This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A94AE270C6D211F0B8D39ED2DAE4EC9C.roa
File:                     A94AE270C6D211F0B8D39ED2DAE4EC9C.roa (raw, json)
Hash identifier:          P3RlvjNjsDsbBRUgGd4unYqTNLkaEmGrRUPGx72J9uU=
Subject key identifier:   07:95:14:54:24:3F:B8:CE:87:9E:C0:57:E7:E1:74:FE:0A:D8:7D:BB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AA24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A94AE270C6D211F0B8D39ED2DAE4EC9C.roa
Signing time:             Fri 21 Nov 2025 12:07:34 +0000
ROA not before:           Fri 21 Nov 2025 12:07:25 +0000
ROA not after:            Sun 07 Dec 2025 12:07:25 +0000
asID:                     54801
IP address blocks:        154.213.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109092 (0x1aa24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 21 12:07:25 2025 GMT
            Not After : Dec  7 12:07:25 2025 GMT
        Subject: CN=69205606-1c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:20:44:16:22:a0:d1:31:75:2f:c7:90:4b:b3:
                    c2:b6:3b:b2:41:ff:34:96:b0:43:52:60:b1:4f:b4:
                    50:61:80:37:24:03:fa:4e:27:ec:70:af:34:f5:fa:
                    08:07:e9:7f:42:0d:1a:e2:e6:93:c8:b9:ea:b3:48:
                    b7:e4:95:e9:74:40:c4:b1:01:b4:5f:af:1d:8d:d5:
                    aa:af:19:0f:15:8c:6f:53:20:9e:3e:be:d0:9a:fb:
                    36:f6:b2:9c:59:ce:76:6b:9a:12:8d:60:5c:c2:0b:
                    42:82:79:7b:2a:b8:84:5b:fa:17:46:aa:1a:83:b5:
                    33:66:f7:cd:af:a7:e8:87:f8:ce:30:b0:c0:70:26:
                    cb:26:0b:80:4d:1f:e0:1c:8b:59:9b:46:f2:47:00:
                    8a:81:42:86:d9:82:b2:93:14:77:2b:67:bc:bc:63:
                    d4:60:ab:d2:7c:8a:e6:62:86:58:17:6e:e0:3b:fa:
                    d0:f6:f0:91:fd:18:8b:20:b8:92:45:6e:67:1b:54:
                    c1:0c:fe:50:b7:aa:5e:70:b1:af:98:ab:12:d1:35:
                    15:6f:2f:60:d8:9c:19:4d:56:cf:d8:13:ce:dc:af:
                    4e:f5:5a:79:e0:3b:4f:e6:fe:c3:04:2a:36:8d:a8:
                    7e:f4:98:d8:79:ef:e0:a4:48:46:e7:5d:1a:76:52:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:95:14:54:24:3F:B8:CE:87:9E:C0:57:E7:E1:74:FE:0A:D8:7D:BB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A94AE270C6D211F0B8D39ED2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:90:04:52:2f:e1:c0:ad:b6:b3:6d:8e:39:90:92:6b:fe:be:
         60:a0:f3:a2:1c:b7:76:f8:b1:f3:31:2f:04:13:d3:c5:c1:33:
         46:8c:7d:d2:77:df:f5:fa:6f:44:47:bf:bb:79:e2:0f:1d:71:
         2b:a8:fc:8d:bf:6b:48:64:6d:f9:de:f3:b1:54:84:7b:ce:d7:
         82:eb:7a:b7:7a:59:a2:fd:6e:e6:ed:b3:18:6a:5e:eb:0f:cf:
         c2:63:c1:1c:f0:2f:5f:52:c5:2b:8b:b7:2e:2c:b1:26:ca:e2:
         6b:eb:c2:f4:76:fa:72:84:82:da:ab:fb:a7:17:17:3f:43:f2:
         55:86:63:ca:7a:f4:4b:40:63:d6:77:d8:18:c9:92:21:b7:3a:
         3e:36:cb:5a:75:fd:4c:9c:b3:db:ea:60:71:4a:0d:a4:5a:08:
         18:a9:82:8e:8a:10:9d:1f:3b:14:c1:f1:b0:7b:88:f6:9a:d9:
         61:89:2e:09:31:de:5b:73:e3:9f:43:ce:cb:ee:f4:d5:2d:81:
         e6:4b:9f:69:0f:10:64:4f:9f:30:9f:f5:08:ca:1c:f3:9d:d4:
         1f:e5:43:58:ee:bc:5c:ef:d3:85:14:36:5e:8e:10:61:53:d6:
         cb:8f:b6:3f:ab:4e:68:10:9e:64:39:0b:13:8c:21:a7:f2:1a:
         e5:8a:0a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:34 2025 by rpki-client