This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/901DFDA6BFDD11F08F23F2F0DAE4EC9C.roa
File:                     901DFDA6BFDD11F08F23F2F0DAE4EC9C.roa (raw, json)
Hash identifier:          hptvP7klI0UuCMCSUei+5zoif17hifK3X/QDjHzYUis=
Subject key identifier:   DF:7B:21:5F:0D:22:8F:D2:C6:32:75:86:3F:F4:53:6A:17:00:14:44
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A8B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/901DFDA6BFDD11F08F23F2F0DAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 15:37:58 +0000
ROA not before:           Wed 12 Nov 2025 15:37:52 +0000
ROA not after:            Sun 04 Jan 2026 15:37:52 +0000
asID:                     20326
IP address blocks:        154.194.32.0/24 maxlen: 24
                          154.194.192.0/23 maxlen: 24
                          154.194.206.0/24 maxlen: 24
                          154.198.165.0/24 maxlen: 24
                          154.198.166.0/23 maxlen: 24
                          154.198.176.0/21 maxlen: 24
                          154.202.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108720 (0x1a8b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 12 15:37:52 2025 GMT
            Not After : Jan  4 15:37:52 2026 GMT
        Subject: CN=6914a9d6-dc3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:ad:a8:b3:04:fa:1e:76:bb:11:8c:31:09:
                    69:54:80:8b:48:7f:4d:5e:17:c2:f3:62:cd:2e:55:
                    e1:df:d8:0b:0c:30:0d:b2:44:37:51:2e:f9:3f:79:
                    4d:e1:0f:38:5f:3e:82:b4:e4:ac:85:6c:99:6c:07:
                    c6:95:50:40:9c:88:28:41:00:a3:d6:c7:0d:1e:8f:
                    83:a0:90:58:96:22:ec:ff:53:54:1c:51:83:8d:f9:
                    7d:78:27:ce:c3:55:27:92:d2:7a:12:b8:58:d2:4b:
                    c3:9a:56:70:e8:e7:66:30:95:c2:91:2d:cd:e5:49:
                    c4:ab:c5:42:36:44:e0:e1:0d:65:ea:60:6b:73:26:
                    77:d6:57:00:ab:de:ca:71:94:b6:e0:34:5d:36:c1:
                    eb:71:f6:38:cd:8e:4c:3c:72:29:13:22:ee:9f:56:
                    c2:d2:fb:56:b0:a6:3d:2c:a4:a1:8c:ba:55:c0:b2:
                    e4:c4:f2:7f:41:d8:1f:f2:0b:43:bc:f9:50:79:bf:
                    0a:c0:83:d7:0d:39:b7:ed:1e:f0:d2:ee:1a:28:6a:
                    ac:ae:d7:e5:21:51:36:38:3c:eb:e6:9a:fe:b5:02:
                    36:27:fc:92:58:e4:50:d7:f3:5b:ba:c3:e0:4c:a9:
                    e6:ad:cc:e0:1e:ec:24:11:1f:cb:29:06:7a:3f:35:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7B:21:5F:0D:22:8F:D2:C6:32:75:86:3F:F4:53:6A:17:00:14:44
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/901DFDA6BFDD11F08F23F2F0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.32.0/24
                  154.194.192.0/23
                  154.194.206.0/24
                  154.198.165.0-154.198.167.255
                  154.198.176.0/21
                  154.202.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:15:ac:a0:a6:a2:97:6e:39:5b:71:83:e3:7a:02:be:f2:ed:
         af:c2:cd:29:a7:6c:6a:b0:03:f5:cb:1a:d4:f5:61:04:93:ab:
         07:4b:a5:0b:43:7a:57:c4:8f:a1:f1:9d:e6:1d:cc:7b:0a:5a:
         1c:34:a6:ad:49:65:3e:2f:a7:e2:50:78:1e:b7:1f:be:d4:7a:
         b2:11:11:94:db:18:a9:4c:c9:f3:a1:c8:3f:27:43:91:ee:92:
         fa:ca:fc:59:26:fe:0d:a2:8f:fe:46:57:15:59:d5:86:cf:11:
         ae:84:0d:88:79:8a:c4:bd:c3:1b:54:c8:e4:34:ea:d5:3c:3b:
         b9:4e:48:84:8f:b6:19:00:52:6b:f9:69:48:fd:6b:2b:77:03:
         b8:67:2d:3b:5e:98:56:b3:65:b3:33:c2:49:d0:bf:ff:8e:89:
         f8:f6:d1:a8:3e:78:83:51:7c:1a:58:08:56:b6:97:24:83:21:
         f2:12:e0:c8:14:45:be:c5:16:ed:c0:b0:31:f6:13:7b:9c:cb:
         c2:38:54:89:f1:75:3b:aa:ed:25:35:79:d4:e5:5c:27:53:97:
         6c:c0:88:a9:ba:f7:b8:50:dc:d9:14:41:ef:32:a8:04:ef:c1:
         f8:78:95:7d:44:76:b0:be:79:55:1b:d0:fd:db:1d:67:7f:cf:
         87:25:df:ca
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAaiwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTEyMTUzNzUyWhcNMjYwMTA0MTUzNzUyWjAYMRYw
FAYDVQQDEw02OTE0YTlkNi1kYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwO+tqLME+h52uxGMMQlpVICLSH9NXhfC82LNLlXh39gLDDANskQ3US75
P3lN4Q84Xz6CtOSshWyZbAfGlVBAnIgoQQCj1scNHo+DoJBYliLs/1NUHFGDjfl9
eCfOw1UnktJ6ErhY0kvDmlZw6OdmMJXCkS3N5UnEq8VCNkTg4Q1l6mBrcyZ31lcA
q97KcZS24DRdNsHrcfY4zY5MPHIpEyLun1bC0vtWsKY9LKShjLpVwLLkxPJ/Qdgf
8gtDvPlQeb8KwIPXDTm37R7w0u4aKGqsrtflIVE2ODzr5pr+tQI2J/ySWORQ1/Nb
usPgTKnmrczgHuwkER/LKQZ6PzWTcwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFN97
IV8NIo/SxjJ1hj/0U2oXABREMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MDFERkRBNkJGREQxMUYwOEYyM0YyRjBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAmsIgAwQBmsLAAwQAmsLO
MAwDBACaxqUDBAOaxqADBAOaxrADBACaykswDQYJKoZIhvcNAQELBQADggEBAE8V
rKCmopduOVtxg+N6Ar7y7a/CzSmnbGqwA/XLGtT1YQSTqwdLpQtDelfEj6HxneYd
zHsKWhw0pq1JZT4vp+JQeB63H77UerIREZTbGKlMyfOhyD8nQ5HukvrK/Fkm/g2i
j/5GVxVZ1YbPEa6EDYh5isS9wxtUyOQ06tU8O7lOSISPthkAUmv5aUj9ayt3A7hn
LTtemFazZbMzwknQv/+Oifj20ag+eINRfBpYCFa2lySDIfIS4MgURb7FFu3AsDH2
E3ucy8I4VInxdTuq7SU1edTlXCdTl2zAiKm697hQ3NkUQe8yqATvwfh4lX1EdrC+
eVUb0P3bHWd/z4cl38o=
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:10 2025 by rpki-client