This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6812936EC47211F0B52494E4DAE4EC9C.roa
File:                     6812936EC47211F0B52494E4DAE4EC9C.roa (raw, json)
Hash identifier:          sqtfeLY7q3IdK7182yg1HUwy3KiDQU/XWmFiQ3Yz2Ts=
Subject key identifier:   3C:98:44:C1:B8:8A:C1:09:15:8F:1E:D0:EC:A5:34:5A:B1:E5:73:C6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A99C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6812936EC47211F0B52494E4DAE4EC9C.roa
Signing time:             Tue 18 Nov 2025 11:33:30 +0000
ROA not before:           Tue 18 Nov 2025 11:33:25 +0000
ROA not after:            Wed 24 Dec 2025 11:33:25 +0000
asID:                     214413
IP address blocks:        154.194.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108956 (0x1a99c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 18 11:33:25 2025 GMT
            Not After : Dec 24 11:33:25 2025 GMT
        Subject: CN=691c598a-2824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:86:7e:70:08:36:d7:02:8c:bd:98:c3:ac:ac:
                    b4:58:ad:0f:20:86:0f:be:2d:53:2a:9c:e7:2f:4c:
                    3f:de:42:32:4d:ed:73:ff:b9:9c:6a:e9:02:22:93:
                    14:fe:f5:ed:4f:f3:67:35:b7:cd:03:fe:a7:02:e9:
                    63:58:73:22:1b:e3:a0:b1:26:5a:d8:eb:7f:5f:d9:
                    44:c5:df:01:4b:bf:20:e2:64:de:86:ad:44:9e:52:
                    f8:20:bf:55:22:4c:d7:45:9f:fa:6d:34:16:cf:1a:
                    02:f6:e1:01:e9:96:bf:b1:d3:05:a5:97:2c:3e:3e:
                    0b:f0:db:fd:35:a4:8a:bd:e1:ab:c5:ab:b5:16:84:
                    b2:bc:e0:e4:f8:63:e9:25:6b:04:dc:45:55:77:e5:
                    17:7d:fb:36:cf:0b:82:56:1d:9e:79:d1:0e:76:0b:
                    4d:2d:ee:9e:07:5d:fa:59:82:9e:8f:a6:3b:29:1f:
                    a8:ea:12:2a:a9:4e:65:77:e2:96:2e:c6:69:29:4b:
                    48:fa:60:15:92:bd:73:f5:a8:d0:3e:a9:33:d6:d9:
                    2b:ec:d4:b5:ba:7f:6e:c5:ea:f4:bb:34:12:58:80:
                    96:5d:cb:53:eb:68:3f:f2:63:73:28:e6:2b:de:52:
                    45:e3:90:16:b1:58:1f:2b:6d:1b:06:a4:89:52:40:
                    60:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:98:44:C1:B8:8A:C1:09:15:8F:1E:D0:EC:A5:34:5A:B1:E5:73:C6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6812936EC47211F0B52494E4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:80:6c:a2:6f:fd:0a:90:83:de:55:8d:81:21:c5:c7:df:cf:
         43:89:da:4f:19:8b:61:f5:ac:99:9f:27:32:a8:0c:87:c8:2b:
         ec:86:b1:39:fd:e3:24:b2:ec:6a:dc:7a:2f:7f:46:1e:37:94:
         0c:5f:d3:01:b4:4f:f0:be:60:8d:10:be:e6:84:2f:ed:9a:d8:
         d7:58:3d:f1:d9:34:6d:b0:4a:83:46:27:70:da:38:1a:4d:5e:
         73:88:6e:f7:0f:2d:ed:0b:97:32:7e:68:22:35:91:ba:bb:f0:
         b0:db:b2:df:3a:a6:0e:9b:86:6d:94:d6:d7:3c:8a:0d:4e:92:
         e9:55:8e:94:48:42:20:e0:1f:4d:ed:71:3a:c2:f6:08:a4:ac:
         fd:1a:df:3a:8c:a3:77:8b:29:6c:e7:42:78:0a:0a:cb:1f:7a:
         bc:83:d8:29:d0:a1:70:b4:60:1b:33:5d:03:f0:a7:a9:15:e8:
         c3:86:1d:fe:24:e2:de:a9:d9:d0:76:75:32:4f:ac:7f:61:b4:
         1c:86:d3:27:00:33:88:9d:e3:3b:90:81:51:f4:e1:6c:59:8a:
         eb:c8:c6:3e:88:af:92:a0:12:34:6d:06:62:4d:c9:f6:53:80:
         2a:cb:cb:8b:fd:00:ed:e3:d1:8c:23:ce:d1:96:19:e0:cf:2d:
         ce:b8:e2:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAamcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTE4MTEzMzI1WhcNMjUxMjI0MTEzMzI1WjAYMRYw
FAYDVQQDEw02OTFjNTk4YS0yODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2IZ+cAg21wKMvZjDrKy0WK0PIIYPvi1TKpznL0w/3kIyTe1z/7mcaukC
IpMU/vXtT/NnNbfNA/6nAuljWHMiG+OgsSZa2Ot/X9lExd8BS78g4mTehq1EnlL4
IL9VIkzXRZ/6bTQWzxoC9uEB6Za/sdMFpZcsPj4L8Nv9NaSKveGrxau1FoSyvODk
+GPpJWsE3EVVd+UXffs2zwuCVh2eedEOdgtNLe6eB136WYKej6Y7KR+o6hIqqU5l
d+KWLsZpKUtI+mAVkr1z9ajQPqkz1tkr7NS1un9uxer0uzQSWICWXctT62g/8mNz
KOYr3lJF45AWsVgfK20bBqSJUkBgFwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDyY
RMG4isEJFY8e0OylNFqx5XPGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82ODEyOTM2RUM0NzIxMUYwQjUyNDk0RTREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsLiMA0GCSqGSIb3DQEB
CwUAA4IBAQCJgGyib/0KkIPeVY2BIcXH389DidpPGYth9ayZnycyqAyHyCvshrE5
/eMksuxq3Hovf0YeN5QMX9MBtE/wvmCNEL7mhC/tmtjXWD3x2TRtsEqDRidw2jga
TV5ziG73Dy3tC5cyfmgiNZG6u/Cw27LfOqYOm4ZtlNbXPIoNTpLpVY6USEIg4B9N
7XE6wvYIpKz9Gt86jKN3iyls50J4CgrLH3q8g9gp0KFwtGAbM10D8KepFejDhh3+
JOLeqdnQdnUyT6x/YbQchtMnADOIneM7kIFR9OFsWYrryMY+iK+SoBI0bQZiTcn2
U4Aqy8uL/QDt49GMI87Rlhngzy3OuOLs
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:11 2025 by rpki-client