This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94AE6B04C60811F08B2E38D6DAE4EC9C.roa
File:                     94AE6B04C60811F08B2E38D6DAE4EC9C.roa (raw, json)
Hash identifier:          NwYOaYeboVN9XHmviwIzxD1jLn3YgSamQ0Lj4aGFXgo=
Subject key identifier:   CF:B6:F0:E6:25:D2:05:F2:CB:E1:C1:6F:60:A0:2F:43:CD:2A:EC:7A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A9F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94AE6B04C60811F08B2E38D6DAE4EC9C.roa
Signing time:             Thu 20 Nov 2025 12:01:01 +0000
ROA not before:           Thu 20 Nov 2025 12:00:55 +0000
ROA not after:            Fri 02 Jan 2026 12:00:55 +0000
asID:                     63023
IP address blocks:        154.90.135.0/24 maxlen: 24
                          154.94.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109048 (0x1a9f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 20 12:00:55 2025 GMT
            Not After : Jan  2 12:00:55 2026 GMT
        Subject: CN=691f02fd-de11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:12:7a:47:fc:24:1b:97:46:f7:37:f8:da:97:
                    5f:d8:24:88:fc:f4:ce:45:8c:a3:c8:2b:83:7a:6d:
                    1d:14:65:43:c9:11:fc:1c:1a:d0:1e:bd:3b:49:3a:
                    cf:2e:d0:31:52:5b:0d:d7:17:e8:4c:a8:ac:69:2b:
                    79:53:53:60:e4:21:bc:3e:04:05:88:50:3d:ed:b3:
                    60:49:3c:f1:3d:53:43:4e:4d:d9:20:44:7d:a4:86:
                    31:7e:ad:fc:38:bb:d4:d6:8e:17:85:9a:6d:89:7a:
                    67:49:ac:1e:ac:a6:ee:ce:e7:09:b2:6e:0c:3e:71:
                    d2:4a:fd:3a:c9:60:41:e6:35:16:08:59:9d:25:be:
                    18:08:7f:61:59:78:9e:32:d2:75:f9:07:c3:3a:18:
                    2c:d2:34:e0:9a:ad:ba:0f:ef:92:47:9e:5c:ae:3c:
                    2e:8a:3c:63:ef:28:6e:19:48:e2:a7:60:bf:b3:ab:
                    f6:b4:f6:e1:8e:6b:ad:99:a2:fe:44:cd:ca:5c:4c:
                    7e:d8:4e:94:3d:c1:99:8b:6a:ee:93:a0:9d:c2:c3:
                    0b:96:af:a8:c0:98:94:d0:be:03:cd:03:c9:a4:ba:
                    7c:88:b9:4a:84:e8:d5:5c:01:5c:c8:9f:b8:e4:db:
                    09:cc:29:cd:08:9c:be:ab:41:2f:e9:ff:a1:e5:7a:
                    b5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B6:F0:E6:25:D2:05:F2:CB:E1:C1:6F:60:A0:2F:43:CD:2A:EC:7A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94AE6B04C60811F08B2E38D6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.135.0/24
                  154.94.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:f3:2c:85:63:da:92:20:24:5a:e4:c2:ff:1e:98:5b:6e:ba:
         6d:a2:cb:ed:4b:b4:c8:62:44:0d:ba:74:c4:25:28:0f:6a:fb:
         94:f3:12:ff:64:b9:ac:12:a1:04:91:6b:34:a3:87:e1:7c:53:
         7d:6a:4a:ed:87:c7:b8:83:5f:5b:12:f6:de:4b:83:57:4b:2c:
         fa:3a:8e:23:09:ca:21:ca:03:3e:0b:d8:31:3e:d7:18:73:42:
         7a:a1:48:ed:39:f8:14:1e:ed:13:b3:f6:eb:ad:da:0b:74:24:
         9f:51:0b:41:29:03:3f:cd:c8:29:03:81:d2:3d:76:1d:81:7e:
         7b:96:63:56:3e:20:9f:b7:51:42:f9:7c:68:56:75:d1:bc:07:
         82:66:06:7b:bd:8e:2f:9d:50:d0:6b:1a:a4:42:90:75:0f:ee:
         97:03:e4:82:d4:30:bf:85:4d:42:6e:1e:40:0a:da:80:19:1a:
         9a:ff:ca:5e:f6:5d:e0:56:dd:d3:b2:03:26:f2:74:66:7c:95:
         ae:ba:73:92:08:b4:87:af:d4:77:89:b0:f9:c4:ea:af:2a:d9:
         2d:91:d6:6e:5b:d3:a0:0b:49:e8:c2:98:06:6b:39:70:98:ac:
         96:2c:d9:ab:82:d9:14:29:5a:12:f4:3b:9d:36:81:c6:36:4b:
         0e:cc:81:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:32 2025 by rpki-client