This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DBF1CDACECC11F0BF6F04EDDAE4EC9C.roa
File:                     9DBF1CDACECC11F0BF6F04EDDAE4EC9C.roa (raw, json)
Hash identifier:          +4zl+v/68VKH1WvRFJdHyx2s8kK+H/+hDnVOvyOKZo0=
Subject key identifier:   F5:67:36:24:FC:EB:4D:39:BC:BD:85:A3:3B:86:D4:6E:5F:8A:89:DA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DBF1CDACECC11F0BF6F04EDDAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 15:44:27 +0000
ROA not before:           Mon 01 Dec 2025 15:44:19 +0000
ROA not after:            Thu 15 Jan 2026 15:44:19 +0000
asID:                     396356
IP address blocks:        154.93.8.0/21 maxlen: 24
                          154.95.48.0/22 maxlen: 24
                          154.95.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109402 (0x1ab5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  1 15:44:19 2025 GMT
            Not After : Jan 15 15:44:19 2026 GMT
        Subject: CN=692db7db-fbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:6b:d8:67:52:c2:41:2d:29:f1:b7:88:ab:
                    9a:47:09:3d:02:6b:71:99:00:d1:85:6b:41:13:1a:
                    42:6a:bd:f8:b4:ac:70:ad:92:e3:ad:15:ce:9b:90:
                    eb:88:50:b4:4c:a3:7c:7d:df:bb:ca:72:6c:e1:96:
                    1f:e9:0e:bf:fb:e4:56:b8:77:43:00:9a:ba:41:08:
                    77:0d:47:4a:ba:16:ff:a3:ca:0a:3c:22:bd:49:af:
                    24:b9:da:57:59:cb:bb:02:74:96:53:a9:da:56:85:
                    8b:3a:e9:5e:5e:59:73:ac:43:41:ea:24:ae:9c:f4:
                    c2:07:40:65:be:18:11:6e:6d:5e:7f:5a:cf:40:6c:
                    dd:68:be:1a:8c:a1:0d:73:00:cc:37:4f:e4:1b:7a:
                    f0:83:93:b0:56:cf:c1:05:e2:f1:53:53:2d:68:2d:
                    cd:92:b9:a5:28:cc:66:c0:8b:fc:e8:bf:8e:ac:fb:
                    0d:a9:23:3a:ce:b9:c9:e7:6e:30:58:c5:d7:2f:a8:
                    46:af:c1:ef:16:61:96:ac:38:46:54:81:ad:e4:fa:
                    12:53:51:e4:a9:84:f2:4e:72:06:95:0c:28:21:e9:
                    f9:10:db:0d:23:69:bf:80:28:16:6b:44:62:34:27:
                    06:74:dd:d3:5f:8b:47:87:fc:84:50:a2:39:0e:18:
                    96:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:67:36:24:FC:EB:4D:39:BC:BD:85:A3:3B:86:D4:6E:5F:8A:89:DA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DBF1CDACECC11F0BF6F04EDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.8.0/21
                  154.95.48.0-154.95.52.255

    Signature Algorithm: sha256WithRSAEncryption
         3c:09:25:6e:4f:58:ec:9e:4c:6a:00:a8:b9:9d:c4:18:6a:b5:
         86:14:91:0c:8a:3c:51:64:04:fc:7b:e2:04:0c:a9:18:b8:17:
         1c:d7:0f:a5:86:87:a6:af:dc:e9:32:a1:50:b7:8c:19:92:66:
         99:38:91:4c:f4:9a:5f:87:da:0e:e7:60:45:21:2e:a5:3d:8d:
         33:33:25:04:bb:71:f1:7b:75:9a:06:7c:2d:d7:32:97:bc:c6:
         07:f4:49:57:72:a4:9c:05:b7:a8:2e:dc:88:23:ba:64:d6:c2:
         4d:06:fe:80:8d:91:fa:41:35:f9:0b:52:49:cf:de:58:91:08:
         90:33:da:9f:f8:12:fd:9b:de:ec:ed:c3:5d:dc:f9:52:34:11:
         df:54:6e:fb:b2:9b:4e:32:b7:d6:2c:ca:88:3d:1e:b1:b6:89:
         91:39:f4:4e:d0:5b:22:8f:9e:66:cb:78:48:71:83:3c:28:0b:
         d2:0c:a5:36:6f:9f:6f:c4:d2:5d:e3:b3:fc:cd:b5:db:0c:b8:
         4a:19:32:ee:2d:09:14:cc:45:1f:10:8b:43:c3:bf:6c:80:1d:
         95:a3:52:ca:a0:ad:c1:a8:f4:46:cf:d2:98:b2:fe:aa:68:04:
         72:2f:d4:13:27:b0:0f:cb:9a:42:72:78:74:21:d5:8e:7c:87:
         13:7f:3d:ec
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAataMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAxMTU0NDE5WhcNMjYwMTE1MTU0NDE5WjAYMRYw
FAYDVQQDEw02OTJkYjdkYi1mYmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyMlr2GdSwkEtKfG3iKuaRwk9AmtxmQDRhWtBExpCar34tKxwrZLjrRXO
m5DriFC0TKN8fd+7ynJs4ZYf6Q6/++RWuHdDAJq6QQh3DUdKuhb/o8oKPCK9Sa8k
udpXWcu7AnSWU6naVoWLOuleXllzrENB6iSunPTCB0BlvhgRbm1ef1rPQGzdaL4a
jKENcwDMN0/kG3rwg5OwVs/BBeLxU1MtaC3NkrmlKMxmwIv86L+OrPsNqSM6zrnJ
524wWMXXL6hGr8HvFmGWrDhGVIGt5PoSU1HkqYTyTnIGlQwoIen5ENsNI2m/gCgW
a0RiNCcGdN3TX4tHh/yEUKI5DhiWsQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFPVn
NiT86005vL2FozuG1G5fionaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85REJGMUNEQUNFQ0MxMUYwQkY2RjA0RUREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDml0IMAwDBASaXzADBACa
XzQwDQYJKoZIhvcNAQELBQADggEBADwJJW5PWOyeTGoAqLmdxBhqtYYUkQyKPFFk
BPx74gQMqRi4FxzXD6WGh6av3OkyoVC3jBmSZpk4kUz0ml+H2g7nYEUhLqU9jTMz
JQS7cfF7dZoGfC3XMpe8xgf0SVdypJwFt6gu3IgjumTWwk0G/oCNkfpBNfkLUknP
3liRCJAz2p/4Ev2b3uztw13c+VI0Ed9Ubvuym04yt9Ysyog9HrG2iZE59E7QWyKP
nmbLeEhxgzwoC9IMpTZvn2/E0l3js/zNtdsMuEoZMu4tCRTMRR8Qi0PDv2yAHZWj
UsqgrcGo9EbP0piy/qpoBHIv1BMnsA/LmkJyeHQh1Y58hxN/Pew=
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:15 2025 by rpki-client