This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8660CD88C6D211F0891ACFD0DAE4EC9C.roa
File:                     8660CD88C6D211F0891ACFD0DAE4EC9C.roa (raw, json)
Hash identifier:          NWo6TITY1cLE54Fd9Zbj1kL4M7ljJHmHXm07UXHuoRQ=
Subject key identifier:   40:F8:6F:EB:A3:76:75:B0:FE:4B:3F:C9:BE:CC:E6:46:D7:5D:C6:61
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AA22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8660CD88C6D211F0891ACFD0DAE4EC9C.roa
Signing time:             Fri 21 Nov 2025 12:06:35 +0000
ROA not before:           Fri 21 Nov 2025 12:06:30 +0000
ROA not after:            Sat 27 Dec 2025 12:06:30 +0000
asID:                     17561
IP address blocks:        154.82.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109090 (0x1aa22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 21 12:06:30 2025 GMT
            Not After : Dec 27 12:06:30 2025 GMT
        Subject: CN=692055cb-1600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a1:19:b8:c7:90:5d:68:c7:bb:20:e9:a1:87:
                    0f:fd:fa:74:9c:4e:8b:c6:80:0d:15:6f:7f:b6:f7:
                    25:91:d4:f8:d2:06:4b:ce:7f:1d:c1:39:dd:94:27:
                    d6:3e:a5:71:47:3e:12:65:57:a6:71:c0:d8:20:8c:
                    3c:40:ad:28:e0:d8:88:aa:2d:5c:1a:b8:72:81:c2:
                    20:1a:2a:5b:dd:9d:5f:ae:8c:7d:3a:b4:23:19:62:
                    14:eb:5e:6b:d9:db:fc:16:d6:a0:10:5f:cc:bd:4b:
                    3b:2d:f4:82:1c:56:02:e6:31:73:71:85:80:72:17:
                    e7:a8:23:44:7e:50:50:1b:1e:6b:05:7b:ec:d9:18:
                    38:78:4a:ea:3b:c2:37:f2:5e:9e:37:0f:12:5e:56:
                    a7:60:71:92:de:98:09:26:23:c9:f2:84:0e:d2:f9:
                    7e:3d:71:82:e0:8c:04:1c:ed:77:27:bc:58:8b:a3:
                    71:8e:a3:57:21:b1:f0:93:6c:d1:da:88:74:fb:59:
                    af:9d:5f:01:7b:b3:10:6b:48:b8:64:2e:cb:cd:21:
                    ff:9d:4d:ae:ec:0c:34:80:78:3e:48:c5:72:0b:0d:
                    e2:43:f7:de:d9:40:8c:7a:65:82:78:09:ec:c3:eb:
                    5b:52:41:2b:30:8d:7f:68:96:37:e7:d9:bc:a0:fb:
                    63:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F8:6F:EB:A3:76:75:B0:FE:4B:3F:C9:BE:CC:E6:46:D7:5D:C6:61
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8660CD88C6D211F0891ACFD0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:a4:f4:0f:a5:59:06:19:58:4c:4f:39:e5:31:1f:18:82:cf:
         6a:9a:19:60:bc:83:a6:59:82:64:a2:81:39:ca:8e:48:62:f2:
         74:a3:d0:a3:6d:c7:fb:02:27:c8:a1:07:21:b7:d6:c6:63:56:
         6c:22:4d:e2:eb:c8:ea:0c:3e:9b:21:9d:06:af:9f:45:c2:36:
         34:0f:a8:ad:9e:84:66:7b:f2:5a:3c:e8:50:94:4a:c8:e9:30:
         85:90:16:9f:15:d7:a4:7d:07:a3:ae:07:fd:d5:77:ee:2b:ca:
         e8:6e:ca:2f:2c:0f:48:1b:10:ee:c1:9a:18:e3:7c:a6:e8:34:
         78:7a:f3:1d:5d:13:1e:4c:19:90:59:1d:78:35:e7:d2:37:2d:
         f5:3e:36:6b:a8:49:73:1c:66:9a:14:1f:4d:03:aa:d8:31:74:
         a8:cc:18:fc:e9:d1:d2:82:48:f1:1f:95:97:bc:4e:82:9b:5e:
         46:70:9d:30:be:c5:3f:b9:81:23:24:a7:91:2a:9d:bc:70:c4:
         8d:3c:13:94:ce:d8:db:12:60:e2:93:17:aa:89:a7:e8:e9:6a:
         b5:4e:ae:97:7d:34:a4:2c:6c:dc:06:ea:44:ad:3e:19:0e:08:
         8a:92:48:66:dc:16:10:49:50:f7:e5:8f:32:17:17:d7:c5:60:
         d3:e6:68:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:07 2025 by rpki-client