This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB6A461ABA1711F098398D8CDAE4EC9C.roa
File:                     CB6A461ABA1711F098398D8CDAE4EC9C.roa (raw, json)
Hash identifier:          Ka43xglws2y4gLcgwm3OJiIV+q8JGZXb8uf3xvYBsEI=
Subject key identifier:   0E:60:01:D5:9F:F4:64:BD:BD:61:89:8C:92:C4:AC:FA:25:C6:AF:31
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A77C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB6A461ABA1711F098398D8CDAE4EC9C.roa
Signing time:             Wed 05 Nov 2025 07:19:42 +0000
ROA not before:           Wed 05 Nov 2025 07:19:34 +0000
ROA not after:            Thu 11 Dec 2025 07:19:34 +0000
asID:                     214143
IP address blocks:        154.81.132.0/22 maxlen: 24
                          154.81.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108412 (0x1a77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  5 07:19:34 2025 GMT
            Not After : Dec 11 07:19:34 2025 GMT
        Subject: CN=690afa8e-150a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:26:79:65:ba:9a:83:f8:e3:b3:84:2f:9f:89:
                    63:4d:c6:db:cb:9c:95:cd:04:39:85:c9:c2:46:68:
                    fc:32:b4:ae:ca:95:54:cd:4b:0c:9d:19:4c:30:05:
                    1f:6d:a5:89:0c:60:fa:a4:74:c9:c0:b1:f3:13:05:
                    1f:93:56:dd:0e:cd:a9:74:f6:12:9e:3b:ab:58:6d:
                    49:34:89:33:4f:97:86:3e:96:21:82:5b:e5:ce:8e:
                    27:0f:6b:38:85:9f:f3:5a:41:f9:cc:86:72:b5:85:
                    f7:a1:a8:1b:c8:96:39:38:6b:8d:a6:07:ed:00:d9:
                    61:bc:6d:75:a8:cc:cc:02:7c:45:2a:bd:ca:54:36:
                    9b:84:2c:4c:3c:af:89:fb:ca:b4:89:9d:c8:c3:13:
                    32:43:4d:9e:ea:0e:03:86:7c:3a:84:55:89:11:7f:
                    59:07:41:26:bf:ce:83:d8:b5:f0:92:0c:2e:49:7c:
                    29:58:17:20:a6:11:4f:a2:19:b3:5e:dc:e8:14:a5:
                    b3:29:65:5d:d0:aa:00:c7:cb:8f:57:35:d7:bf:92:
                    76:d8:cb:dc:5b:64:8e:42:fc:88:70:dc:f5:f0:6c:
                    d4:94:d1:75:cf:fe:92:fe:57:21:8c:67:cd:2f:2a:
                    5d:16:5a:d7:55:e2:50:e7:06:1b:86:11:36:41:6f:
                    91:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:60:01:D5:9F:F4:64:BD:BD:61:89:8C:92:C4:AC:FA:25:C6:AF:31
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB6A461ABA1711F098398D8CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.132.0/22
                  154.81.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:24:0f:97:30:66:b7:cd:a3:b4:a8:bf:07:4b:91:da:41:91:
         87:b2:e2:b0:80:a3:64:3d:b6:78:34:1b:70:5f:af:3a:98:2c:
         29:05:9d:ab:62:91:8f:8a:8d:3f:c8:aa:eb:ac:f8:bb:31:69:
         da:22:7c:5e:3c:10:1e:bf:5f:5f:d1:d1:84:83:31:57:20:b5:
         c2:18:36:a3:51:b3:ff:7f:95:0e:47:5e:c5:14:43:2d:55:ec:
         ee:04:33:6a:b5:64:cb:71:41:b5:74:38:2d:9b:a2:f7:96:17:
         6b:a2:4d:a3:84:8b:e4:85:03:e0:7b:af:36:8f:40:0d:10:66:
         3d:ba:97:43:9a:76:90:f2:f6:5f:d6:14:e8:ef:46:8f:7d:a5:
         a7:84:c9:0f:8e:56:74:91:a1:fe:30:19:57:8a:18:0e:b4:23:
         9c:3e:99:21:20:d0:b7:91:85:da:16:9b:56:1f:4d:6d:ce:e3:
         60:11:91:eb:fd:a8:f6:c9:75:a8:39:a0:3e:02:f7:0b:9a:95:
         8e:b4:c3:42:cb:e8:8e:71:eb:c6:5b:d1:63:9d:41:2c:b1:39:
         27:be:36:56:9a:2c:04:9d:28:a9:09:94:7c:b7:3c:11:fb:67:
         56:49:fe:ae:b0:c1:8a:53:1b:97:dc:e3:1a:73:9a:a3:5c:63:
         a5:bc:3b:88
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAad8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTA1MDcxOTM0WhcNMjUxMjExMDcxOTM0WjAYMRYw
FAYDVQQDEw02OTBhZmE4ZS0xNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3iZ5Zbqag/jjs4Qvn4ljTcbby5yVzQQ5hcnCRmj8MrSuypVUzUsMnRlM
MAUfbaWJDGD6pHTJwLHzEwUfk1bdDs2pdPYSnjurWG1JNIkzT5eGPpYhglvlzo4n
D2s4hZ/zWkH5zIZytYX3oagbyJY5OGuNpgftANlhvG11qMzMAnxFKr3KVDabhCxM
PK+J+8q0iZ3IwxMyQ02e6g4Dhnw6hFWJEX9ZB0Emv86D2LXwkgwuSXwpWBcgphFP
ohmzXtzoFKWzKWVd0KoAx8uPVzXXv5J22MvcW2SOQvyIcNz18GzUlNF1z/6S/lch
jGfNLypdFlrXVeJQ5wYbhhE2QW+RZwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFA5g
AdWf9GS9vWGJjJLErPolxq8xMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQjZBNDYxQUJBMTcxMUYwOTgzOThEOENEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmlGEAwQBmlGKMA0GCSqG
SIb3DQEBCwUAA4IBAQCIJA+XMGa3zaO0qL8HS5HaQZGHsuKwgKNkPbZ4NBtwX686
mCwpBZ2rYpGPio0/yKrrrPi7MWnaInxePBAev19f0dGEgzFXILXCGDajUbP/f5UO
R17FFEMtVezuBDNqtWTLcUG1dDgtm6L3lhdrok2jhIvkhQPge682j0ANEGY9updD
mnaQ8vZf1hTo70aPfaWnhMkPjlZ0kaH+MBlXihgOtCOcPpkhINC3kYXaFptWH01t
zuNgEZHr/aj2yXWoOaA+AvcLmpWOtMNCy+iOcevGW9FjnUEssTknvjZWmiwEnSip
CZR8tzwR+2dWSf6usMGKUxuX3OMac5qjXGOlvDuI
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:11 2025 by rpki-client