This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A51F1AF4C60511F0A02AE9C4DAE4EC9C.roa
File:                     A51F1AF4C60511F0A02AE9C4DAE4EC9C.roa (raw, json)
Hash identifier:          uLXOhD8EOkS613tMEjmHg44SM/JiS9os3lbAjdSJF5Q=
Subject key identifier:   F1:84:01:84:14:B7:BF:E2:0D:02:6A:06:62:E8:50:6A:97:2E:CB:D1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A9F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A51F1AF4C60511F0A02AE9C4DAE4EC9C.roa
Signing time:             Thu 20 Nov 2025 11:40:00 +0000
ROA not before:           Thu 20 Nov 2025 11:39:55 +0000
ROA not after:            Tue 30 Dec 2025 11:39:55 +0000
asID:                     401701
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109044 (0x1a9f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 20 11:39:55 2025 GMT
            Not After : Dec 30 11:39:55 2025 GMT
        Subject: CN=691efe10-094e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:92:b0:5d:bc:81:fc:42:57:46:91:73:1a:96:
                    99:46:4b:7b:de:6f:a8:cd:bb:d9:df:30:9d:cd:ab:
                    2e:df:91:b0:fe:e8:60:0a:08:a0:2c:d9:18:b7:48:
                    1a:35:f4:23:24:e8:ea:b0:fa:2f:cd:7e:5a:13:eb:
                    f1:60:48:14:94:37:76:71:79:05:2c:06:9b:66:c6:
                    07:bf:d1:89:15:17:0d:78:25:5b:b1:6a:72:42:87:
                    e5:65:02:19:22:46:72:91:e9:ad:08:0e:89:3c:98:
                    81:3f:ab:0b:ba:2e:9b:d3:41:85:01:96:f3:50:55:
                    59:58:d9:fc:d1:a3:73:3d:09:d1:d3:48:15:b2:04:
                    bf:87:0c:f8:e8:fd:f5:48:ea:e9:30:a9:5b:5c:16:
                    ef:57:ac:44:f5:77:b3:15:0b:1f:60:f8:7f:06:2e:
                    0f:b5:8e:73:09:2b:9e:32:b4:a4:2f:21:17:f4:56:
                    6f:ad:dd:8c:14:28:82:8d:d2:3f:74:c1:b4:2b:e5:
                    65:73:67:d3:3a:da:d0:b0:28:e2:72:71:6b:99:c3:
                    77:e4:6e:c6:bb:ad:4e:9c:9a:56:5c:0f:e3:36:16:
                    05:0c:1c:ef:6e:4d:cb:58:76:7d:45:86:30:2c:c9:
                    40:ac:1d:bb:c0:13:81:27:46:3e:52:ab:9d:95:22:
                    b9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:84:01:84:14:B7:BF:E2:0D:02:6A:06:62:E8:50:6A:97:2E:CB:D1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A51F1AF4C60511F0A02AE9C4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         04:ef:90:e1:1b:fa:c0:6d:c1:e5:bd:97:e1:6a:30:60:bc:9d:
         6f:cb:b3:fd:5c:eb:43:6f:f2:29:0b:3d:c0:81:53:9c:ba:e3:
         c0:82:1c:92:c7:57:2e:02:4d:a8:4b:c6:9b:39:b8:05:83:89:
         3d:47:2d:4b:9a:f4:6e:50:b5:f1:c8:34:88:96:95:49:e1:94:
         6c:73:41:d5:69:93:3d:e5:03:97:3c:8d:51:f2:03:70:dd:b6:
         d6:6c:17:e1:17:0c:3d:73:cb:54:be:1f:aa:8a:ce:96:e9:cd:
         a2:41:b1:c2:80:b4:70:a2:eb:15:dc:34:45:d2:b9:09:5f:ce:
         45:e3:06:b6:79:37:3e:0e:71:ac:a3:b4:5e:60:b0:82:2e:68:
         30:c7:e3:c2:8f:0f:50:9c:50:fe:96:26:ff:ab:48:e9:c1:70:
         ec:e2:70:ee:23:35:66:42:24:93:42:7c:51:6b:61:71:f5:f3:
         4b:83:d7:94:c7:59:75:44:a5:31:2f:6f:15:6d:b3:9e:32:42:
         7c:31:45:f0:e3:c7:e0:5b:4c:aa:35:70:10:33:9a:b1:e0:73:
         0f:bd:1c:5b:8a:ec:59:7d:98:a5:97:7e:36:ad:f1:a0:95:73:
         d2:da:cf:51:4d:ab:a7:20:af:f1:75:1b:18:82:b1:fd:c9:af:
         ed:c6:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:07:16 2025 by rpki-client