This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4E8F6EC6D811F0915E32F6DAE4EC9C.roa
File:                     8B4E8F6EC6D811F0915E32F6DAE4EC9C.roa (raw, json)
Hash identifier:          5C+hEBMNjRF4cqm1NrcQC0QwwqKnzrdIKyJzRPpLnMc=
Subject key identifier:   B3:DA:16:B6:D0:56:F5:7E:17:59:59:5F:85:2A:86:5D:63:16:F7:BD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AA2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4E8F6EC6D811F0915E32F6DAE4EC9C.roa
Signing time:             Fri 21 Nov 2025 12:49:40 +0000
ROA not before:           Fri 21 Nov 2025 12:49:30 +0000
ROA not after:            Tue 30 Dec 2025 12:49:30 +0000
asID:                     401696
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109102 (0x1aa2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 21 12:49:30 2025 GMT
            Not After : Dec 30 12:49:30 2025 GMT
        Subject: CN=69205fe4-80a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:e1:a3:7a:d3:58:a1:a8:2c:52:f9:c3:c3:
                    10:05:64:af:56:82:bf:9b:be:79:4c:b9:0d:a8:f6:
                    19:bf:80:fc:f5:1d:99:8e:d7:f1:e2:37:54:04:0e:
                    8c:d6:ff:3f:31:28:36:40:21:c3:8b:b1:3d:ae:21:
                    f1:25:26:9d:44:99:56:ba:45:fb:1f:42:f7:e2:9a:
                    34:d2:85:9c:d2:74:34:bd:9b:c7:fe:44:47:1a:0d:
                    57:19:5b:fe:da:c8:1f:96:5e:64:61:36:e8:f0:58:
                    5d:13:c6:ca:29:99:46:ad:4a:79:6a:ab:34:dd:bb:
                    00:41:32:f2:1e:25:55:df:bd:71:c9:59:ca:3f:ba:
                    ac:36:a0:8f:7a:41:33:e5:09:f3:c2:61:63:8f:6d:
                    19:62:ce:8c:d9:d3:2b:64:20:f6:4f:30:e1:01:39:
                    ef:ca:cb:4f:31:58:57:d8:63:c8:c2:e5:4c:ab:27:
                    f6:28:13:f4:c5:8e:ab:18:f9:fa:9f:bb:b5:6e:19:
                    fa:69:67:46:bd:d6:76:a2:7d:2e:f3:22:92:9e:1e:
                    d5:86:68:57:9c:66:1f:69:f3:af:c5:53:2b:e2:6a:
                    f5:c1:87:78:c7:0f:9b:79:5b:8c:11:6e:5a:ff:72:
                    33:9b:51:48:17:33:f3:13:95:d6:f5:a1:16:92:8c:
                    db:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DA:16:B6:D0:56:F5:7E:17:59:59:5F:85:2A:86:5D:63:16:F7:BD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4E8F6EC6D811F0915E32F6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:85:5b:63:b0:40:72:e8:93:b2:b0:83:84:92:80:a4:2c:29:
         12:8c:3c:8f:a9:d7:d6:18:83:84:66:20:16:ab:f3:d2:60:2f:
         8e:c0:e7:84:6f:8f:e8:dd:98:30:b2:c3:d0:cd:66:54:c3:04:
         20:5d:b5:58:6b:b4:09:fb:22:48:ff:48:cc:af:01:dc:4b:35:
         68:1d:49:52:5e:d6:c5:15:b1:48:16:86:6f:11:4e:b0:c7:b0:
         6c:ea:1c:3c:7c:69:53:9f:11:2f:d4:a7:b7:c1:86:94:96:ad:
         8d:81:23:2d:e7:4b:de:21:68:6e:03:d5:4c:b0:45:e2:bc:b0:
         ca:ca:8a:82:23:a3:ac:32:ae:db:51:19:2f:93:e3:62:dc:2c:
         99:dd:8c:03:30:24:3d:4a:be:0e:6d:7f:8a:d3:e5:da:fe:d5:
         8d:0d:35:dd:24:ad:e6:b9:d4:92:25:aa:58:15:64:10:69:b8:
         70:02:35:94:cd:2c:a9:48:b2:10:40:b5:30:0d:f5:35:ac:4b:
         24:ec:41:07:c0:83:4c:a8:08:2f:19:17:83:79:41:13:e5:66:
         06:88:9d:fe:1c:cc:e5:a4:7b:27:12:58:12:b4:48:a4:ab:4d:
         9f:27:6f:71:a6:33:27:5c:d7:03:2c:a9:ac:b1:fe:dd:7c:02:
         72:1b:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:28:58 2025 by rpki-client