This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9090A40ACC2611F0A96485E2DAE4EC9C.roa
File:                     9090A40ACC2611F0A96485E2DAE4EC9C.roa (raw, json)
Hash identifier:          xtz36XsSJN+jdjxvDdkLguyV6qi73xfnvhMlD21wt+E=
Subject key identifier:   1B:BD:0A:2E:F2:55:11:E3:E2:E3:41:BC:C1:10:88:8B:0E:AA:6B:DB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AAE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9090A40ACC2611F0A96485E2DAE4EC9C.roa
Signing time:             Fri 28 Nov 2025 06:50:46 +0000
ROA not before:           Fri 28 Nov 2025 06:50:41 +0000
ROA not after:            Mon 08 Dec 2025 06:50:41 +0000
asID:                     46071
IP address blocks:        154.210.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109286 (0x1aae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 28 06:50:41 2025 GMT
            Not After : Dec  8 06:50:41 2025 GMT
        Subject: CN=69294646-eb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:8b:1f:14:81:f6:cc:58:76:22:a4:ff:b1:
                    3c:29:bc:72:72:51:c4:98:ea:4f:e1:5e:b9:6b:11:
                    a4:b0:ea:3d:6f:31:45:e9:cc:32:80:c0:0f:66:e6:
                    e7:79:c5:3e:67:15:37:8a:94:29:f6:8a:d3:c2:39:
                    5c:c8:f2:7c:41:52:63:9b:90:78:52:38:2f:07:92:
                    9e:c9:6f:99:ff:2d:6b:a6:11:8c:0f:5c:5a:79:b3:
                    85:e5:fd:83:44:d2:ae:4f:7b:ae:96:5d:38:ae:d8:
                    eb:04:8a:35:07:7c:2c:be:fa:4e:b6:44:47:f7:1b:
                    8e:30:b2:b8:1d:95:de:d1:6a:6f:37:a3:2e:a6:a6:
                    6e:99:bf:ab:75:6c:02:06:bb:05:31:a7:be:d4:aa:
                    64:70:03:8c:99:34:8d:88:52:f6:47:06:7f:2b:43:
                    19:4d:4c:91:ea:23:a4:21:de:cb:77:f6:43:68:e8:
                    6a:12:a8:d8:f7:f8:64:9b:c8:a0:6d:7a:8f:7f:ed:
                    91:7a:d3:25:14:7e:c9:5e:a5:f7:07:ce:4d:0a:35:
                    31:1e:d6:48:3e:e6:7e:55:76:c9:7d:d5:8f:89:0e:
                    dc:21:5e:23:5a:e1:8d:f5:1a:ac:3c:e7:07:b4:2c:
                    b2:9e:4e:a8:87:78:e4:95:ce:0a:7e:bb:e9:b7:a0:
                    28:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BD:0A:2E:F2:55:11:E3:E2:E3:41:BC:C1:10:88:8B:0E:AA:6B:DB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9090A40ACC2611F0A96485E2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:63:de:ae:e5:15:63:36:3f:78:95:1f:35:5e:ef:56:49:45:
         77:12:ba:c6:80:7d:b7:92:d8:1b:36:22:2c:14:a6:75:b0:06:
         e3:4d:bf:6d:86:d0:4a:48:a9:62:e5:3e:91:09:c1:ec:c0:44:
         aa:04:21:29:35:e6:b3:7c:33:b0:b8:62:a4:af:e4:e4:8a:53:
         cb:0f:c9:85:60:4f:42:fd:40:5c:4c:28:3a:9f:4c:83:17:3c:
         ef:34:a6:65:cf:20:b0:bf:86:d8:f0:de:6d:a6:9c:8e:d3:f9:
         70:29:a3:03:87:6a:95:e5:3d:03:e8:81:0c:6a:27:c7:bd:0b:
         36:10:f6:7e:b1:1b:53:44:39:2f:84:b4:4f:02:38:60:a7:4b:
         03:1a:29:f4:91:51:b6:ca:93:27:02:60:c7:dc:70:dd:42:cb:
         53:39:da:37:b5:b0:94:28:ae:36:03:18:24:04:4f:8e:77:07:
         ee:73:86:e9:62:09:00:3d:a6:9b:c1:8c:a2:a8:2e:ce:54:d7:
         c1:85:be:62:47:88:07:a0:48:55:4e:5d:fa:bc:93:1d:cb:4f:
         d2:58:ac:67:57:6d:f2:05:4e:33:de:c6:66:bc:f0:7b:bc:63:
         74:22:53:eb:e6:c8:19:6b:db:dd:67:08:43:17:b2:8e:31:ff:
         89:81:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:06 2025 by rpki-client