This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6915628BBC111F083980F87DAE4EC9C.roa
File:                     C6915628BBC111F083980F87DAE4EC9C.roa (raw, json)
Hash identifier:          0QR813lVZ2QdNVfJ1Y9TyfbLUgPk1ZP5ps0Iyv1Jppg=
Subject key identifier:   F9:14:E1:41:10:7F:46:9C:29:2F:6C:E7:F1:91:30:D3:05:0F:24:1C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A7DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6915628BBC111F083980F87DAE4EC9C.roa
Signing time:             Fri 07 Nov 2025 10:08:59 +0000
ROA not before:           Fri 07 Nov 2025 10:08:54 +0000
ROA not after:            Sat 27 Dec 2025 10:08:54 +0000
asID:                     142032
IP address blocks:        154.219.96.0/19 maxlen: 24
                          154.222.16.0/20 maxlen: 24
                          154.222.16.0/21 maxlen: 24
                          154.222.16.0/22 maxlen: 24
                          154.222.20.0/22 maxlen: 24
                          154.222.24.0/21 maxlen: 24
                          154.222.24.0/22 maxlen: 24
                          154.222.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108509 (0x1a7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  7 10:08:54 2025 GMT
            Not After : Dec 27 10:08:54 2025 GMT
        Subject: CN=690dc53a-5b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:a1:95:3e:88:25:c3:0c:4a:05:36:89:d2:
                    79:d1:e4:a7:67:4e:21:83:85:55:4e:a5:40:c8:f3:
                    8c:9b:fd:25:82:48:49:4c:fd:e4:28:1e:63:5e:6e:
                    e3:c6:5e:99:ee:9b:64:77:57:61:58:37:5e:2e:0d:
                    2b:d5:95:aa:06:14:03:23:fe:f9:3a:fe:23:cf:50:
                    4b:24:f7:2e:4d:80:54:7d:1a:0c:0a:82:64:b9:28:
                    da:83:51:33:a1:6b:db:1c:5c:2e:83:42:67:1e:81:
                    6f:2b:8b:ef:b2:75:e4:4b:78:fe:cf:05:3b:22:1f:
                    6c:97:21:74:71:f9:97:8b:80:2f:33:3c:ae:cc:bb:
                    93:c0:ee:8a:e2:31:69:34:42:f3:08:00:bf:3c:d9:
                    42:00:04:44:94:fb:44:b8:2c:5e:dc:4f:43:6e:44:
                    b4:3f:3f:7c:eb:12:b1:5e:34:e0:26:9d:57:96:88:
                    30:3c:8d:57:60:ef:08:c5:b2:c0:21:bb:17:25:f0:
                    4f:dd:4a:1a:1f:86:6c:ab:c1:a3:2c:9b:e1:11:7f:
                    a7:7d:9b:d4:3c:ff:07:c5:37:75:ff:99:0c:bf:51:
                    60:45:e5:1a:0f:d3:db:f6:1c:84:6f:33:e1:fe:b6:
                    92:6f:88:b4:f9:8e:37:42:f5:b8:3d:08:fc:fb:77:
                    85:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:14:E1:41:10:7F:46:9C:29:2F:6C:E7:F1:91:30:D3:05:0F:24:1C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6915628BBC111F083980F87DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.96.0/19
                  154.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:93:5a:96:d2:c3:da:ff:0a:b0:f3:65:61:d0:79:2e:1c:54:
         7d:18:73:82:42:2d:00:48:56:86:a8:32:23:1e:66:3f:fc:7f:
         d2:a5:07:67:51:f7:f3:c8:a5:49:4d:0c:14:1b:70:fc:61:31:
         c9:f3:96:57:4a:17:b2:65:9e:ff:2f:2c:17:c0:43:7f:93:25:
         77:f3:f6:4d:0c:b8:8a:ed:db:18:9e:77:59:da:cb:56:46:00:
         19:5e:9b:ba:24:b1:96:2e:41:c0:5f:d1:84:4e:f8:db:97:dc:
         17:e9:ef:40:db:c4:19:50:84:e9:03:2d:de:c3:96:93:ab:8b:
         3d:17:cf:10:f8:37:84:6a:68:c5:ac:46:fa:5c:70:04:c5:ca:
         30:75:be:cc:29:3a:39:35:3d:b8:a9:8b:2e:f7:42:3d:61:67:
         8f:cf:39:92:be:e7:3f:75:ff:6b:fb:b8:c7:f9:8e:7f:c4:22:
         3b:6e:80:bd:4c:ff:25:1e:e7:d8:d7:fb:50:c2:e3:f9:df:e4:
         a7:0d:66:e9:5c:2d:0f:0d:c1:59:43:78:4b:c5:a4:94:70:97:
         82:c6:c1:ca:5c:43:73:d0:3d:33:a8:df:ca:2f:76:6e:4a:12:
         1e:13:ad:1c:44:39:97:71:8b:18:4b:a0:e7:b7:77:64:fa:1b:
         71:28:1e:a4
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAafdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTA3MTAwODU0WhcNMjUxMjI3MTAwODU0WjAYMRYw
FAYDVQQDEw02OTBkYzUzYS01Yjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1S+hlT6IJcMMSgU2idJ50eSnZ04hg4VVTqVAyPOMm/0lgkhJTP3kKB5j
Xm7jxl6Z7ptkd1dhWDdeLg0r1ZWqBhQDI/75Ov4jz1BLJPcuTYBUfRoMCoJkuSja
g1EzoWvbHFwug0JnHoFvK4vvsnXkS3j+zwU7Ih9slyF0cfmXi4AvMzyuzLuTwO6K
4jFpNELzCAC/PNlCAARElPtEuCxe3E9DbkS0Pz986xKxXjTgJp1XlogwPI1XYO8I
xbLAIbsXJfBP3UoaH4Zsq8GjLJvhEX+nfZvUPP8HxTd1/5kMv1FgReUaD9Pb9hyE
bzPh/raSb4i0+Y43QvW4PQj8+3eFQQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFPkU
4UEQf0acKS9s5/GRMNMFDyQcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNjkxNTYyOEJCQzExMUYwODM5ODBGODdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFmttgAwQEmt4QMA0GCSqG
SIb3DQEBCwUAA4IBAQBUk1qW0sPa/wqw82Vh0HkuHFR9GHOCQi0ASFaGqDIjHmY/
/H/SpQdnUffzyKVJTQwUG3D8YTHJ85ZXSheyZZ7/LywXwEN/kyV38/ZNDLiK7dsY
nndZ2stWRgAZXpu6JLGWLkHAX9GETvjbl9wX6e9A28QZUITpAy3ew5aTq4s9F88Q
+DeEamjFrEb6XHAExcowdb7MKTo5NT24qYsu90I9YWePzzmSvuc/df9r+7jH+Y5/
xCI7boC9TP8lHufY1/tQwuP53+SnDWbpXC0PDcFZQ3hLxaSUcJeCxsHKXENz0D0z
qN/KL3ZuShIeE60cRDmXcYsYS6Dnt3dk+htxKB6k
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:15 2025 by rpki-client