This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77AB3988BBC211F082A4668BDAE4EC9C.roa
File:                     77AB3988BBC211F082A4668BDAE4EC9C.roa (raw, json)
Hash identifier:          /r8PxYUiPKFhe0jpqBQvxc0e6OHAA2BTF1EnsBrwbx4=
Subject key identifier:   DF:FD:35:A5:39:FE:37:9D:08:C7:88:1B:F7:35:69:57:4B:39:FA:EF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A7DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77AB3988BBC211F082A4668BDAE4EC9C.roa
Signing time:             Fri 07 Nov 2025 10:13:56 +0000
ROA not before:           Fri 07 Nov 2025 10:13:51 +0000
ROA not after:            Sat 27 Dec 2025 10:13:51 +0000
asID:                     401696
IP address blocks:        154.219.96.0/19 maxlen: 24
                          154.222.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108511 (0x1a7df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  7 10:13:51 2025 GMT
            Not After : Dec 27 10:13:51 2025 GMT
        Subject: CN=690dc664-dc75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:79:4f:83:50:34:2f:1f:e7:bf:a0:a4:24:51:
                    19:31:32:b1:07:cc:01:60:5a:cf:b1:a6:14:5c:ce:
                    03:7e:bc:4c:cb:31:11:dd:3b:ee:f6:81:0f:5f:5c:
                    4e:f8:ab:6d:64:fb:f3:e5:1c:6c:0f:37:d5:30:2f:
                    b3:19:ea:f4:be:e8:dd:44:ff:7c:2b:7d:05:f7:49:
                    eb:f9:94:ba:f8:97:20:8e:7f:ab:13:6b:67:20:de:
                    13:7b:49:63:cf:e9:28:d2:b2:fd:93:28:02:02:c4:
                    13:c2:de:ed:99:3e:f6:2d:b6:34:6d:b2:fd:27:e1:
                    39:ec:4f:67:74:20:cd:5e:b1:23:5a:a3:2c:60:cd:
                    b0:de:59:a4:d8:a2:d1:2f:89:9b:c3:f9:20:cc:7c:
                    5e:81:64:a2:1f:bb:88:25:66:35:2e:98:82:bf:72:
                    7a:46:ca:11:ba:9e:a6:43:4b:0f:b3:23:3c:1c:ce:
                    89:66:e5:10:dc:b1:47:41:6a:97:43:45:1a:6a:78:
                    f4:b5:e6:b4:d1:af:95:02:c3:2a:c2:44:90:d3:51:
                    c8:7e:6d:16:77:b7:a3:f4:6f:f3:64:12:13:69:50:
                    cc:d6:4c:7b:e1:36:44:5a:57:e7:70:9f:6a:eb:ed:
                    f9:86:6d:a3:53:8f:c5:11:9b:a5:e2:b4:48:ea:30:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FD:35:A5:39:FE:37:9D:08:C7:88:1B:F7:35:69:57:4B:39:FA:EF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77AB3988BBC211F082A4668BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.96.0/19
                  154.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:4f:88:06:72:34:27:c7:84:68:f2:7f:05:b3:d9:68:c8:e2:
         fc:26:d1:cb:c7:63:af:d4:f3:79:7e:d9:61:98:97:ca:13:7f:
         7e:43:d3:79:82:4e:4a:72:bf:b5:d8:78:dc:7d:32:86:9f:e9:
         ca:dd:f8:81:7c:05:cf:48:64:2c:7e:57:8d:e1:6a:5a:52:7b:
         16:c8:f5:5c:3f:a2:b4:99:53:06:6c:d3:b3:44:7a:fd:07:2e:
         ef:d1:a4:06:fb:71:ed:f2:95:c3:b5:13:1c:d2:52:2b:56:f5:
         40:c5:67:c4:95:4f:1a:a5:0d:ee:ea:43:a1:bb:c8:26:79:40:
         7e:06:74:c0:df:80:0c:49:9d:d8:71:a0:3c:5b:b4:ce:97:39:
         0c:cf:8a:24:cd:9f:92:d0:4d:62:c7:f2:75:83:bc:63:a7:46:
         71:ad:6b:10:ca:38:e7:ae:64:c7:93:dc:72:63:ed:52:c9:f4:
         01:b4:b0:d2:13:8a:22:73:bd:59:70:28:86:eb:bc:bf:55:b3:
         5c:3e:9a:66:3a:35:9d:2b:f9:64:ba:a1:c7:e3:8f:8a:e3:81:
         d3:9c:40:38:b7:c0:c5:a2:cc:ea:bb:b3:ba:24:35:f5:14:58:
         91:94:a3:60:f0:bb:f8:fd:02:bf:90:c4:63:8c:72:9e:74:40:
         34:f6:36:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:29:00 2025 by rpki-client