This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71F7C8E6C15B11F0899472E0DAE4EC9C.roa
File:                     71F7C8E6C15B11F0899472E0DAE4EC9C.roa (raw, json)
Hash identifier:          1SizIy4jxauIwZh/govV1Tdm8Vjvb4BIAemnfDAabrI=
Subject key identifier:   FC:44:5D:F3:1F:5E:2F:2E:22:B6:C6:F6:D9:69:96:D2:10:EA:3E:1D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A922
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71F7C8E6C15B11F0899472E0DAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 13:11:35 +0000
ROA not before:           Fri 14 Nov 2025 13:11:28 +0000
ROA not after:            Thu 18 Dec 2025 13:11:28 +0000
asID:                     135983
IP address blocks:        154.200.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108834 (0x1a922)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 14 13:11:28 2025 GMT
            Not After : Dec 18 13:11:28 2025 GMT
        Subject: CN=69172a87-4d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:2c:e2:13:cd:19:94:ce:9e:8f:26:fb:c3:
                    eb:43:97:87:12:c6:39:01:99:28:d2:54:2e:35:9b:
                    60:15:29:89:2a:75:25:bc:c3:c0:4a:3e:07:73:f1:
                    8f:5b:ff:64:ed:0f:d0:5d:1c:b7:69:d8:be:33:db:
                    23:24:8a:2e:d1:f7:8f:36:e8:fb:f4:d2:4e:b1:d9:
                    d3:29:14:f9:29:91:1d:f2:0d:6f:81:ce:58:20:c6:
                    46:a7:ac:47:e8:4a:a0:70:b7:e2:f3:a4:5e:51:32:
                    b0:44:a9:ef:8e:f5:4e:43:85:f6:3b:41:28:8f:f5:
                    55:ef:08:6d:a7:83:64:43:d7:6e:b9:a9:21:43:ef:
                    d8:e0:eb:c1:52:47:9a:ef:e1:12:67:d3:88:e8:12:
                    7d:c3:7d:46:66:06:41:80:2e:03:0a:49:19:e6:f1:
                    68:0e:7b:6e:1d:36:99:96:a7:36:39:cc:d9:74:d2:
                    a3:2f:2c:1f:dd:aa:b0:68:20:52:f0:9d:f7:32:07:
                    ec:99:4a:e4:a9:dc:c1:32:51:59:41:ca:d2:e9:49:
                    bb:80:d9:ee:c5:18:04:c4:55:4b:78:54:de:e6:38:
                    f2:a2:35:2d:06:10:72:2b:5a:88:45:99:1c:3e:fb:
                    3e:b8:47:3b:cf:f7:be:fa:5f:44:14:cc:22:8a:ac:
                    62:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:44:5D:F3:1F:5E:2F:2E:22:B6:C6:F6:D9:69:96:D2:10:EA:3E:1D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71F7C8E6C15B11F0899472E0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:d8:06:bc:35:bc:5f:d9:b9:36:72:f9:b4:85:ed:66:c2:cc:
         1e:e7:f1:ae:59:b0:5b:0e:f8:f4:da:4c:9d:a5:d9:2d:19:39:
         89:89:2f:f8:a0:4e:f7:ac:d2:3f:34:d7:64:5e:08:af:43:f9:
         ad:1c:45:6c:e9:30:cb:41:4b:fe:e5:04:0b:b3:94:6f:d8:b6:
         58:8b:0f:3e:34:86:14:1d:60:d4:38:72:fd:36:aa:49:bb:cc:
         ac:ae:bf:92:f0:f1:c9:57:5e:9b:1f:d4:b1:df:07:74:6f:c6:
         73:1e:d3:d0:3c:95:12:e3:67:4e:4c:84:d4:ca:cc:0e:ae:02:
         cb:15:d3:03:4a:40:94:f9:9d:96:df:e9:6d:ac:a1:61:6f:e2:
         fb:4d:82:bd:aa:bd:2c:11:6f:7a:d5:86:58:11:a1:0e:94:31:
         e0:46:0f:d4:de:d9:22:53:f7:de:0b:23:b2:25:b5:ff:b6:fc:
         e0:0c:cb:dc:03:5c:0c:5d:6c:0c:54:21:ef:bd:c9:06:ff:34:
         2d:5a:3e:0a:3f:b6:5e:20:2c:46:01:5a:b1:d3:f6:d0:74:4f:
         cc:60:f8:b1:5c:78:27:f0:1f:0d:49:e3:a1:4c:39:d9:04:9e:
         b9:75:e9:3a:35:2d:05:7b:5e:fd:20:e0:f3:09:35:b0:67:45:
         44:64:6f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:59 2025 by rpki-client