This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8931B1B6C14711F080AEE6E2DAE4EC9C.roa
File:                     8931B1B6C14711F080AEE6E2DAE4EC9C.roa (raw, json)
Hash identifier:          3lade0vc3tvLGx/OTmDjsbv6k1wqoC9y5r7/c14ej5M=
Subject key identifier:   41:8E:7D:18:B8:8A:D7:A5:2F:D6:BD:F9:3C:A7:CB:39:B2:75:37:C8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A912
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8931B1B6C14711F080AEE6E2DAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 10:49:04 +0000
ROA not before:           Fri 14 Nov 2025 10:48:59 +0000
ROA not after:            Thu 05 Mar 2026 10:48:59 +0000
asID:                     400999
IP address blocks:        154.88.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108818 (0x1a912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 14 10:48:59 2025 GMT
            Not After : Mar  5 10:48:59 2026 GMT
        Subject: CN=69170920-2231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:b3:0d:a1:4d:4b:10:eb:9a:15:de:a4:91:
                    7c:5a:ba:f9:b1:ca:6a:fb:3e:f6:81:5b:c5:4c:52:
                    3b:7c:f7:2c:25:e8:14:cb:74:8e:50:37:ab:df:16:
                    a8:73:d5:b9:06:cc:70:b6:cb:2b:ef:4e:cf:db:7a:
                    b2:90:cc:c5:2f:f7:dd:79:13:61:c1:05:49:ee:3a:
                    f1:b2:00:9a:48:b8:a7:88:1d:17:92:50:96:5a:a9:
                    ca:49:8b:51:2e:23:c0:a0:3e:5e:21:ee:e5:f6:71:
                    72:f1:cc:fa:28:93:c3:9e:47:3f:ca:25:78:3f:7c:
                    0a:ab:91:59:ca:5d:3f:7c:df:c1:78:46:23:c7:86:
                    78:35:fa:bd:b2:54:a1:57:e3:f7:a4:1e:c3:8d:b3:
                    a5:b2:90:a7:c2:01:fb:0f:73:80:54:50:eb:7f:47:
                    9a:cc:ce:ec:3a:10:22:b0:bb:d6:33:e0:fe:48:d6:
                    6e:82:c6:d4:b0:e4:eb:1b:03:62:94:fe:cf:64:6e:
                    bd:f3:1a:70:aa:22:9a:dd:ca:d3:a1:c9:a8:65:d8:
                    95:43:20:47:3f:49:5e:62:b2:6f:68:61:ee:7c:1f:
                    e9:46:27:43:0f:88:97:7b:e6:5b:e3:0f:5c:f6:54:
                    43:3b:7a:5b:49:36:4b:36:02:61:eb:70:9d:92:f1:
                    47:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8E:7D:18:B8:8A:D7:A5:2F:D6:BD:F9:3C:A7:CB:39:B2:75:37:C8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8931B1B6C14711F080AEE6E2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:bb:41:2c:c5:d7:a0:ff:66:89:12:77:d0:7b:6f:e5:e3:72:
         b9:de:39:7c:9c:71:c3:6a:31:6a:d0:31:a7:ad:d4:95:5b:a0:
         6f:48:36:07:6b:0d:45:e7:19:05:b5:c9:a0:4c:c5:87:a1:8a:
         f2:ba:60:9b:ca:fb:72:91:87:46:e9:71:28:c5:f1:8d:a4:44:
         f3:b3:53:c8:87:04:ef:a9:18:a6:a2:81:d4:a0:3d:15:3c:f5:
         e2:8d:ac:4c:0c:29:9e:fe:0d:e6:01:a2:98:78:0d:ad:c1:2a:
         56:dd:65:c3:12:58:49:74:6a:bc:af:1e:8b:61:91:43:a8:e1:
         aa:f2:f2:12:ec:b7:27:6a:b0:61:91:f8:3c:23:5a:09:67:c2:
         3d:8c:6f:8c:95:5b:f2:39:77:02:aa:40:6a:11:00:d9:f3:2b:
         ff:44:d9:ba:9f:1d:3b:05:8d:cd:f3:e0:63:66:05:77:61:e1:
         1d:5a:de:1d:c0:5e:b8:f3:5f:19:4b:48:2e:70:c7:7f:8f:08:
         f3:dc:2f:4c:56:2e:1d:57:80:ac:73:4d:59:98:5c:60:7f:64:
         80:5d:c6:f8:40:35:1b:92:b6:01:2c:b0:17:3d:6e:e1:87:f6:
         f5:04:78:e3:e2:c2:3c:ce:de:6e:92:e9:ad:4c:92:24:fa:57:
         45:52:5b:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAakSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTE0MTA0ODU5WhcNMjYwMzA1MTA0ODU5WjAYMRYw
FAYDVQQDEw02OTE3MDkyMC0yMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxfOzDaFNSxDrmhXepJF8Wrr5scpq+z72gVvFTFI7fPcsJegUy3SOUDer
3xaoc9W5Bsxwtssr707P23qykMzFL/fdeRNhwQVJ7jrxsgCaSLiniB0XklCWWqnK
SYtRLiPAoD5eIe7l9nFy8cz6KJPDnkc/yiV4P3wKq5FZyl0/fN/BeEYjx4Z4Nfq9
slShV+P3pB7DjbOlspCnwgH7D3OAVFDrf0eazM7sOhAisLvWM+D+SNZugsbUsOTr
GwNilP7PZG698xpwqiKa3crTocmoZdiVQyBHP0leYrJvaGHufB/pRidDD4iXe+Zb
4w9c9lRDO3pbSTZLNgJh63CdkvFHuwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEGO
fRi4itelL9a9+TynyzmydTfIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OTMxQjFCNkMxNDcxMUYwODBBRUU2RTJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlgDMA0GCSqGSIb3DQEB
CwUAA4IBAQB8u0Esxdeg/2aJEnfQe2/l43K53jl8nHHDajFq0DGnrdSVW6BvSDYH
aw1F5xkFtcmgTMWHoYryumCbyvtykYdG6XEoxfGNpETzs1PIhwTvqRimooHUoD0V
PPXijaxMDCme/g3mAaKYeA2twSpW3WXDElhJdGq8rx6LYZFDqOGq8vIS7LcnarBh
kfg8I1oJZ8I9jG+MlVvyOXcCqkBqEQDZ8yv/RNm6nx07BY3N8+BjZgV3YeEdWt4d
wF64818ZS0gucMd/jwjz3C9MVi4dV4Csc01ZmFxgf2SAXcb4QDUbkrYBLLAXPW7h
h/b1BHjj4sI8zt5ukumtTJIk+ldFUls5
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:28:57 2025 by rpki-client