This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D446F02CB62E11F0A68EFCEFDAE4EC9C.roa
File:                     D446F02CB62E11F0A68EFCEFDAE4EC9C.roa (raw, json)
Hash identifier:          jLofooN+cJWnFnsrqtL+4D4/7qeIhKa1VGDbK4bs3lk=
Subject key identifier:   13:2D:2E:04:F4:AB:20:E9:60:3E:2A:7B:6A:74:0C:A3:80:F1:16:D6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A6BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D446F02CB62E11F0A68EFCEFDAE4EC9C.roa
Signing time:             Fri 31 Oct 2025 07:54:30 +0000
ROA not before:           Fri 31 Oct 2025 07:54:25 +0000
ROA not after:            Fri 08 May 2026 07:54:25 +0000
asID:                     328608
IP address blocks:        154.197.122.0/24 maxlen: 24
                          154.209.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108218 (0x1a6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 31 07:54:25 2025 GMT
            Not After : May  8 07:54:25 2026 GMT
        Subject: CN=69046b36-d2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:ee:c5:28:5e:b1:92:c1:4b:6e:64:7b:e9:
                    57:53:ab:4c:b0:ff:a3:74:17:d1:10:9c:e6:db:26:
                    ee:be:eb:ae:a0:1b:5f:ea:f5:8c:a8:7f:4e:5d:a2:
                    47:6b:8f:82:f0:74:db:0a:f6:e7:1f:95:6f:48:73:
                    71:28:18:85:1e:47:43:0f:73:32:5b:c9:4a:51:1d:
                    bb:c1:1f:94:51:ae:73:22:bb:d5:f3:70:c3:e2:e6:
                    e9:c8:48:90:1e:12:3d:f2:e5:ed:42:40:6b:93:c8:
                    3c:93:b0:0f:d3:9d:35:60:ec:3d:8c:83:e1:9a:16:
                    39:9c:52:e9:ad:c7:bc:79:ac:4c:29:b8:05:4c:20:
                    9c:58:55:c6:6e:03:83:01:08:32:6e:cc:11:66:3f:
                    0e:bf:13:8b:47:f2:30:d4:4b:36:e5:52:7e:ac:f8:
                    09:bd:1d:18:15:60:82:74:bb:90:64:9e:2b:29:3b:
                    a9:4d:43:fd:9c:c1:3d:93:13:b6:a6:16:ab:8a:a5:
                    d3:7a:6e:eb:ad:94:64:c4:42:62:4d:11:ca:9c:ee:
                    4a:7e:33:e2:37:aa:71:2f:20:97:ef:57:60:47:31:
                    24:f4:d8:a2:b6:3b:fe:38:44:42:82:52:0b:80:de:
                    32:a0:c7:2a:a1:5e:42:ad:9f:32:c5:6c:37:8b:e0:
                    29:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2D:2E:04:F4:AB:20:E9:60:3E:2A:7B:6A:74:0C:A3:80:F1:16:D6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D446F02CB62E11F0A68EFCEFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.122.0/24
                  154.209.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:bc:ec:3c:62:11:0a:80:70:58:2f:8a:96:ff:fc:39:28:96:
         2f:c2:b2:d6:53:25:4b:fd:45:a4:be:4d:f8:ca:d6:59:91:19:
         66:d3:6c:3f:dc:8d:77:a2:87:17:8f:3c:9a:bc:60:3e:3e:32:
         d8:b6:68:1a:cf:ba:4c:63:42:8b:21:27:9b:10:1b:8b:f6:39:
         5b:84:dd:95:54:83:26:aa:91:46:7f:9f:84:d0:12:ad:bc:e2:
         12:7b:b9:2a:48:92:f4:f5:4d:cb:ce:05:d6:a2:ad:38:01:b4:
         35:d0:3c:14:f4:4f:dd:29:5b:87:61:8d:9f:6d:7a:b1:f9:83:
         dc:0e:8d:15:32:fb:53:a3:3e:08:80:f0:2d:10:7d:90:4c:58:
         91:b7:ab:de:f0:16:f8:e2:14:45:ff:9b:d6:b4:50:7d:55:4e:
         ce:39:ba:16:0e:ce:4c:0c:72:c8:ac:72:48:fa:7b:55:41:bb:
         24:d5:50:06:1e:63:ba:f9:81:eb:e6:4f:b5:ed:35:a9:58:fc:
         31:9c:58:4c:85:5a:c9:15:4d:02:0f:96:71:9d:01:62:29:57:
         a2:12:04:51:3e:cb:90:85:ef:b0:f3:56:05:b9:9c:e4:51:93:
         87:20:d6:c8:36:28:98:b5:81:e1:92:d5:0a:15:c0:60:d3:68:
         1a:83:cc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:07:08 2025 by rpki-client