This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7007631AB89211F0BAE6CCF5DAE4EC9C.roa
File:                     7007631AB89211F0BAE6CCF5DAE4EC9C.roa (raw, json)
Hash identifier:          otpVHgmtxL3lGUydpGqxdYY+RIo7cW8p6esaOVPwcwY=
Subject key identifier:   92:7F:D1:C4:C2:0C:48:29:6F:1C:4E:89:28:A1:6D:E7:D1:BB:5D:A7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A710
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7007631AB89211F0BAE6CCF5DAE4EC9C.roa
Signing time:             Mon 03 Nov 2025 08:52:33 +0000
ROA not before:           Mon 03 Nov 2025 08:52:29 +0000
ROA not after:            Mon 08 Dec 2025 08:52:29 +0000
asID:                     272092
IP address blocks:        154.83.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108304 (0x1a710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  3 08:52:29 2025 GMT
            Not After : Dec  8 08:52:29 2025 GMT
        Subject: CN=69086d51-a3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:dd:0f:eb:65:50:7b:59:63:1b:8e:82:27:
                    36:79:7b:26:a1:ed:67:23:8b:be:9d:11:60:56:96:
                    cf:f9:c5:83:9a:12:fe:c3:08:78:d7:12:18:1d:02:
                    69:b1:46:90:c9:51:2d:3a:b0:80:e8:3e:bc:f9:40:
                    d6:67:1a:3b:f0:3b:7f:5f:45:d4:d5:5e:5d:c5:ca:
                    0f:4e:b4:b5:21:36:e2:51:b2:70:c7:cf:69:c9:f9:
                    d7:17:f0:80:60:33:16:2c:ab:99:93:b4:c1:f3:19:
                    64:77:80:ed:4d:72:2f:3d:a4:af:60:4a:71:73:8d:
                    d3:69:70:a3:d3:86:0f:65:b4:cc:94:73:02:a0:d5:
                    90:b1:6f:f8:0b:74:05:92:a3:de:48:57:b4:ef:6f:
                    5d:94:9e:6d:bf:ae:b6:ea:f7:34:af:5b:7d:e3:7d:
                    53:e4:6f:79:b2:19:8c:db:85:e5:d4:04:cd:43:f5:
                    2c:54:ed:2f:72:bd:84:90:3e:72:6f:5d:6b:ae:e1:
                    de:5a:b6:4d:0a:06:1a:b0:69:be:6a:0c:6b:b8:35:
                    be:b6:96:b8:76:b1:2e:b4:9d:59:c2:3b:b9:a5:f0:
                    84:54:5e:9a:64:7f:93:6b:51:f2:28:af:60:98:24:
                    09:ef:90:a7:51:2b:57:6d:4d:da:f7:df:19:03:d4:
                    d7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7F:D1:C4:C2:0C:48:29:6F:1C:4E:89:28:A1:6D:E7:D1:BB:5D:A7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7007631AB89211F0BAE6CCF5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:e6:39:cc:f4:c2:eb:40:3b:9a:4e:22:e9:d3:1e:5f:75:25:
         a1:a6:64:eb:68:de:67:36:5e:29:3e:a9:e4:86:00:5e:6b:9d:
         f4:98:78:8e:7d:37:23:36:d7:e1:f9:c0:dd:aa:e0:1f:52:08:
         94:7a:31:1d:3a:fb:50:97:85:32:2b:58:76:0f:57:ec:cc:45:
         d9:da:19:72:71:22:cd:b4:98:01:1d:5b:e6:85:87:3a:9e:39:
         19:e5:4d:f9:79:a7:3f:bb:6e:80:1e:e7:cb:67:ce:8b:29:4e:
         49:fe:56:37:bd:9d:1f:26:96:17:bb:3c:64:87:d0:d3:55:80:
         c1:ea:db:15:f1:05:26:76:d0:9f:84:b8:ef:54:f3:7a:e3:48:
         79:27:4a:dc:3d:ba:8c:fd:c0:65:81:6c:81:55:6c:67:5d:f7:
         86:2b:b1:5f:cb:41:76:60:2d:45:b8:57:fc:38:ff:f8:ea:06:
         15:db:06:85:69:c8:f2:5d:0c:f0:9a:9c:e4:1f:93:0d:32:4a:
         a1:78:43:5b:c6:ae:10:09:bf:34:8c:b4:3a:4b:36:27:c2:36:
         3e:c8:97:ea:f1:45:86:76:d7:0a:84:f7:3a:72:29:c2:fc:87:
         8d:3e:27:2b:ab:dc:ef:e2:44:b3:f2:ff:0c:bd:0c:ae:0b:57:
         97:67:4e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:03 2025 by rpki-client