This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3A042CCBAF311F0818ACDF2DAE4EC9C.roa
File:                     C3A042CCBAF311F0818ACDF2DAE4EC9C.roa (raw, json)
Hash identifier:          +x7W9CXe6tIRO+HWIPkACsENiyOvog1JHfbYHuSzYP0=
Subject key identifier:   1D:48:34:C2:9A:DC:35:14:E1:41:42:94:60:5A:CB:8E:55:14:42:81
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A7AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3A042CCBAF311F0818ACDF2DAE4EC9C.roa
Signing time:             Thu 06 Nov 2025 09:34:17 +0000
ROA not before:           Thu 06 Nov 2025 09:34:11 +0000
ROA not after:            Fri 12 Dec 2025 09:34:11 +0000
asID:                     212042
IP address blocks:        154.83.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108458 (0x1a7aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  6 09:34:11 2025 GMT
            Not After : Dec 12 09:34:11 2025 GMT
        Subject: CN=690c6b99-15aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:46:48:40:fd:77:6c:9f:69:fb:51:2e:a2:
                    06:f9:3e:ce:f3:a2:15:fd:2a:68:70:4a:ed:e0:87:
                    6a:56:de:8f:31:89:96:84:61:c2:d0:68:98:a0:b0:
                    6c:64:70:60:95:2b:f4:cd:75:ed:0a:8a:95:ec:9f:
                    14:05:f8:da:6a:c3:4c:ac:98:81:52:0f:9f:5a:1f:
                    8c:21:0e:43:f9:94:13:65:fc:e5:54:72:e4:cc:96:
                    3c:d4:92:99:96:a7:0a:37:0b:58:5b:04:c6:a0:6e:
                    3b:13:c8:df:db:53:62:55:43:53:ab:04:57:21:40:
                    a0:87:97:69:a7:dc:21:f8:bd:27:d6:45:ed:26:b9:
                    84:a2:8e:7f:26:39:38:6d:0a:6b:f0:7f:dd:d8:35:
                    db:ae:4c:e3:1d:03:aa:99:8d:57:5b:8f:c7:37:3d:
                    7f:85:5e:8d:74:da:2f:78:cf:4f:c9:61:d5:9e:eb:
                    89:69:11:ca:54:5d:94:e5:9c:f2:0a:72:9d:75:00:
                    b7:8c:53:3b:17:60:a3:ad:5c:c8:6a:cd:4f:10:80:
                    76:e4:17:1f:c7:6d:30:38:25:ad:41:77:65:49:ca:
                    5c:da:33:e1:b6:ac:40:02:a3:47:89:dc:db:37:52:
                    a0:7f:d9:34:f2:40:1c:65:28:a3:4e:a8:2e:96:aa:
                    48:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:48:34:C2:9A:DC:35:14:E1:41:42:94:60:5A:CB:8E:55:14:42:81
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3A042CCBAF311F0818ACDF2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:48:28:83:9d:d6:84:2a:b3:00:a3:37:5e:2e:9f:ae:fa:54:
         eb:0a:59:a8:94:a2:f9:90:71:9c:4d:fe:9f:2d:b9:fd:3e:1d:
         da:ef:20:e8:97:ea:2c:c9:49:93:a4:8a:22:05:6f:9b:32:57:
         37:bd:8e:19:94:2d:45:91:84:fb:d9:d8:44:5c:bb:12:ad:f3:
         88:8e:ef:3e:a0:9d:d1:56:25:dd:5d:c0:fd:a5:e0:e5:3e:4d:
         1d:67:17:2f:d7:0f:15:c0:77:90:39:a5:24:81:83:3c:ab:39:
         c1:81:2f:78:b6:cd:ca:a9:a2:4a:aa:5c:7a:73:3f:ed:60:ff:
         2f:24:2a:e6:fe:51:3f:90:f2:15:de:31:3f:fb:6f:76:52:cf:
         36:a3:12:2a:c2:5d:f7:01:de:b6:f4:ba:f9:97:a1:10:4c:62:
         87:1b:f3:08:f5:07:fa:f0:a1:66:7e:68:68:59:76:3e:b0:f9:
         56:13:64:ca:58:9a:93:f3:01:38:f0:aa:d1:a6:d8:2e:6b:90:
         1a:63:79:d3:d8:90:a6:4c:12:d0:c6:3d:9f:f8:4a:f9:a8:73:
         ce:e5:32:e0:0a:8c:77:0c:a4:a6:8c:cd:33:5a:8c:05:3b:4f:
         75:13:e5:23:dd:25:90:49:30:90:bd:9c:18:0d:e1:ef:b1:b8:
         a6:e0:cb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:22 2025 by rpki-client