This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83C6B97CCF8111F0B7E16EDFDAE4EC9C.roa
File:                     83C6B97CCF8111F0B7E16EDFDAE4EC9C.roa (raw, json)
Hash identifier:          wyTDptzdsv1h5B6yI0ki/kbLz4/PEBkvmQhr2uICcYw=
Subject key identifier:   D8:97:4C:6C:AF:76:78:6D:0B:90:65:AF:FB:98:1F:99:41:0F:06:2C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83C6B97CCF8111F0B7E16EDFDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 13:19:22 +0000
ROA not before:           Tue 02 Dec 2025 13:19:17 +0000
ROA not after:            Wed 31 Dec 2025 13:19:17 +0000
asID:                     328608
IP address blocks:        154.200.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109449 (0x1ab89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  2 13:19:17 2025 GMT
            Not After : Dec 31 13:19:17 2025 GMT
        Subject: CN=692ee75a-3294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:07:b8:5e:eb:b0:a2:06:4a:06:5e:f1:f5:
                    f1:ed:cb:1a:2e:fb:58:18:fc:8f:a8:23:61:25:2c:
                    64:bb:93:76:cc:ef:bd:67:f4:bb:e6:2c:3c:58:45:
                    83:a0:e4:3f:83:10:97:aa:57:d6:ae:53:ef:6b:5b:
                    36:ae:b8:02:3f:3e:52:5b:5c:22:69:89:32:d1:ef:
                    2a:a9:01:63:ac:82:3a:7d:56:19:bb:10:ea:d1:2a:
                    12:7a:ec:ac:1a:84:0a:f7:e8:17:bd:bf:5f:65:88:
                    ee:8c:cb:95:65:a5:4f:c5:61:11:2c:ac:9c:f8:06:
                    85:ef:48:a1:27:9c:32:d4:06:fe:9e:fd:53:76:b7:
                    84:8d:2d:a5:73:33:6a:4b:51:4f:cf:e0:6b:b3:e3:
                    0c:d7:8f:70:d9:58:32:d7:51:d1:6c:98:7e:11:9d:
                    18:99:6e:ea:62:03:1c:ff:fa:7f:0d:4a:4a:a3:36:
                    b7:60:67:1a:f1:cd:8c:0c:85:86:d6:8c:dd:05:7f:
                    0a:da:d6:4e:01:56:c2:e3:10:22:0b:6d:f2:76:ff:
                    77:53:b4:5f:24:b5:21:4a:40:f4:10:48:ca:27:01:
                    6c:0b:a6:d5:f9:17:a6:95:aa:63:3e:e9:0f:59:21:
                    f3:b6:b1:fd:43:19:44:1b:84:cf:c8:b1:38:95:5d:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:97:4C:6C:AF:76:78:6D:0B:90:65:AF:FB:98:1F:99:41:0F:06:2C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83C6B97CCF8111F0B7E16EDFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:e9:22:a9:e1:f8:fa:47:d3:cb:da:48:77:4c:5c:7c:dd:1d:
         d6:b9:64:dd:e1:70:c2:6c:7b:23:e3:3a:35:10:76:53:62:90:
         bb:5a:70:fe:6d:0b:67:aa:54:3a:5b:fb:40:78:26:97:84:74:
         9f:12:91:fd:97:89:78:c6:2c:0f:7d:d5:eb:76:42:fd:f9:5b:
         09:a9:9c:c5:6b:e2:07:2b:89:29:14:47:c1:83:c0:df:ec:04:
         0c:d4:8c:c5:03:e9:f4:fb:da:1c:f7:25:4d:67:16:63:09:b4:
         db:e7:3c:7a:f7:36:64:e2:2e:68:39:aa:cd:71:fc:11:6b:47:
         a7:70:aa:1d:1b:8e:4f:66:5e:f6:51:8b:3a:ac:1e:d4:d5:57:
         2a:d6:1b:5c:1e:dd:42:71:a1:a3:ff:b9:2b:93:f0:da:9e:96:
         d7:c1:6e:f3:42:31:82:37:42:5c:09:a5:93:6f:25:83:49:4f:
         b8:d6:2a:35:83:94:fd:ae:cf:7c:ac:4e:6b:31:a9:23:5b:30:
         2b:4b:56:d7:3d:61:e9:97:b7:b4:65:cf:69:64:a9:ec:dc:b1:
         a7:a7:7c:a6:3e:59:c3:32:2b:5e:3b:65:f8:c3:5b:dd:33:40:
         7b:95:5d:b8:66:43:8b:c1:98:12:e7:d2:56:a8:06:6e:ef:6a:
         41:2a:9d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:19 2025 by rpki-client