This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AD0C398CC4311F0B4C16695DAE4EC9C.roa
File:                     8AD0C398CC4311F0B4C16695DAE4EC9C.roa (raw, json)
Hash identifier:          odfw2K7HkstGl8AuKClbH2GxelNhzMfasOlCc4wzpB8=
Subject key identifier:   1A:67:6C:CE:26:EE:82:A4:06:7C:8C:D0:50:F0:11:AC:D0:8F:38:CA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AAEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AD0C398CC4311F0B4C16695DAE4EC9C.roa
Signing time:             Fri 28 Nov 2025 10:18:11 +0000
ROA not before:           Fri 28 Nov 2025 10:18:07 +0000
ROA not after:            Sun 28 Dec 2025 10:18:07 +0000
asID:                     48031
IP address blocks:        154.92.12.0/24 maxlen: 24
                          154.92.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109294 (0x1aaee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 28 10:18:07 2025 GMT
            Not After : Dec 28 10:18:07 2025 GMT
        Subject: CN=692976e3-535e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:d7:b9:e0:66:62:21:f6:2f:a6:7d:83:4a:
                    ce:cc:84:98:c0:d4:3d:46:d3:9e:83:d7:04:e8:5b:
                    9f:f9:b1:4d:5c:d6:56:ea:7a:ac:99:db:a0:52:9b:
                    b9:96:b6:06:12:9d:6b:8e:b3:0d:c5:7f:a6:6a:af:
                    e8:c1:b1:bd:1f:d8:99:d0:3f:3d:0d:ee:a7:d8:2f:
                    f0:88:fa:b5:cd:15:41:25:df:bd:6b:89:da:3f:de:
                    58:b2:98:96:2c:be:6c:29:5c:7a:6c:03:1c:bf:96:
                    a6:2d:ec:cb:f0:f3:5c:cf:2b:36:0b:ce:f7:f1:b0:
                    c8:92:de:b1:f8:69:92:c8:88:09:da:6f:73:9b:40:
                    6d:11:7f:59:6d:dc:34:d9:f5:5e:1d:ff:49:2c:f4:
                    35:2c:18:83:a0:78:08:53:af:26:a6:49:58:9f:3f:
                    d3:e8:67:f1:00:9f:7e:0d:d0:08:9c:b5:e4:23:b7:
                    65:e4:ff:40:9c:0b:cc:fa:6f:0b:99:fb:91:10:e2:
                    0b:a0:47:f2:4b:1b:43:8a:30:ef:55:ab:b9:2c:e2:
                    6b:8e:94:fb:37:07:e5:36:93:d0:10:e9:d7:6b:78:
                    8c:0b:32:76:e4:00:dd:ae:51:06:16:33:cb:ca:12:
                    68:c9:48:79:8a:fb:f5:a7:e4:33:4f:93:12:43:44:
                    44:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:67:6C:CE:26:EE:82:A4:06:7C:8C:D0:50:F0:11:AC:D0:8F:38:CA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AD0C398CC4311F0B4C16695DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:ce:86:4d:91:bc:1a:76:76:ae:49:12:db:b6:a1:40:6e:8e:
         1c:8c:a8:1d:8f:21:1d:80:03:f2:94:ce:aa:0a:fd:ec:fc:30:
         5b:2e:18:cc:df:40:ba:b4:99:c0:09:17:fe:c4:0f:8b:dd:91:
         25:87:37:cc:85:cc:0d:68:07:05:69:5f:40:5d:2c:86:06:1f:
         5f:c1:fb:0f:10:19:93:25:27:54:da:33:f4:9b:88:9c:c2:ce:
         d5:31:c8:68:0c:dc:4f:62:b7:19:29:49:02:2b:51:d7:78:bb:
         a1:6b:3b:a5:73:4c:28:c8:cc:ed:5a:e7:3f:13:3e:54:83:b3:
         7f:92:19:59:70:c5:44:54:59:49:c8:6f:ba:3a:0f:34:35:b5:
         73:96:5d:35:b8:5f:42:4c:68:65:46:d2:c1:41:73:eb:cb:49:
         bd:6a:f0:7a:6c:2a:26:b4:e4:bf:cf:fc:05:84:3b:e3:64:99:
         f2:87:09:12:09:58:75:f5:b4:ff:2c:f5:86:92:7b:d5:d1:89:
         53:24:98:17:66:21:da:d3:71:cf:ba:09:f8:72:c9:22:6d:b5:
         22:a6:a4:ba:ab:7d:e9:b9:93:95:22:21:a9:df:4c:9f:5c:56:
         11:58:58:fb:93:68:86:9e:e2:d8:bb:b1:06:66:b4:ea:d5:b0:
         42:e6:b0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:08 2025 by rpki-client