This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6098486ADF0F11F0ADDE27F1DAE4EC9C.roa
File:                     6098486ADF0F11F0ADDE27F1DAE4EC9C.roa (raw, json)
Hash identifier:          VpH4AD+HdOOSl2yBAdbwbD7r4nUsf3hjJu247DjrqUg=
Subject key identifier:   CF:36:59:72:E2:33:BF:44:6E:A9:44:91:DC:6F:4B:E7:5F:64:D0:10
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AFD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6098486ADF0F11F0ADDE27F1DAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 08:22:39 +0000
ROA not before:           Mon 22 Dec 2025 08:22:34 +0000
ROA not after:            Sat 27 Jun 2026 08:22:34 +0000
asID:                     18013
IP address blocks:        154.84.32.0/21 maxlen: 24
                          154.84.40.0/21 maxlen: 24
                          154.84.48.0/21 maxlen: 24
                          154.84.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 08:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110546 (0x1afd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 22 08:22:34 2025 GMT
            Not After : Jun 27 08:22:34 2026 GMT
        Subject: CN=6948ffcf-49f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:7f:b6:ec:da:d4:b2:2b:16:b3:89:48:19:
                    77:7b:ad:4a:3e:16:b7:0c:58:8f:ab:ae:88:b0:0f:
                    e2:d1:14:34:46:b1:03:53:2d:0f:3e:f0:99:fc:48:
                    91:55:a5:3a:e7:ee:89:c8:e7:91:76:b3:78:ec:af:
                    87:9d:51:fe:c5:dd:c6:88:36:36:bf:b6:a7:8c:f9:
                    da:a1:40:13:8b:04:01:73:0f:78:04:ef:8e:2a:c7:
                    5b:4c:b5:dd:08:52:e2:31:fd:8f:8b:34:42:e4:dc:
                    14:21:db:cb:21:fd:2b:a1:63:a8:59:d0:d8:d5:23:
                    1a:eb:f9:22:ac:5d:3d:30:57:a7:f2:2a:bf:6f:73:
                    9e:d4:47:ee:99:a7:f7:e8:09:3e:c6:fb:f9:db:d2:
                    40:6f:6a:3b:2d:16:f1:40:bf:12:6a:8e:89:37:e9:
                    14:fc:cd:4d:1a:fe:f9:91:f6:50:7f:0f:f0:ba:f8:
                    e8:e5:57:e6:81:5c:75:f3:4c:7b:e2:a5:30:49:d1:
                    24:51:35:23:58:c2:24:66:3d:ab:c9:24:a5:7c:e3:
                    b6:04:ee:8f:ba:d2:7c:7f:9a:1d:4f:02:57:98:67:
                    89:98:66:f8:88:1a:70:63:92:97:cd:3a:8a:c8:18:
                    34:be:af:27:e9:d2:21:ac:f7:85:0e:1f:5d:e6:4b:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:36:59:72:E2:33:BF:44:6E:A9:44:91:DC:6F:4B:E7:5F:64:D0:10
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6098486ADF0F11F0ADDE27F1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bc:13:3f:43:ae:29:a2:9e:30:a1:1b:a9:0f:84:c5:5a:c3:e7:
         47:4a:e9:b2:4b:0c:96:d3:d1:1c:f5:11:17:d4:70:9d:c9:25:
         19:e0:86:d4:85:af:cc:5f:19:26:fc:f7:37:81:ae:c1:a0:74:
         99:c9:e7:ff:a6:b2:e0:98:68:b3:9b:e3:6d:d0:10:f1:19:60:
         d8:d8:dc:35:06:8e:4c:40:f1:eb:44:7d:b3:bf:01:02:f7:02:
         94:81:33:6e:b0:86:f7:db:98:4e:df:81:74:b1:2c:4b:6c:5d:
         d8:bd:1c:be:63:5f:73:57:dd:8d:9c:47:97:3d:3b:62:2c:48:
         a1:61:79:37:89:27:21:fa:e6:ce:42:aa:84:9d:80:7f:06:b6:
         23:98:be:ea:06:3c:d7:f1:0e:b2:d4:36:52:a3:ca:10:3e:17:
         0e:49:2d:42:0c:3e:ee:30:71:52:e0:6a:f9:ac:b5:22:48:f1:
         f4:30:ad:59:5d:33:98:9e:2f:ca:6f:c7:4a:f2:de:44:f7:a2:
         0c:8b:81:12:69:78:55:c6:80:86:a6:ee:f8:5d:b2:5d:43:f1:
         94:14:07:25:c4:d1:92:88:0b:2a:8e:97:24:30:22:a6:4f:a4:
         18:1d:20:e4:85:2c:bf:c9:45:25:02:fb:03:17:a5:3d:8d:69:
         85:2c:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:37:58 2025 by rpki-client