This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA763EA6CF6A11F0AA6C67D2DAE4EC9C.roa
File:                     AA763EA6CF6A11F0AA6C67D2DAE4EC9C.roa (raw, json)
Hash identifier:          CNynzF9fIpIbkw7QtnxAmjiHIsSYlrSxw8pyjk4BrZM=
Subject key identifier:   AF:F8:8D:C2:3B:E8:EA:96:CC:C1:7E:B1:07:A0:86:89:11:15:5A:16
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA763EA6CF6A11F0AA6C67D2DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 10:35:48 +0000
ROA not before:           Tue 02 Dec 2025 10:35:41 +0000
ROA not after:            Sat 03 Jan 2026 10:35:41 +0000
asID:                     17497
IP address blocks:        154.81.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109441 (0x1ab81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  2 10:35:41 2025 GMT
            Not After : Jan  3 10:35:41 2026 GMT
        Subject: CN=692ec104-504d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0d:67:fb:b8:57:b9:d7:3e:1b:88:8c:61:e5:
                    7f:af:70:e9:6b:61:73:49:54:4c:2b:0c:ba:79:48:
                    4f:10:21:6b:c2:3e:21:be:05:ee:89:2f:3c:ad:ec:
                    8e:94:7f:91:4e:61:76:ac:37:19:f7:58:56:45:03:
                    cd:94:4d:bc:20:0d:55:5e:d0:7a:b9:f8:59:b0:b9:
                    af:a6:42:07:a5:e8:ef:04:32:3e:e1:02:a8:64:9d:
                    62:d4:fe:b3:f6:fb:c2:85:5a:67:de:0e:49:49:e9:
                    63:94:c1:41:76:e2:a8:06:69:34:db:6f:9e:79:d2:
                    59:61:64:53:d3:18:c8:85:bd:c5:c2:87:be:25:e8:
                    0b:c6:72:00:92:46:b2:f1:6f:2c:3e:52:f7:17:ac:
                    e5:65:67:bb:40:57:bf:64:dc:72:01:2d:34:e7:b8:
                    f4:3a:da:b3:84:ac:04:41:87:57:f0:cd:60:36:1c:
                    b3:35:95:2a:97:77:b1:a8:46:27:d6:a4:e9:cc:cf:
                    58:29:ed:0c:56:b9:4c:54:97:14:e0:66:0f:9c:36:
                    f2:36:0d:61:77:64:2e:a9:c0:16:cd:d4:f6:12:d3:
                    1d:33:21:cf:5e:b2:8f:4c:4c:47:16:36:11:d0:f1:
                    58:b9:92:d2:5f:38:86:31:22:ef:7b:9e:9c:d1:a7:
                    fe:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F8:8D:C2:3B:E8:EA:96:CC:C1:7E:B1:07:A0:86:89:11:15:5A:16
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA763EA6CF6A11F0AA6C67D2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:88:19:2a:d1:13:06:79:03:9e:25:44:85:2d:a9:5c:80:b8:
         36:aa:ea:b8:10:54:cf:df:13:be:de:f3:d9:bf:51:b7:b8:b3:
         6e:34:6f:51:4a:64:fe:bd:00:a0:63:0b:61:3a:61:23:46:99:
         fd:ba:a6:b0:58:34:39:b4:31:7a:cc:36:74:5c:f9:b0:9c:5d:
         c6:4b:2c:79:4f:d8:58:6d:14:8b:64:3a:02:a2:7e:32:2b:3e:
         eb:b9:e4:1a:e8:51:f8:c1:e1:b9:7a:96:0a:89:3f:5d:8c:06:
         d0:77:f7:cb:47:f6:85:42:f6:06:6f:22:c3:df:1f:28:89:68:
         75:7d:e7:be:80:d1:6f:60:b8:7e:1c:c0:8c:78:79:28:7c:d3:
         1e:61:e3:0e:dd:97:41:12:51:ff:89:70:2f:66:1c:a4:b2:e3:
         d1:75:55:ca:c3:2c:28:bb:9e:7d:47:7f:d5:a9:50:1d:7d:32:
         58:ba:84:84:36:d2:78:10:c7:45:f6:01:77:e9:2b:4f:64:6e:
         22:e3:ec:4e:98:c4:02:f9:95:5f:1f:a7:e4:e5:54:46:ee:44:
         84:a7:69:1e:72:a3:bf:a4:9f:56:0d:3e:64:af:17:42:31:4c:
         70:1e:91:62:bf:1a:32:72:69:cc:23:3c:20:ee:18:35:60:9f:
         a5:42:b2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:24:55 2025 by rpki-client