This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C8139FABF0511F0A41A77A0DAE4EC9C.roa
File:                     5C8139FABF0511F0A41A77A0DAE4EC9C.roa (raw, json)
Hash identifier:          hUASb/yDk4jsM5uEiacP4fVlQuQhyujrtW+kqXd0DHU=
Subject key identifier:   F8:56:6C:B1:13:2F:90:E3:90:75:24:1D:E9:57:DF:77:C8:E0:26:3E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A852
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C8139FABF0511F0A41A77A0DAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 13:50:20 +0000
ROA not before:           Tue 11 Nov 2025 13:50:15 +0000
ROA not after:            Thu 11 Dec 2025 13:50:15 +0000
asID:                     214449
IP address blocks:        154.209.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108626 (0x1a852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 11 13:50:15 2025 GMT
            Not After : Dec 11 13:50:15 2025 GMT
        Subject: CN=69133f1c-c255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:54:b8:85:38:87:ed:49:e7:bd:4b:88:9a:
                    33:8f:c1:9a:8c:23:33:26:55:e7:21:d7:f6:e6:0b:
                    54:6b:8b:1b:92:1e:d5:f1:91:6c:2b:1d:b9:e5:88:
                    22:2d:57:88:a4:99:72:9b:0d:fa:7c:06:e6:5f:d5:
                    db:ce:7b:21:c0:5a:94:33:c2:f8:31:cc:f5:fc:ac:
                    f6:0c:47:5d:ee:20:0d:b8:d0:31:c3:9e:c2:11:cd:
                    4b:8f:a8:23:b5:7c:64:b1:66:2b:b3:0b:f1:cb:78:
                    65:f9:7a:43:f7:45:f7:7c:43:02:36:47:73:ce:09:
                    76:f6:dc:66:f9:e3:8a:25:f2:c8:54:9c:56:bf:00:
                    9c:e0:2e:cc:3f:35:8e:df:72:76:ef:87:b5:70:7b:
                    cd:79:f9:0e:ed:bd:a0:ce:d1:1b:b0:ea:58:27:99:
                    19:d8:9c:7b:86:8b:d7:b8:3c:c2:7b:fe:b2:87:f1:
                    64:ac:64:e8:56:29:cb:66:8a:be:52:dd:83:2c:f3:
                    55:9f:f2:47:d8:65:66:be:20:d2:29:1f:87:c4:fb:
                    ed:8c:e3:ba:18:ba:8d:4e:87:8e:c8:0c:ef:1d:ca:
                    a3:8d:79:b2:c9:6e:13:55:51:50:6d:c3:3b:db:be:
                    85:50:3d:92:e6:e4:4c:0d:4f:4c:63:a1:fc:5a:39:
                    0b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:56:6C:B1:13:2F:90:E3:90:75:24:1D:E9:57:DF:77:C8:E0:26:3E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C8139FABF0511F0A41A77A0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ad:3b:c8:e9:98:ab:9f:50:02:80:f3:09:66:d2:3b:9b:e1:
         ed:3d:f3:37:5a:01:18:44:32:5d:ec:4e:c2:83:dc:70:9b:15:
         76:1a:32:15:b1:5c:93:ba:0e:2b:aa:76:6b:4b:6e:73:a0:a7:
         3d:b9:c8:97:0e:ec:9f:17:eb:6e:aa:52:55:a5:e0:bf:d0:a0:
         a3:a9:90:b5:31:f3:74:81:dc:dc:94:dd:0e:6f:64:c9:72:7c:
         9f:d7:c2:b5:0c:71:3f:74:f9:d0:8d:70:f3:2c:df:4e:62:75:
         bc:cf:9c:ae:36:6a:47:d1:4b:2a:1b:fd:3a:5e:34:07:06:59:
         75:96:cf:34:16:87:19:f7:93:55:99:a8:e6:c8:6c:3b:ab:79:
         56:6f:28:79:12:14:cb:b1:bc:f5:82:ef:ef:9a:0b:6a:e8:7d:
         de:7a:d0:08:7e:0f:6f:10:00:1c:af:f5:cc:fa:3c:82:68:5b:
         04:43:d3:ff:66:20:5c:25:a7:33:a3:a5:e1:ea:83:0f:cf:1e:
         4d:4d:ec:ee:e3:95:95:1e:2b:31:2a:04:00:db:d2:85:48:e4:
         16:a7:74:10:6c:63:3c:00:86:81:83:5b:1c:86:3e:20:3b:d7:
         69:12:aa:c5:c0:31:43:6d:26:79:db:9a:b3:27:22:b5:9b:20:
         4d:ba:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:29:01 2025 by rpki-client