This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8938AE5AC45611F081523EB7DAE4EC9C.roa
File:                     8938AE5AC45611F081523EB7DAE4EC9C.roa (raw, json)
Hash identifier:          EZq2oQc301EunfDhoLesRtYHziEFq8m3qhMmbIgX9EE=
Subject key identifier:   29:53:FB:ED:C1:6E:A5:75:2F:A9:B7:B9:33:3C:1F:31:07:9C:E4:A7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A988
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8938AE5AC45611F081523EB7DAE4EC9C.roa
Signing time:             Tue 18 Nov 2025 08:14:00 +0000
ROA not before:           Tue 18 Nov 2025 08:13:55 +0000
ROA not after:            Wed 17 Dec 2025 08:13:55 +0000
asID:                     22773
IP address blocks:        154.194.3.0/24 maxlen: 24
                          154.202.14.0/24 maxlen: 24
                          154.202.15.0/24 maxlen: 24
                          154.202.16.0/24 maxlen: 24
                          154.202.17.0/24 maxlen: 24
                          154.202.18.0/24 maxlen: 24
                          154.202.19.0/24 maxlen: 24
                          154.202.20.0/24 maxlen: 24
                          154.202.21.0/24 maxlen: 24
                          154.202.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108936 (0x1a988)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 18 08:13:55 2025 GMT
            Not After : Dec 17 08:13:55 2025 GMT
        Subject: CN=691c2ac8-1fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:51:a3:6a:d3:7c:3a:4f:db:27:3c:26:db:a0:
                    47:c0:08:d3:02:ef:b4:22:bd:29:e5:2b:bf:de:d7:
                    5f:ab:73:d2:76:08:68:72:61:e4:66:e6:5f:d6:53:
                    a4:5c:1f:93:0a:72:bb:e8:c4:bb:97:a2:91:d5:10:
                    8a:71:e9:a8:43:ba:d1:8c:a0:ad:b6:d2:14:06:2b:
                    e0:7f:8d:06:23:e5:53:0f:8b:da:46:db:2d:77:4d:
                    12:62:b8:d4:32:7c:65:94:40:c4:2a:95:5c:ad:9c:
                    3a:77:95:b3:fb:4d:01:eb:80:4a:d3:47:07:20:8f:
                    de:d3:84:e0:62:b6:99:3b:26:e0:45:68:f7:e3:d3:
                    1f:b5:19:33:be:e3:4e:1d:fc:a7:8e:2f:74:b6:74:
                    14:c7:83:63:56:de:e2:60:f5:ff:b2:44:95:55:31:
                    96:00:2a:0c:3b:60:d6:55:8d:57:83:71:56:9e:5e:
                    c8:9e:ce:ed:5f:3b:1c:9c:5e:09:37:01:b7:b5:e5:
                    b8:ae:27:e9:ea:40:3a:f5:44:f9:21:39:92:b5:0a:
                    0c:ed:83:81:98:e1:04:cf:2f:f9:ed:8b:55:99:c7:
                    89:2d:a5:fc:6a:fd:7c:c4:bc:03:55:fb:6f:0a:9a:
                    7a:01:12:5c:35:e6:fd:e0:39:5b:0b:c1:ba:1a:9c:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:53:FB:ED:C1:6E:A5:75:2F:A9:B7:B9:33:3C:1F:31:07:9C:E4:A7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8938AE5AC45611F081523EB7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.3.0/24
                  154.202.14.0-154.202.22.255

    Signature Algorithm: sha256WithRSAEncryption
         6c:6a:93:7f:73:d9:60:cd:33:6f:bf:87:20:17:cf:24:74:c0:
         c8:ad:c0:b8:45:ec:1d:d2:aa:ef:7a:ae:5a:79:a7:b2:f5:79:
         2d:9b:fa:03:6d:ff:43:d2:cc:8e:b6:72:32:ce:df:ad:5f:33:
         7e:8b:45:52:60:e2:c5:6d:6f:12:de:a2:97:c4:e5:10:a3:4b:
         60:cb:48:7c:5e:d0:fe:b3:22:c2:fa:b8:22:56:e8:35:f9:57:
         e7:00:5a:2c:a9:6f:e6:15:48:04:2d:96:b6:12:1e:c4:ce:d6:
         f3:48:31:8a:b4:9d:d5:6f:69:5e:68:2b:65:e0:61:88:8e:62:
         a2:4e:c3:c9:f1:70:d3:fc:ff:47:bf:21:7d:84:9c:7e:f3:3f:
         5f:93:c0:bb:9b:0d:01:f5:2d:4d:6a:74:71:67:45:90:93:6e:
         df:d2:4a:b3:fa:f7:13:cf:6a:49:29:dd:1c:15:53:0b:f3:69:
         60:c6:64:8b:28:d2:94:69:f6:b7:bd:c6:d9:4e:20:45:ca:0f:
         8d:23:76:9e:a2:15:b5:4b:df:43:89:09:06:54:78:0a:aa:ac:
         88:66:40:f9:be:ed:45:f2:39:d9:22:dc:b4:5d:9c:69:0d:9f:
         9f:09:9a:25:30:82:2d:f0:a5:dd:ee:ab:6a:95:2d:f4:ca:4c:
         ae:08:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:37 2025 by rpki-client