This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C387C60BFE011F084C5DB83DAE4EC9C.roa
File:                     6C387C60BFE011F084C5DB83DAE4EC9C.roa (raw, json)
Hash identifier:          MtNkw8w9rA/ehAKYcKBhwR7Qpt4Fk51IoRwuhywbeyQ=
Subject key identifier:   09:30:CA:23:39:DE:A2:85:28:E5:DD:8E:CF:7E:42:1E:73:86:D7:17
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A8B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C387C60BFE011F084C5DB83DAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 15:58:26 +0000
ROA not before:           Wed 12 Nov 2025 15:58:20 +0000
ROA not after:            Tue 03 Feb 2026 15:58:20 +0000
asID:                     149440
IP address blocks:        154.81.220.0/24 maxlen: 24
                          154.91.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108722 (0x1a8b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 12 15:58:20 2025 GMT
            Not After : Feb  3 15:58:20 2026 GMT
        Subject: CN=6914aea2-5754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:03:81:87:66:b5:65:10:1a:0b:37:df:8d:
                    fc:8f:f7:f6:c3:7b:d1:43:9f:ea:eb:3b:a3:c6:32:
                    e6:c1:97:5c:3d:d5:50:d3:ee:3f:b2:9c:8e:a1:d9:
                    0b:dc:a5:84:69:69:3f:4e:b5:f8:ca:ef:96:99:cf:
                    41:a1:ed:89:16:7c:88:33:95:3c:7f:b7:9f:07:e8:
                    04:99:ff:d1:f0:ed:fb:f6:2d:18:f7:b8:e1:e8:3e:
                    f0:0b:75:73:40:ed:e2:87:8f:40:96:27:59:f4:8b:
                    c4:48:b4:97:10:76:1d:1d:9a:f2:16:6d:98:61:56:
                    ea:27:9d:20:fa:6d:7f:4d:94:92:a5:5d:e6:dd:89:
                    ed:ba:e9:8f:96:bb:59:6b:ad:09:7a:88:13:5d:9b:
                    76:c9:7c:be:27:49:f6:7a:d3:44:95:f5:cb:da:51:
                    14:44:39:a1:d7:7a:ae:d3:f0:86:e1:bc:a4:53:ec:
                    c6:e3:2b:0b:78:b7:91:f0:63:b2:22:cb:37:d2:4d:
                    74:62:05:ff:80:61:7d:46:6d:96:ec:64:25:20:1d:
                    a8:e0:2c:0e:5f:a4:59:e1:eb:62:cf:ac:0e:c5:6f:
                    41:f6:28:91:35:b1:3b:1c:fc:6a:87:98:ab:dd:e3:
                    32:1d:f1:79:ad:cd:96:12:cc:f9:fc:ec:fd:de:49:
                    6b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:30:CA:23:39:DE:A2:85:28:E5:DD:8E:CF:7E:42:1E:73:86:D7:17
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C387C60BFE011F084C5DB83DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.220.0/24
                  154.91.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:2f:2a:2e:5e:60:03:e0:41:7c:5b:3f:4b:db:10:37:52:52:
         1b:3d:51:49:bc:a6:3c:e0:5c:e6:50:16:1b:7c:a5:db:98:0f:
         df:6a:d3:3e:fc:67:25:74:aa:0a:4f:d1:a9:6d:a1:a9:90:66:
         48:06:97:34:18:28:46:13:c0:40:1d:b9:13:7a:43:6d:0a:c3:
         6b:13:95:bf:6d:64:b8:fb:f0:8d:79:e6:d5:96:6e:b6:b4:ad:
         0d:37:02:d7:c4:07:5e:1a:70:79:2d:ea:5a:41:fa:fd:6c:ab:
         3d:b8:e3:a7:be:5a:90:4a:fe:78:0b:3d:c1:1f:a8:e6:50:aa:
         e6:4a:a7:d9:b0:39:0a:f7:09:d3:35:3b:c9:0d:e1:d7:72:10:
         d1:f5:11:49:5d:1a:6c:ee:f0:88:08:4d:1c:e1:30:ce:36:11:
         70:00:05:ed:a1:4e:01:a9:6a:8d:ec:92:df:dd:6d:7d:37:ba:
         1c:14:1b:81:fc:df:b5:79:bb:11:af:14:1a:d9:eb:51:31:f7:
         01:ff:e1:e4:e6:1a:f6:e8:b9:0a:95:f4:d4:36:6a:2d:d1:cd:
         f8:16:52:f4:23:11:9e:72:c6:96:d1:30:6f:a6:70:42:57:c2:
         70:05:c6:ea:48:b5:bf:17:ee:9c:db:ea:bc:0a:27:36:1c:ac:
         a1:5f:96:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:11 2025 by rpki-client