This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567BAB8CD10F11F0AB3251A5DAE4EC9C.roa
File:                     567BAB8CD10F11F0AB3251A5DAE4EC9C.roa (raw, json)
Hash identifier:          /tvyyf4E8rM8+qtyT9J18FHV6RThvztJj/ZMcLVSsW4=
Subject key identifier:   07:20:E8:1F:37:4A:6D:E5:75:E9:C7:7F:63:73:B3:D5:A6:53:2B:3C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ACD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567BAB8CD10F11F0AB3251A5DAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 12:47:06 +0000
ROA not before:           Thu 04 Dec 2025 12:47:01 +0000
ROA not after:            Tue 06 Jan 2026 12:47:01 +0000
asID:                     45194
IP address blocks:        154.84.209.0/24 maxlen: 24
                          154.84.210.0/24 maxlen: 24
                          154.84.211.0/24 maxlen: 24
                          154.84.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 11:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109782 (0x1acd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  4 12:47:01 2025 GMT
            Not After : Jan  6 12:47:01 2026 GMT
        Subject: CN=693182ca-adf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:34:05:42:0f:0a:f3:db:ca:06:af:7f:e4:9f:
                    88:76:9a:86:cf:fa:90:28:90:02:ba:eb:d7:7a:e7:
                    de:69:6f:1e:02:25:4e:a2:29:34:13:25:99:c1:39:
                    38:53:e8:3a:af:24:ea:6a:40:01:0e:3f:b3:3f:de:
                    4f:ed:9b:80:9b:4b:36:4e:13:d3:ff:5b:dc:f2:0e:
                    a3:15:2c:fc:45:dc:b2:23:ed:fe:7a:aa:fa:54:0e:
                    ed:b2:58:b7:5a:76:f4:01:ec:43:79:b7:c3:95:f7:
                    2a:34:0c:d1:c3:42:53:74:5a:43:dc:23:85:55:42:
                    37:51:fd:67:8f:91:8c:b7:13:99:4d:74:cd:d9:34:
                    e6:dd:27:86:f8:4a:1d:04:33:35:93:5b:b0:9f:1a:
                    78:93:b3:f0:0a:37:2a:b9:dd:0f:f5:6f:bd:61:16:
                    cc:d3:8a:a5:d6:03:50:b3:f5:8d:f6:8b:98:32:49:
                    5e:6a:83:f7:60:49:e4:92:cc:3e:2a:59:51:7f:c8:
                    8d:8e:14:86:30:61:cf:93:a2:c5:52:84:b0:e7:a3:
                    06:16:73:6d:d1:39:2c:77:d5:a4:15:53:d6:ea:82:
                    7a:52:da:21:5b:40:91:37:8d:3f:42:48:34:d2:17:
                    3f:e1:78:7b:43:a3:8b:af:44:e0:e9:be:bc:7e:5d:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:20:E8:1F:37:4A:6D:E5:75:E9:C7:7F:63:73:B3:D5:A6:53:2B:3C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567BAB8CD10F11F0AB3251A5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.209.0-154.84.212.255

    Signature Algorithm: sha256WithRSAEncryption
         35:fc:6b:bb:9b:57:b2:e5:f1:49:a1:34:62:1c:21:76:d5:e7:
         e1:38:b4:bd:28:d7:c5:84:6a:0b:c2:f7:dc:cc:9b:2d:da:33:
         f8:56:3c:6b:37:17:e4:db:da:82:3e:c0:2b:3f:51:2a:71:ef:
         4f:ee:2b:77:14:c4:c1:51:86:4a:3d:21:d2:bd:97:11:c2:8d:
         2e:0c:4e:af:45:da:de:cc:34:19:d9:70:33:f6:53:96:6e:2a:
         5b:44:50:48:42:33:f8:5b:b6:ee:66:94:30:0b:b0:44:02:e2:
         ee:47:a6:42:24:99:3e:7b:c0:31:4d:59:94:df:25:c4:88:d8:
         80:fe:da:6b:8d:ca:34:da:4f:da:80:52:c6:b5:78:ac:1a:01:
         34:59:08:02:3d:9f:e8:a3:02:d1:77:c6:7f:b2:c1:79:2a:71:
         00:ea:f9:e5:85:29:0d:f6:06:62:ee:8f:45:93:4b:ea:eb:f1:
         e7:3d:d8:c2:c2:78:aa:f0:81:e1:34:10:79:b3:78:20:ef:49:
         02:b2:7c:54:6f:19:e3:06:1c:91:ed:14:04:da:5a:e0:81:1e:
         fb:4d:33:6c:27:35:3c:9e:da:d9:f8:eb:15:ab:b8:32:cb:62:
         2f:49:dc:75:90:d2:38:93:8b:ef:8b:d4:24:14:1a:55:c6:3a:
         3b:e2:cc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 19:01:08 2025 by rpki-client