This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBBB199AC3D211F0BC019EEFDAE4EC9C.roa
File:                     CBBB199AC3D211F0BC019EEFDAE4EC9C.roa (raw, json)
Hash identifier:          jekUqWVt5OAvdjXSGfAzinQ4p/n6jeD0U4yR/98w+9Q=
Subject key identifier:   3E:AB:58:FC:A8:07:5B:FC:C3:3C:B6:F7:77:6D:69:6F:BF:8B:82:6A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A983
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBBB199AC3D211F0BC019EEFDAE4EC9C.roa
Signing time:             Mon 17 Nov 2025 16:30:58 +0000
ROA not before:           Mon 17 Nov 2025 16:30:50 +0000
ROA not after:            Mon 12 Jan 2026 16:30:50 +0000
asID:                     20326
IP address blocks:        154.83.152.0/22 maxlen: 24
                          154.83.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108931 (0x1a983)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 17 16:30:50 2025 GMT
            Not After : Jan 12 16:30:50 2026 GMT
        Subject: CN=691b4dc2-8c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:67:fe:45:3a:92:af:8d:1a:86:4f:71:d9:50:
                    6e:14:41:d6:51:d7:3d:08:89:21:8a:44:16:69:12:
                    c7:24:16:b0:15:c6:74:c2:0d:6f:ab:28:5a:a9:20:
                    cb:a2:1d:e0:2c:76:73:56:40:81:d5:e2:31:02:78:
                    ae:83:ec:24:85:b7:09:64:52:44:2c:5c:e7:c7:fe:
                    a3:f0:fa:86:ae:30:78:39:a6:71:1c:93:84:b5:1b:
                    2c:29:b1:bd:97:44:72:46:3a:24:01:aa:70:ae:8a:
                    33:25:f0:a1:37:cd:22:79:d0:e7:bb:d7:e0:8d:8c:
                    8a:c2:32:67:84:ad:a2:38:91:f1:d5:eb:d4:b8:fc:
                    64:a9:ee:de:68:21:af:7b:85:60:60:cd:6e:e8:83:
                    3d:d8:c8:c2:16:53:bb:a9:c2:a2:f0:a9:32:0c:d8:
                    52:cd:f6:61:91:3a:7d:68:62:e7:b9:fc:ab:e1:f0:
                    c4:bc:5b:a2:97:5f:ce:b3:02:97:8c:c1:c3:81:c7:
                    dc:ec:45:d9:bb:ec:20:8a:d6:8a:f9:b3:e6:36:a5:
                    c8:41:67:75:3b:d2:00:89:d1:3c:b2:a7:e6:6e:f1:
                    23:09:3f:90:e8:ce:cd:ec:93:06:5e:cc:fd:e0:3e:
                    0a:4b:6b:d9:d2:a7:39:d0:ec:3e:9a:64:dc:0e:35:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AB:58:FC:A8:07:5B:FC:C3:3C:B6:F7:77:6D:69:6F:BF:8B:82:6A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBBB199AC3D211F0BC019EEFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.152.0/22
                  154.83.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:76:0a:1e:7f:ad:8d:c7:2f:d4:5d:6c:d2:22:d9:ff:c4:e1:
         40:6c:bb:b3:ee:4d:14:54:e2:1d:7c:10:71:84:2f:1e:e1:06:
         10:4c:86:d4:f7:75:bf:6f:b8:65:0b:dc:09:95:00:2c:ed:78:
         a9:74:cc:f3:93:8a:fc:a7:1e:41:f1:93:05:5e:1c:c2:f8:1d:
         fd:b5:b6:c4:01:34:ce:11:1e:60:14:26:4a:5b:5e:a2:1e:92:
         5a:1b:3f:d9:0c:2c:1e:68:c7:f4:4c:a9:05:7e:7e:f8:aa:d6:
         00:db:98:d7:9f:28:8d:b2:7a:71:a0:ff:31:29:a6:71:ae:f0:
         5b:c4:b5:89:d5:e2:1a:a3:cb:27:ff:e8:ea:eb:e7:74:12:10:
         5d:70:18:53:57:f1:b1:06:79:34:70:ee:2b:8b:a5:b8:c0:ac:
         7b:81:e8:48:75:ed:fe:82:f7:a8:23:e3:78:fa:da:de:9f:df:
         74:2d:bc:73:33:93:51:ff:06:85:5d:4f:66:1b:fe:1f:15:ee:
         46:7e:27:12:f3:23:72:57:f9:c5:3e:ba:9b:a6:03:b4:8a:e1:
         f6:3a:ca:50:4e:a8:ac:ec:96:10:08:a9:41:54:c2:a3:a7:13:
         04:09:90:35:74:6b:e8:42:9d:d5:7a:ac:46:3f:d6:b5:88:ab:
         0f:5e:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:19 2025 by rpki-client