This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99D13D78C53611F086BD05C1DAE4EC9C.roa
File:                     99D13D78C53611F086BD05C1DAE4EC9C.roa (raw, json)
Hash identifier:          EKaceYwvAOzdhhdwIooPLWemdAlV1GXFOvhom4pEpT0=
Subject key identifier:   B3:4C:45:4B:76:90:D8:08:DD:7E:6B:05:36:ED:C6:8B:E4:DC:11:92
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A9DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99D13D78C53611F086BD05C1DAE4EC9C.roa
Signing time:             Wed 19 Nov 2025 10:57:55 +0000
ROA not before:           Wed 19 Nov 2025 10:57:49 +0000
ROA not after:            Thu 25 Dec 2025 10:57:49 +0000
asID:                     14315
IP address blocks:        154.82.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109018 (0x1a9da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 19 10:57:49 2025 GMT
            Not After : Dec 25 10:57:49 2025 GMT
        Subject: CN=691da2b3-d496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:10:d3:b2:09:34:7b:c6:8c:2d:4b:22:98:
                    95:47:f7:e1:8b:a4:08:d4:41:ce:e5:0a:0a:91:bc:
                    78:2a:61:1b:64:1e:a9:e2:b0:8c:ae:f9:e2:a3:c6:
                    c4:3d:ab:29:1e:35:82:43:c0:ae:2f:6f:8e:bc:ed:
                    37:4d:29:8d:3f:29:92:41:ce:1d:d5:1f:48:84:1b:
                    0b:95:5c:e3:fb:e9:a3:63:fd:b5:12:ed:81:5f:86:
                    04:04:16:4a:a6:13:f9:58:6d:d6:de:2f:57:47:16:
                    52:f5:39:9d:6d:88:1a:e7:f5:ce:15:41:36:ad:0c:
                    bb:90:a7:83:41:d6:78:24:f0:02:09:31:11:37:7a:
                    ad:79:8b:d6:ca:9f:5d:08:6a:94:2c:48:02:34:f6:
                    c5:8c:ef:8f:d2:6b:99:ac:6d:9c:c7:c7:1e:cf:34:
                    3d:0f:6a:8f:a4:f7:ee:ac:34:14:ff:9a:d9:2a:c7:
                    1c:45:1e:f7:4a:f0:22:5f:fe:4c:ed:bf:ff:38:8f:
                    2f:a2:55:b6:0d:05:2d:e0:f7:00:38:0e:03:ed:40:
                    c3:3c:22:10:ee:42:b2:a0:85:73:45:4d:83:f0:db:
                    50:b9:9f:4a:1c:05:ab:8e:14:96:59:c3:64:68:a3:
                    a7:10:12:92:b2:ce:d3:a8:f2:4d:03:2b:16:21:36:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4C:45:4B:76:90:D8:08:DD:7E:6B:05:36:ED:C6:8B:E4:DC:11:92
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99D13D78C53611F086BD05C1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:bd:b7:04:52:08:43:31:a8:17:b3:bc:8d:72:4c:e1:5c:57:
         02:5e:fd:74:54:83:5f:cc:80:5d:cf:3e:2e:d5:0c:40:39:bc:
         e5:2a:0e:13:e8:3f:6e:39:32:3a:44:e8:b9:19:7a:ae:5f:74:
         01:4a:d1:34:b9:bc:79:da:4b:e8:30:ac:1b:c2:df:49:c0:b5:
         89:09:63:a2:a7:9e:ae:93:05:2b:0b:32:92:52:54:90:9c:0e:
         bb:a8:79:4a:36:e3:d4:27:3d:d3:7d:41:a7:37:67:c0:79:c6:
         cf:f7:c3:97:82:42:b8:0d:27:a3:1e:61:2b:f0:6d:97:a9:67:
         2e:df:4a:0b:d1:08:5c:9b:53:4e:2c:db:4a:0b:91:f3:6c:29:
         74:de:95:7f:4d:df:55:9c:da:9e:04:04:18:7d:3c:d8:fb:a4:
         81:70:b3:10:98:44:6f:6d:a8:04:a2:72:b1:b7:ae:94:2c:ee:
         dd:f9:69:96:f7:b1:5e:b6:db:86:05:ad:42:68:2c:66:b5:ff:
         a9:c7:d8:b2:a4:47:44:d0:24:16:99:b0:48:7d:a2:38:b1:6b:
         36:33:b8:d6:9c:be:d6:11:94:c6:d1:93:3e:eb:10:28:e1:63:
         be:34:2b:fd:51:1a:9c:1c:09:5b:1a:b6:e1:67:08:86:33:e2:
         29:75:65:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:09 2025 by rpki-client