ac:69:67:9c:78:bf:ca:37:74:28:2a:
         1f:d5:68:99:7a:cb:69:58:51:97:39:c1:8e:60:85:b1:73:32:
         d6:74:86:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:28:58 2025 by rpki-client