This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B680B242C60C11F096C682EFDAE4EC9C.roa
File:                     B680B242C60C11F096C682EFDAE4EC9C.roa (raw, json)
Hash identifier:          ZSv1Ef6Gj9OfM3mDMX1Pv7G5LI22//iR+VFe7vdvy7c=
Subject key identifier:   E0:E7:E2:35:A5:E4:2E:5C:D0:0E:4F:B2:B7:04:BC:C0:B8:EF:7C:A3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AA04
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B680B242C60C11F096C682EFDAE4EC9C.roa
Signing time:             Thu 20 Nov 2025 12:30:36 +0000
ROA not before:           Thu 20 Nov 2025 12:30:30 +0000
ROA not after:            Tue 30 Dec 2025 12:30:30 +0000
asID:                     401075
IP address blocks:        154.201.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109060 (0x1aa04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 20 12:30:30 2025 GMT
            Not After : Dec 30 12:30:30 2025 GMT
        Subject: CN=691f09ec-ea54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c0:a3:91:89:0e:ec:77:f1:74:8c:09:69:b9:
                    44:b8:d0:ed:7f:2f:e9:d7:35:27:a6:72:ed:55:38:
                    50:91:48:11:85:78:37:2e:bf:e6:b0:da:78:8d:ae:
                    50:a4:53:2a:2c:5c:d6:bc:2c:ec:9e:6d:99:aa:0f:
                    67:14:08:4d:69:1d:61:3b:d0:4a:87:49:b5:21:87:
                    54:eb:82:09:b3:71:1d:11:18:ae:67:58:52:4e:00:
                    80:95:b7:15:d2:9e:4a:a3:01:7c:1e:a0:54:ae:8a:
                    c4:36:2b:0e:9a:14:ac:cb:fd:54:b2:bc:35:a0:15:
                    ed:80:a4:1c:67:01:36:f8:59:c7:0a:d4:f3:ab:99:
                    6b:10:33:f2:2d:ae:26:27:ad:da:a0:a7:b7:e3:b4:
                    c2:82:83:9a:9d:4e:ce:bd:8c:53:b7:fd:51:05:45:
                    47:5c:4b:b3:6b:26:27:04:e0:8f:9a:9f:fd:ff:1d:
                    c1:0c:3c:9a:2b:fc:f0:bc:b1:2f:34:b4:fa:21:b3:
                    85:52:35:72:fc:d9:0e:0c:24:92:44:1f:12:ac:57:
                    89:5b:7e:f7:5e:c0:34:54:d2:9f:b4:77:6f:8a:49:
                    64:79:cb:30:b2:b6:74:5e:f6:40:85:de:ca:46:82:
                    49:27:85:f0:e3:66:2e:9e:df:8b:f5:9d:cc:8a:c9:
                    10:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E7:E2:35:A5:E4:2E:5C:D0:0E:4F:B2:B7:04:BC:C0:B8:EF:7C:A3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B680B242C60C11F096C682EFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:16:58:5f:6a:36:25:33:fe:d9:8d:21:ad:d4:8a:46:03:fc:
         b6:a9:14:16:8d:9d:74:8e:9a:07:cf:f8:9e:11:65:c4:30:f2:
         f7:2d:2f:80:f9:86:92:37:10:04:f1:71:16:71:fe:8a:c3:8b:
         98:af:9d:91:d4:53:f9:40:95:2a:33:cd:6e:7f:b1:5d:9f:9b:
         04:5c:c0:52:57:bf:39:8b:f4:80:17:f5:11:a8:c9:5d:75:dc:
         38:71:47:44:be:8a:cd:00:a2:cd:93:a6:4e:e5:6e:e8:a6:bf:
         2d:c6:ce:66:af:c5:75:8c:97:10:c9:ab:12:27:b2:df:a7:a4:
         2a:a6:94:da:62:84:d0:89:d6:a3:e6:83:a2:9c:31:1a:0d:0b:
         84:c3:3b:f6:20:34:3a:b9:7d:a5:2e:8b:d0:51:f4:14:2d:18:
         4a:fd:fc:0c:c9:8f:64:41:67:82:0a:af:91:bf:4a:b6:c8:3d:
         64:94:ae:42:30:5e:7b:13:0a:66:a9:b2:74:22:c3:61:71:74:
         60:70:6a:c6:de:52:43:76:c2:0d:8a:c4:b7:34:79:27:e3:70:
         8b:3f:3b:4e:67:59:62:3e:c8:13:d5:50:44:a0:52:f9:a7:5c:
         9a:03:83:2e:ed:6e:49:66:b5:eb:2b:75:6d:eb:fa:fe:d9:ee:
         4a:c9:1d:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaoEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTIwMTIzMDMwWhcNMjUxMjMwMTIzMDMwWjAYMRYw
FAYDVQQDEw02OTFmMDllYy1lYTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9cCjkYkO7HfxdIwJablEuNDtfy/p1zUnpnLtVThQkUgRhXg3Lr/msNp4
ja5QpFMqLFzWvCzsnm2Zqg9nFAhNaR1hO9BKh0m1IYdU64IJs3EdERiuZ1hSTgCA
lbcV0p5KowF8HqBUrorENisOmhSsy/1Usrw1oBXtgKQcZwE2+FnHCtTzq5lrEDPy
La4mJ63aoKe347TCgoOanU7OvYxTt/1RBUVHXEuzayYnBOCPmp/9/x3BDDyaK/zw
vLEvNLT6IbOFUjVy/NkODCSSRB8SrFeJW373XsA0VNKftHdviklkecswsrZ0XvZA
hd7KRoJJJ4Xw42Yunt+L9Z3MiskQcQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFODn
4jWl5C5c0A5PsrcEvMC473yjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNjgwQjI0MkM2MEMxMUYwOTZDNjgyRUZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsleMA0GCSqGSIb3DQEB
CwUAA4IBAQA4FlhfajYlM/7ZjSGt1IpGA/y2qRQWjZ10jpoHz/ieEWXEMPL3LS+A
+YaSNxAE8XEWcf6Kw4uYr52R1FP5QJUqM81uf7Fdn5sEXMBSV785i/SAF/URqMld
ddw4cUdEvorNAKLNk6ZO5W7opr8txs5mr8V1jJcQyasSJ7Lfp6QqppTaYoTQidaj
5oOinDEaDQuEwzv2IDQ6uX2lLovQUfQULRhK/fwMyY9kQWeCCq+Rv0q2yD1klK5C
MF57EwpmqbJ0IsNhcXRgcGrG3lJDdsINisS3NHkn43CLPztOZ1liPsgT1VBEoFL5
p1yaA4Mu7W5JZrXrK3Vt6/r+2e5KyR1H
-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:34 2025 by rpki-client