This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B274211CCB7411F0970D3387DAE4EC9C.roa
File:                     B274211CCB7411F0970D3387DAE4EC9C.roa (raw, json)
Hash identifier:          rYYtzUymPhxikGE4oycfd8YSLhgJM+zMbRztm+UrrXc=
Subject key identifier:   C6:E9:E9:78:5C:78:7A:8C:04:CB:41:32:C5:40:27:91:33:3B:38:DF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AACF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B274211CCB7411F0970D3387DAE4EC9C.roa
Signing time:             Thu 27 Nov 2025 09:37:32 +0000
ROA not before:           Thu 27 Nov 2025 09:37:27 +0000
ROA not after:            Mon 08 Dec 2025 09:37:27 +0000
asID:                     1405
IP address blocks:        154.83.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109263 (0x1aacf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 27 09:37:27 2025 GMT
            Not After : Dec  8 09:37:27 2025 GMT
        Subject: CN=69281bdc-ac66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:29:dc:5d:d4:cb:0e:9d:6e:30:23:ff:02:
                    ac:69:1c:a0:c8:cc:0c:4f:7a:de:82:8a:44:b4:9d:
                    03:b8:a1:ef:1b:d1:8c:cc:9f:df:17:2e:06:af:2f:
                    97:7d:02:d9:eb:20:7f:9b:18:57:69:2a:fd:90:87:
                    b2:79:3c:dd:82:f9:59:45:43:eb:f7:da:ce:68:94:
                    8e:3f:f2:bb:5c:0b:46:d2:d8:3a:78:e0:0a:3a:d4:
                    14:8e:38:7d:be:79:61:8f:f1:90:54:e7:6a:48:11:
                    bb:59:65:f6:d1:84:14:b6:a9:ad:4b:db:04:21:62:
                    21:7e:bd:47:55:37:7c:53:59:7a:ec:cc:82:01:02:
                    88:c1:8a:ad:0d:e9:59:52:44:4a:c6:6a:a2:eb:15:
                    dc:7f:57:a0:39:c1:c3:b4:28:c4:f4:55:1f:5b:b1:
                    bc:b4:c9:09:0a:3c:a8:ae:15:6e:e0:f6:d0:d7:3e:
                    de:60:a1:41:6e:86:31:75:ec:4d:47:20:90:ab:b1:
                    63:14:50:4c:ab:c4:1c:8d:cc:cc:2d:de:b6:2a:d2:
                    f4:88:8c:a6:81:5c:e0:17:9b:fd:aa:af:44:a3:7c:
                    71:e4:3c:22:65:8b:80:51:6f:f3:ce:ff:32:61:9e:
                    19:3e:69:30:08:7b:2f:91:7c:17:58:c5:16:59:83:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E9:E9:78:5C:78:7A:8C:04:CB:41:32:C5:40:27:91:33:3B:38:DF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B274211CCB7411F0970D3387DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:37:31:12:ee:a8:96:e4:c5:aa:7c:de:5a:b3:99:9d:55:38:
         cb:35:f7:8f:19:de:f3:ec:0b:23:1c:16:25:c7:a1:de:e2:b4:
         6c:7b:fe:81:e3:3e:78:a1:3d:3b:62:1b:3a:03:89:e9:78:d7:
         bc:bd:49:e4:6f:ee:de:42:9f:cb:20:83:a1:d3:8f:b2:48:e1:
         1b:76:a5:d8:11:21:45:76:3a:c2:48:e5:3b:5c:8f:c8:55:80:
         88:4a:58:60:db:2e:c8:00:56:43:f7:c5:1f:5b:2b:fc:9d:3f:
         3f:44:a8:46:55:8b:6a:59:09:1a:46:38:6a:5c:fe:ca:7e:28:
         73:81:f1:4a:df:30:aa:ff:1e:ba:77:a0:bb:e8:f1:36:f1:48:
         00:3e:f0:8e:79:63:32:fc:b1:ef:ac:fd:62:26:55:f3:eb:91:
         3a:1a:8e:e7:f8:21:48:01:3e:61:04:27:b4:e1:d9:75:db:65:
         51:e1:60:40:61:21:68:51:6e:99:dd:18:e8:a1:09:eb:08:2e:
         4f:82:b8:30:b5:e3:d1:01:23:b2:98:ca:fe:8f:9b:65:b3:1c:
         b2:dc:03:ad:29:4b:56:ed:34:47:ec:8f:2b:fb:a3:7d:39:8d:
         33:f3:4c:37:74:4b:0f:91:2c:8f:e7:48:88:82:ca:3f:4c:f9:
         5d:b6:7c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:24:52 2025 by rpki-client