This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849F7BEEBFD811F0B4156FD3DAE4EC9C.roa
File:                     849F7BEEBFD811F0B4156FD3DAE4EC9C.roa (raw, json)
Hash identifier:          6W1Ly6aMFyizlXrZivwuz6OIi/t5p+g0TL3iogd6RB8=
Subject key identifier:   66:0A:9E:73:1D:5D:B0:91:A5:45:A4:DA:9C:C8:DD:AB:BA:8C:CF:23
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A8A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849F7BEEBFD811F0B4156FD3DAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 15:01:51 +0000
ROA not before:           Wed 12 Nov 2025 15:01:46 +0000
ROA not after:            Sat 20 Dec 2025 15:01:46 +0000
asID:                     25198
IP address blocks:        154.83.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108712 (0x1a8a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 12 15:01:46 2025 GMT
            Not After : Dec 20 15:01:46 2025 GMT
        Subject: CN=6914a15f-4b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:24:72:82:58:6c:3d:4e:ba:e2:26:f6:f8:e4:
                    6c:51:10:d7:e5:f0:e7:45:78:a5:32:d1:92:b3:40:
                    67:11:fc:20:25:35:6e:ff:57:04:47:80:19:be:b9:
                    ab:93:3b:90:e1:46:9d:02:45:90:74:43:ab:6c:c0:
                    c9:a9:af:a9:f9:74:94:1f:4b:42:5c:1e:ce:43:b3:
                    04:f9:1b:1b:0f:fb:c8:61:b6:e3:40:f8:ed:cc:75:
                    ee:70:19:9d:27:b1:be:5f:6b:2d:73:1d:46:17:41:
                    44:95:8d:76:05:8b:59:84:cd:85:62:f9:ff:8a:c6:
                    a8:10:0f:38:48:5d:92:8d:8a:96:7a:c9:6a:2e:7c:
                    60:2d:b7:f1:0e:20:a6:58:8e:92:38:51:d9:b4:50:
                    87:24:a1:a0:90:95:4c:e8:ba:98:09:17:ec:d7:1c:
                    e9:16:df:c1:46:dc:2f:17:c9:f6:ae:5a:30:a1:de:
                    6c:8d:60:1d:3e:c2:c3:6b:23:4a:71:76:97:f4:39:
                    f4:1d:55:91:96:59:54:c4:6f:dd:0f:fd:1c:2b:5b:
                    30:48:f4:6c:fd:c8:06:48:e3:21:2a:07:42:c5:4f:
                    05:8e:f7:db:40:95:ff:32:5c:58:05:e3:9e:a2:6c:
                    9b:b3:de:f3:85:77:05:a3:5a:73:b9:36:c5:7f:95:
                    f9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0A:9E:73:1D:5D:B0:91:A5:45:A4:DA:9C:C8:DD:AB:BA:8C:CF:23
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849F7BEEBFD811F0B4156FD3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:aa:bb:49:35:ef:74:2c:21:8d:c6:2f:2d:cf:2a:72:50:
         85:ea:5f:e3:97:0e:90:4c:71:d2:04:8a:62:1e:c1:f6:fe:f1:
         25:43:3b:ef:fe:66:aa:37:38:b3:b6:c5:81:ab:2e:29:bf:4e:
         55:38:9b:b9:63:87:b8:e2:08:6b:e8:e1:e1:47:2b:dd:2c:3f:
         03:17:e8:fe:21:a7:a3:2e:7a:08:38:42:fc:d3:5b:d1:d8:91:
         17:99:b7:74:04:9d:45:73:9e:37:03:bd:8b:27:73:35:58:4d:
         b7:f5:d4:20:8b:56:d8:fe:3b:fe:c9:74:8f:3a:ad:c0:20:fd:
         22:02:a8:db:35:d5:61:0e:d4:1f:5d:88:2c:16:77:aa:7d:d8:
         78:b5:16:ab:b0:99:99:5a:de:9b:a2:87:4a:27:61:20:ad:92:
         0c:dd:a9:49:a3:1f:7b:f5:58:f9:94:74:23:55:eb:6d:52:65:
         9f:2d:90:23:65:fc:04:0f:f4:5f:70:06:fa:cd:58:54:dc:e2:
         9b:6a:f2:08:54:be:cd:75:6e:08:ef:43:0d:05:4b:ec:93:25:
         e2:ee:b2:d1:e7:8f:82:af:3f:cd:06:64:56:b2:4c:00:42:9a:
         d8:a4:03:03:57:8c:c3:6d:24:6b:58:19:dd:e2:d7:6c:8f:13:
         68:5e:06:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaioMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTEyMTUwMTQ2WhcNMjUxMjIwMTUwMTQ2WjAYMRYw
FAYDVQQDEw02OTE0YTE1Zi00YjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+CRyglhsPU664ib2+ORsURDX5fDnRXilMtGSs0BnEfwgJTVu/1cER4AZ
vrmrkzuQ4UadAkWQdEOrbMDJqa+p+XSUH0tCXB7OQ7ME+RsbD/vIYbbjQPjtzHXu
cBmdJ7G+X2stcx1GF0FElY12BYtZhM2FYvn/isaoEA84SF2SjYqWeslqLnxgLbfx
DiCmWI6SOFHZtFCHJKGgkJVM6LqYCRfs1xzpFt/BRtwvF8n2rlowod5sjWAdPsLD
ayNKcXaX9Dn0HVWRlllUxG/dD/0cK1swSPRs/cgGSOMhKgdCxU8FjvfbQJX/MlxY
BeOeomybs97zhXcFo1pzuTbFf5X5PQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGYK
nnMdXbCRpUWk2pzI3au6jM8jMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NDlGN0JFRUJGRDgxMUYwQjQxNTZGRDNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOMMA0GCSqGSIb3DQEB
CwUAA4IBAQB3/Kq7STXvdCwhjcYvLc8qclCF6l/jlw6QTHHSBIpiHsH2/vElQzvv
/maqNziztsWBqy4pv05VOJu5Y4e44ghr6OHhRyvdLD8DF+j+IaejLnoIOEL801vR
2JEXmbd0BJ1Fc543A72LJ3M1WE239dQgi1bY/jv+yXSPOq3AIP0iAqjbNdVhDtQf
XYgsFneqfdh4tRarsJmZWt6boodKJ2EgrZIM3alJox979Vj5lHQjVettUmWfLZAj
ZfwED/RfcAb6zVhU3OKbavIIVL7NdW4I70MNBUvskyXi7rLR54+Crz/NBmRWskwA
QprYpAMDV4zDbSRrWBnd4tdsjxNoXgaj
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:12 2025 by rpki-client