This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73E0431CBBB711F0878B79C4DAE4EC9C.roa
File:                     73E0431CBBB711F0878B79C4DAE4EC9C.roa (raw, json)
Hash identifier:          su3RaysuxaW+9g1HYojkGy82UqUvy8iwebgJfVzJsOg=
Subject key identifier:   E6:73:73:1A:11:9F:B9:02:E7:C6:3A:AF:03:6B:CF:77:2A:25:0F:25
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A7CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73E0431CBBB711F0878B79C4DAE4EC9C.roa
Signing time:             Fri 07 Nov 2025 08:55:05 +0000
ROA not before:           Fri 07 Nov 2025 08:55:00 +0000
ROA not after:            Sun 14 Dec 2025 08:55:00 +0000
asID:                     139880
IP address blocks:        154.209.160.0/19 maxlen: 24
                          154.214.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108491 (0x1a7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  7 08:55:00 2025 GMT
            Not After : Dec 14 08:55:00 2025 GMT
        Subject: CN=690db3e9-4e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:22:08:8f:be:a8:5a:16:d3:21:10:2a:62:44:
                    d8:a1:33:f5:b2:7f:1b:4b:2f:f2:25:fb:da:87:05:
                    c8:28:22:df:51:cb:06:8c:6d:60:06:1a:43:81:ac:
                    3a:59:2f:99:66:27:8f:09:b5:44:60:54:2e:ca:f8:
                    d5:44:cb:05:7d:a2:f4:e0:be:ac:48:b0:3a:a0:5a:
                    ca:35:24:09:34:12:ca:e1:f3:d6:96:98:91:5b:d8:
                    36:4a:c7:87:7a:20:90:2f:cf:6d:5d:53:3d:dd:82:
                    0c:9b:df:5b:6a:a6:ac:75:f4:a0:77:e2:c0:c3:7a:
                    ae:00:ec:00:9f:72:31:f4:bd:25:d4:f8:7a:20:bb:
                    d3:64:ff:6f:65:28:88:1d:70:fe:22:af:ef:52:5d:
                    27:6c:e5:38:f7:f3:42:47:69:05:37:38:4b:4c:83:
                    07:e5:92:5e:30:d6:9c:0c:03:77:fd:64:f4:52:76:
                    aa:a5:db:51:0f:3a:9d:f2:19:01:19:17:c5:e3:b8:
                    05:af:80:13:30:96:a3:60:27:ff:ad:68:e1:3f:2e:
                    9a:5d:c9:9f:27:8a:7b:f6:f0:af:4f:ae:4c:c2:f9:
                    83:a5:8f:65:25:2c:29:37:0c:b1:39:19:fe:99:ef:
                    95:73:15:74:a2:6a:1d:7e:43:9f:e1:19:96:23:12:
                    f2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:73:73:1A:11:9F:B9:02:E7:C6:3A:AF:03:6B:CF:77:2A:25:0F:25
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73E0431CBBB711F0878B79C4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.160.0/19
                  154.214.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         84:5f:32:83:5c:84:d1:81:f8:86:40:34:1f:8a:e3:c3:95:9b:
         64:a1:cd:11:ca:ed:d6:b6:29:e0:9e:cf:15:54:90:a1:cb:02:
         a1:fc:d8:8b:dd:e5:7f:70:51:8e:b3:8f:b3:38:78:e4:f4:52:
         ca:1f:a0:4a:3c:1d:3c:06:80:4d:3c:31:cc:1b:fc:1f:89:78:
         04:93:15:cb:78:0a:a3:1e:fc:f3:a3:61:4b:95:98:32:90:c0:
         5d:81:25:19:af:cb:48:61:61:79:c2:3f:e3:7b:ef:c8:69:6e:
         4e:7c:32:63:09:5f:ca:3b:0b:21:82:f6:76:49:6b:30:24:b8:
         4e:4e:a1:bd:a1:26:75:53:13:bb:50:e4:4d:62:13:33:73:0f:
         0f:68:79:05:ee:de:ab:48:b4:93:48:e5:c5:7f:68:9a:d5:df:
         17:78:0a:b2:45:0b:46:3f:2e:f6:b9:71:31:d1:95:74:96:6a:
         1a:9f:2e:86:58:83:2a:51:17:64:c7:7c:d6:67:1b:fe:8a:e1:
         c0:da:7f:a2:91:a3:35:dc:be:6b:b5:2f:41:59:1e:f6:4b:61:
         28:57:8a:ce:2e:20:52:3f:27:19:10:f1:3a:4d:93:32:a7:79:
         60:a7:6c:3c:1f:60:1c:e9:f6:d2:28:a6:d9:8b:e8:f3:d0:38:
         b6:b2:b9:d9
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAafLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTA3MDg1NTAwWhcNMjUxMjE0MDg1NTAwWjAYMRYw
FAYDVQQDEw02OTBkYjNlOS00ZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqiIIj76oWhbTIRAqYkTYoTP1sn8bSy/yJfvahwXIKCLfUcsGjG1gBhpD
gaw6WS+ZZiePCbVEYFQuyvjVRMsFfaL04L6sSLA6oFrKNSQJNBLK4fPWlpiRW9g2
SseHeiCQL89tXVM93YIMm99baqasdfSgd+LAw3quAOwAn3Ix9L0l1Ph6ILvTZP9v
ZSiIHXD+Iq/vUl0nbOU49/NCR2kFNzhLTIMH5ZJeMNacDAN3/WT0UnaqpdtRDzqd
8hkBGRfF47gFr4ATMJajYCf/rWjhPy6aXcmfJ4p79vCvT65MwvmDpY9lJSwpNwyx
ORn+me+VcxV0omodfkOf4RmWIxLyrQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFOZz
cxoRn7kC58Y6rwNrz3cqJQ8lMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83M0UwNDMxQ0JCQjcxMUYwODc4Qjc5QzREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFmtGgAwQGmtZAMA0GCSqG
SIb3DQEBCwUAA4IBAQCEXzKDXITRgfiGQDQfiuPDlZtkoc0Ryu3Wtingns8VVJCh
ywKh/NiL3eV/cFGOs4+zOHjk9FLKH6BKPB08BoBNPDHMG/wfiXgEkxXLeAqjHvzz
o2FLlZgykMBdgSUZr8tIYWF5wj/je+/IaW5OfDJjCV/KOwshgvZ2SWswJLhOTqG9
oSZ1UxO7UORNYhMzcw8PaHkF7t6rSLSTSOXFf2ia1d8XeAqyRQtGPy72uXEx0ZV0
lmoany6GWIMqURdkx3zWZxv+iuHA2n+ikaM13L5rtS9BWR72S2EoV4rOLiBSPycZ
EPE6TZMyp3lgp2w8H2Ac6fbSKKbZi+jz0Di2srnZ
-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:33 2025 by rpki-client