This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E5D32A2CD2E11F098D7D6CCDAE4EC9C.roa
File:                     4E5D32A2CD2E11F098D7D6CCDAE4EC9C.roa (raw, json)
Hash identifier:          6uiH6ehRB9zd+xnx30BUvNl+29wiJQDkzN9gD+fpxTY=
Subject key identifier:   4F:5D:95:92:87:CE:73:76:E5:C1:CE:B5:B9:26:B6:AB:06:FC:19:2D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E5D32A2CD2E11F098D7D6CCDAE4EC9C.roa
Signing time:             Sat 29 Nov 2025 14:18:42 +0000
ROA not before:           Sat 29 Nov 2025 14:18:34 +0000
ROA not after:            Tue 09 Dec 2025 14:18:34 +0000
asID:                     395793
IP address blocks:        154.200.2.0/23 maxlen: 24
                          154.200.4.0/23 maxlen: 24
                          154.200.6.0/23 maxlen: 24
                          154.200.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109340 (0x1ab1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 29 14:18:34 2025 GMT
            Not After : Dec  9 14:18:34 2025 GMT
        Subject: CN=692b00c2-9a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:77:27:5b:e4:2a:3f:0d:6f:3c:74:27:20:
                    0e:3f:36:84:5a:b0:90:3c:f5:b6:7f:c4:9c:71:74:
                    f2:b1:78:e2:48:3c:d4:4c:e3:7f:35:d7:df:18:d0:
                    ec:57:d7:61:28:7f:a7:bc:88:c3:d8:c7:da:42:bb:
                    a3:72:0a:99:ba:5a:67:2b:60:34:f8:70:84:6c:ee:
                    df:4b:1d:ed:09:46:83:d9:e6:e0:c6:09:73:f8:3f:
                    65:58:9b:f9:78:c7:66:92:ac:65:06:7d:b2:0d:c6:
                    34:6c:dd:8e:56:02:a8:c8:79:12:af:48:ed:2e:0b:
                    e8:65:13:8d:a5:dc:0d:7b:3a:72:12:9e:9e:d5:61:
                    6c:91:60:ef:b9:33:20:cd:d9:c7:5e:66:2f:ef:f1:
                    60:7c:ba:f4:d4:48:cc:49:26:d8:67:73:d2:11:28:
                    b4:77:75:bc:89:0b:95:2c:22:f4:09:e8:db:f8:a8:
                    75:fb:8e:a4:34:17:0c:fb:1a:7c:78:ef:12:09:4e:
                    4b:4f:19:fd:98:49:d9:9b:fa:59:25:42:53:6d:e9:
                    f4:05:d8:9a:79:7b:52:3a:db:8b:3c:5f:92:b7:e4:
                    10:b4:45:8c:26:f0:97:98:97:34:7a:0f:b1:82:0b:
                    3d:ae:df:f5:cf:9a:1c:83:3e:15:ff:e0:16:b0:ef:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5D:95:92:87:CE:73:76:E5:C1:CE:B5:B9:26:B6:AB:06:FC:19:2D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E5D32A2CD2E11F098D7D6CCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.2.0-154.200.7.255
                  154.200.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:a3:9b:c7:b9:a1:57:2d:59:41:ab:e9:0c:ae:a6:c8:c0:c3:
         70:c5:7e:02:aa:f7:33:c7:eb:c2:5c:b0:f7:fa:f7:da:49:f2:
         2b:1a:ae:6c:20:68:e3:70:0d:1b:9b:da:4e:7d:30:18:3a:28:
         8f:66:43:49:40:72:11:84:86:7f:16:71:1e:ec:42:37:f7:a0:
         90:91:0e:4e:8d:c4:ec:88:6a:ce:cc:b5:a0:55:83:5e:7d:82:
         6e:38:d8:ae:cf:b4:5f:e5:99:57:0d:8a:da:b5:10:83:1f:67:
         66:db:5e:ef:2c:c0:43:74:c8:51:51:d7:29:1d:51:bf:b4:40:
         6a:ce:90:df:38:7f:64:51:f9:65:01:bd:ac:ff:e1:d9:ee:db:
         b2:e3:02:d8:42:ec:28:15:1c:c9:14:ec:61:75:af:77:83:ab:
         3a:99:cd:f1:91:42:05:e8:6f:79:48:84:5d:b9:dd:40:70:60:
         40:33:2f:2b:ae:9f:de:ff:c6:da:89:e1:2f:12:a3:7e:e4:14:
         29:72:68:1b:54:41:61:d7:fa:ee:5e:0c:8d:c8:75:af:fc:a9:
         3a:85:15:e0:e1:73:5e:e7:d2:61:3c:60:e5:81:3b:0a:4b:f8:
         be:f0:a6:a7:b1:50:6d:d7:48:72:d9:35:3f:ff:48:34:de:1b:
         9b:5f:8c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:24:52 2025 by rpki-client