This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C52F6F78BF0811F0921D9EB3DAE4EC9C.roa
File:                     C52F6F78BF0811F0921D9EB3DAE4EC9C.roa (raw, json)
Hash identifier:          fQAlvV+D2fXGxJX61u2bXJY00rxp1MZIz98FwKIJtnw=
Subject key identifier:   43:76:E4:D1:F6:7F:D9:F0:26:3F:F1:62:93:F9:5B:7D:47:5A:E1:FD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A85D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C52F6F78BF0811F0921D9EB3DAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 14:14:44 +0000
ROA not before:           Tue 11 Nov 2025 14:14:39 +0000
ROA not after:            Sun 15 Feb 2026 14:14:39 +0000
asID:                     9294
IP address blocks:        154.92.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108637 (0x1a85d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 11 14:14:39 2025 GMT
            Not After : Feb 15 14:14:39 2026 GMT
        Subject: CN=691344d4-13ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e2:e4:d8:fd:61:ef:5d:32:b9:bf:36:fa:f2:
                    90:7d:52:99:a2:d8:85:2f:4f:27:8d:63:b4:2c:0c:
                    ed:45:02:e1:d8:9f:71:70:0c:92:20:bf:6d:a2:26:
                    e4:1c:c7:c1:9d:f7:47:2b:86:b3:93:f0:98:3c:6b:
                    a6:72:69:93:2b:8a:e4:e1:e5:76:65:cf:80:1d:89:
                    09:b8:13:7a:61:d9:ca:dc:e3:fd:83:30:78:6c:b8:
                    ad:8a:c9:16:4c:f0:f8:49:63:e3:9c:0c:ee:ae:65:
                    fe:77:1e:c8:90:a8:59:ce:2b:dd:2e:f0:30:f6:b8:
                    48:ee:4b:da:ac:b2:68:ed:32:ab:f0:f3:23:4d:9b:
                    83:26:8c:0e:7e:5d:56:d9:f9:6c:24:cc:5d:42:8d:
                    ea:a1:84:6f:4d:77:24:4c:f8:e8:21:b5:89:af:e4:
                    ca:5d:bd:86:1f:ac:8d:4a:ed:40:43:c8:00:5f:25:
                    10:9e:04:6a:a9:b9:13:48:3f:e7:86:5d:da:fa:c5:
                    4b:da:f8:0a:7b:96:f0:f6:bf:40:f3:8c:bf:82:82:
                    db:ab:a5:1b:97:ed:93:e1:59:1e:51:6e:2f:3c:62:
                    78:e7:81:14:9f:28:a0:ad:44:9f:1e:34:74:d9:5f:
                    08:48:d7:a6:59:9c:4c:01:ec:4b:1d:18:dc:7f:d4:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:76:E4:D1:F6:7F:D9:F0:26:3F:F1:62:93:F9:5B:7D:47:5A:E1:FD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C52F6F78BF0811F0921D9EB3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         40:ab:54:18:58:81:57:1c:d1:59:6f:94:ca:01:0d:38:69:99:
         a5:18:c5:16:e5:d0:a1:7b:2d:fb:b8:90:a8:10:81:19:5e:d0:
         fd:6c:cc:6d:5f:52:f4:09:ed:e7:15:ec:b1:68:f4:f8:8a:3a:
         05:9d:57:e8:05:f2:9c:f9:1a:09:89:97:1d:b8:4c:e9:95:fe:
         53:02:c6:55:1b:b5:7a:fd:c6:4e:92:f3:ea:d6:64:fb:b2:fa:
         88:eb:70:ca:61:e3:0f:fb:a8:e3:72:62:f3:dc:71:b8:10:af:
         0e:5f:f7:f5:10:41:a7:7d:f9:ea:dc:e2:88:2a:82:ee:04:60:
         1f:68:67:b1:8e:c3:a0:e1:6f:ff:69:54:1c:12:4c:19:e6:3d:
         a8:f8:1d:75:5e:e3:7e:b1:60:58:c9:d4:1a:48:61:44:e3:eb:
         2a:9c:09:e5:5d:46:cb:6e:1d:07:7b:5d:cb:cd:1d:4f:a2:56:
         1d:7d:2c:5a:b1:a9:0d:b6:c6:ba:9d:9a:61:05:68:de:4d:91:
         c1:ce:8d:b4:85:71:bd:99:48:80:26:f7:9e:b1:c4:bc:29:8c:
         4f:ad:fc:aa:b0:6d:bf:c7:e8:be:a6:88:18:1a:a2:84:11:94:
         45:24:1b:b6:81:bd:28:a8:fa:f2:d1:16:6d:12:d1:4c:83:11:
         e3:33:67:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAahdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTExMTQxNDM5WhcNMjYwMjE1MTQxNDM5WjAYMRYw
FAYDVQQDEw02OTEzNDRkNC0xM2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4OLk2P1h710yub82+vKQfVKZotiFL08njWO0LAztRQLh2J9xcAySIL9t
oibkHMfBnfdHK4azk/CYPGumcmmTK4rk4eV2Zc+AHYkJuBN6YdnK3OP9gzB4bLit
iskWTPD4SWPjnAzurmX+dx7IkKhZzivdLvAw9rhI7kvarLJo7TKr8PMjTZuDJowO
fl1W2flsJMxdQo3qoYRvTXckTPjoIbWJr+TKXb2GH6yNSu1AQ8gAXyUQngRqqbkT
SD/nhl3a+sVL2vgKe5bw9r9A84y/goLbq6Ubl+2T4VkeUW4vPGJ454EUnyigrUSf
HjR02V8ISNemWZxMAexLHRjcf9SVuwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEN2
5NH2f9nwJj/xYpP5W31HWuH9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNTJGNkY3OEJGMDgxMUYwOTIxRDlFQjNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlzgMA0GCSqGSIb3DQEB
CwUAA4IBAQBAq1QYWIFXHNFZb5TKAQ04aZmlGMUW5dChey37uJCoEIEZXtD9bMxt
X1L0Ce3nFeyxaPT4ijoFnVfoBfKc+RoJiZcduEzplf5TAsZVG7V6/cZOkvPq1mT7
svqI63DKYeMP+6jjcmLz3HG4EK8OX/f1EEGnffnq3OKIKoLuBGAfaGexjsOg4W//
aVQcEkwZ5j2o+B11XuN+sWBYydQaSGFE4+sqnAnlXUbLbh0He13LzR1PolYdfSxa
sakNtsa6nZphBWjeTZHBzo20hXG9mUiAJveescS8KYxPrfyqsG2/x+i+pogYGqKE
EZRFJBu2gb0oqPry0RZtEtFMgxHjM2dU
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:14 2025 by rpki-client