This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC08A31ACB8C11F09C375B9ADAE4EC9C.roa
File:                     CC08A31ACB8C11F09C375B9ADAE4EC9C.roa (raw, json)
Hash identifier:          KCzf/KsQlVMLwGcMLcuLoQ3Q5A345VKEUdOgXjheTSk=
Subject key identifier:   7F:8C:65:96:ED:E3:82:DC:E1:46:DD:B4:B8:37:6E:04:C0:58:7C:2B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AADB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC08A31ACB8C11F09C375B9ADAE4EC9C.roa
Signing time:             Thu 27 Nov 2025 12:30:03 +0000
ROA not before:           Thu 27 Nov 2025 12:29:58 +0000
ROA not after:            Mon 08 Dec 2025 12:29:58 +0000
asID:                     1405
IP address blocks:        154.83.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109275 (0x1aadb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 27 12:29:58 2025 GMT
            Not After : Dec  8 12:29:58 2025 GMT
        Subject: CN=6928444b-7b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:a0:7d:4f:17:23:8b:f4:89:a1:6c:68:89:
                    b8:93:09:6a:b5:dd:09:4a:03:95:9a:b6:b4:68:98:
                    aa:e3:76:e0:34:23:3c:98:f1:c2:d0:69:c1:51:ab:
                    a2:4f:ad:70:4c:3a:51:61:01:31:e3:24:01:70:f1:
                    f7:a5:d7:57:09:a6:70:ac:a4:41:f1:05:14:4c:a5:
                    a5:eb:64:8f:1d:af:75:42:1c:22:25:3d:e7:52:56:
                    8a:a3:81:92:ea:a0:f2:72:fe:b8:b2:ad:df:45:37:
                    69:d1:bc:5d:51:f2:68:cb:03:e7:53:1e:79:bf:00:
                    7a:76:b3:ba:a1:38:80:99:19:4f:30:2b:aa:8b:9f:
                    79:6b:28:ef:7a:53:83:c9:1d:17:f0:ae:07:23:4f:
                    db:3f:ed:d8:10:ee:e0:f9:70:49:4f:60:f1:70:ad:
                    8a:a9:41:25:1f:db:68:0e:dc:53:b6:6f:60:1b:07:
                    d5:25:13:e9:e5:cf:9c:66:b7:ae:56:b0:23:fa:2f:
                    96:02:31:f0:12:52:34:57:54:3a:8e:a3:23:5d:29:
                    d2:34:91:24:be:46:c8:dc:d0:2a:c2:c6:83:2f:c2:
                    a1:4f:e4:1c:dc:99:51:de:94:84:54:fc:f6:09:e5:
                    92:17:ec:cf:40:d6:8b:4d:44:64:06:3b:a1:d4:ab:
                    d8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8C:65:96:ED:E3:82:DC:E1:46:DD:B4:B8:37:6E:04:C0:58:7C:2B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC08A31ACB8C11F09C375B9ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:ec:bb:2e:91:16:35:0a:bb:f7:ad:b1:51:d1:4f:87:64:d2:
         48:1b:68:fd:21:85:b1:86:05:a4:0d:6e:32:fa:a3:0a:0e:0f:
         36:7b:e8:d1:dc:fc:64:8a:33:62:81:ba:1a:6d:a7:12:0e:26:
         cb:13:46:4d:60:c1:62:7f:ae:1e:29:c2:57:8b:49:cd:8c:32:
         7f:5d:b2:12:2c:cd:eb:42:e5:d1:04:bc:f7:7b:65:04:29:5e:
         d9:5c:8b:be:ea:01:71:85:a5:e0:73:71:9f:67:e4:c6:f0:04:
         63:e0:66:17:01:d8:8d:a5:59:3f:f3:be:f4:7b:ec:f9:03:46:
         07:f5:e1:9d:7e:c6:71:43:13:ed:28:70:66:c2:fe:6d:b1:9a:
         ac:f6:54:0c:eb:05:d3:4f:c3:86:a4:03:e9:13:1b:87:31:97:
         dc:9c:aa:92:e5:68:4f:08:c3:e9:df:58:20:bb:c9:26:a3:28:
         28:e9:05:3c:e9:8c:2c:cf:9f:f7:eb:11:9b:5b:6e:6f:df:de:
         b0:ff:ca:9c:64:76:ca:3b:b6:30:0a:d7:04:53:40:91:16:46:
         a7:b1:b3:ae:3e:74:0b:ab:cc:e3:cd:57:6b:98:5a:44:a9:6a:
         94:f8:c5:39:48:9b:b4:00:46:78:05:2b:bc:3e:48:f3:d0:80:
         6d:25:9c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:20 2025 by rpki-client