This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/995E0804C53011F0B781F89BDAE4EC9C.roa
File:                     995E0804C53011F0B781F89BDAE4EC9C.roa (raw, json)
Hash identifier:          UXvUdw18hrQbnqAhSyr6Q+fFTMNzhVjqmY3TjH2S+1I=
Subject key identifier:   B3:60:14:D2:D1:A5:F6:77:EB:F0:5F:91:CF:DE:44:98:55:B0:58:0B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A9D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/995E0804C53011F0B781F89BDAE4EC9C.roa
Signing time:             Wed 19 Nov 2025 10:14:58 +0000
ROA not before:           Wed 19 Nov 2025 10:14:53 +0000
ROA not after:            Sat 20 Dec 2025 10:14:53 +0000
asID:                     273155
IP address blocks:        154.200.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109014 (0x1a9d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 19 10:14:53 2025 GMT
            Not After : Dec 20 10:14:53 2025 GMT
        Subject: CN=691d98a2-7091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:aa:c8:97:07:b6:22:a5:b4:ca:8c:33:e5:53:
                    85:d9:d3:6d:71:ba:02:08:a2:fb:fd:f3:a6:a7:68:
                    16:ee:71:88:88:15:f6:07:64:cc:8b:d4:3a:2f:ff:
                    5d:81:0d:25:05:9c:ce:63:76:8e:0b:4b:26:03:8c:
                    a4:68:d3:21:f1:10:62:aa:11:06:4e:4b:bc:d1:a0:
                    d1:99:40:1a:28:db:63:18:db:e3:89:ee:c6:eb:76:
                    c2:fd:13:ef:6d:20:e1:44:17:48:1d:8a:c3:56:17:
                    ea:bd:f1:e6:6e:7c:03:bb:a6:dc:c1:a9:a6:a0:72:
                    86:21:24:52:48:26:c4:00:40:a9:2d:b6:c6:f2:e5:
                    6b:7b:eb:c6:68:fe:87:5d:45:e0:8f:cf:c5:fc:9d:
                    f8:08:13:46:6e:f2:5f:cb:ff:d2:66:79:bb:3a:dd:
                    eb:7f:5b:5f:b5:0b:7f:da:c0:68:b3:1b:61:d6:9d:
                    69:bd:16:2b:83:20:8e:0e:f9:60:f4:32:1a:53:cf:
                    30:cd:c9:36:31:5d:9a:5a:eb:8e:30:a0:57:75:67:
                    0f:13:b6:52:3d:0b:9c:3d:2c:0c:76:fe:26:82:79:
                    5f:66:04:5e:fe:f5:c0:31:79:59:ac:f0:c5:62:ba:
                    58:0b:49:a7:3a:41:17:57:0c:5c:65:58:89:15:24:
                    9d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:60:14:D2:D1:A5:F6:77:EB:F0:5F:91:CF:DE:44:98:55:B0:58:0B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/995E0804C53011F0B781F89BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:16:ac:d6:70:0d:9a:3f:5b:4d:8a:63:18:7c:40:8d:37:06:
         c2:67:13:07:3c:bd:36:77:28:1c:a5:31:0d:f1:1a:25:98:3f:
         52:4d:04:c2:a0:74:b4:c1:46:50:5d:c8:4c:82:7e:4b:db:54:
         03:99:0c:aa:d5:37:31:49:e9:19:64:80:e5:61:4e:6d:c4:a9:
         cf:b3:65:8d:bc:ed:b5:4c:f4:f0:64:22:15:9a:71:ec:ab:bb:
         bc:da:b2:b2:72:06:84:8d:70:c3:da:cb:02:a1:b4:4a:37:84:
         00:22:ff:4d:47:81:d5:11:46:ae:d8:f2:88:4f:fe:2b:19:2f:
         4f:6f:9e:a1:35:88:49:4c:b4:1b:a7:4f:19:79:e3:c3:c0:c4:
         39:9a:7a:e9:bb:25:9e:98:1e:3c:32:65:8f:6d:ed:ba:16:ea:
         97:04:53:b4:aa:64:6f:ad:5a:7f:07:34:38:c6:9d:17:84:f4:
         c2:e0:19:24:42:42:0f:3b:84:3e:86:28:54:ea:b7:22:90:4a:
         1f:bd:ee:9e:4b:58:a2:89:8f:ad:1d:1e:47:54:8a:35:0b:d0:
         2b:fb:08:00:3f:de:27:88:34:b0:f0:56:fe:fe:bd:5d:51:9e:
         a4:93:f0:65:f7:b2:2f:ca:5d:ca:f0:3f:53:17:3c:d8:d4:14:
         39:51:cb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:07:09 2025 by rpki-client