This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC687FEC6D111F0B5EF92CCDAE4EC9C.roa
File:                     DCC687FEC6D111F0B5EF92CCDAE4EC9C.roa (raw, json)
Hash identifier:          ORAe/QHzKG3B1T3L/9tVhd4cI5tCG4k6RC6AyL4tJwQ=
Subject key identifier:   AA:1B:07:71:DB:5C:0E:F0:57:5B:78:3D:BB:06:68:10:52:F7:03:F4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AA1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC687FEC6D111F0B5EF92CCDAE4EC9C.roa
Signing time:             Fri 21 Nov 2025 12:01:51 +0000
ROA not before:           Fri 21 Nov 2025 12:01:45 +0000
ROA not after:            Sat 27 Dec 2025 12:01:45 +0000
asID:                     395793
IP address blocks:        154.83.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109086 (0x1aa1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 21 12:01:45 2025 GMT
            Not After : Dec 27 12:01:45 2025 GMT
        Subject: CN=692054ae-dd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:67:a4:75:26:7a:d2:79:68:df:9c:67:59:86:
                    ef:4d:45:38:fe:0a:23:90:ac:27:50:29:68:bc:6b:
                    09:d9:b2:00:40:33:fd:db:f4:3e:2b:40:f2:8b:1b:
                    f8:05:28:25:fa:cb:2c:14:6f:7e:66:1d:35:f3:58:
                    65:77:b0:b4:94:48:f5:98:81:46:48:51:02:70:0f:
                    a7:7e:26:06:67:0f:c0:59:51:30:87:03:85:58:f7:
                    76:a9:54:5a:0c:89:9c:d7:29:9f:3a:5c:9a:25:6d:
                    af:69:5c:68:de:d6:5b:ec:6a:72:54:b5:a9:2f:f1:
                    65:9b:96:c2:dd:a7:e9:fd:45:22:4a:16:9a:fe:0b:
                    7f:5d:c0:90:1d:42:8a:1a:57:2a:ee:3b:a5:9e:8e:
                    56:ad:64:c3:83:4f:57:cf:d1:a3:35:06:44:49:51:
                    ec:2f:11:22:79:b7:e3:7d:74:33:da:fc:8a:2f:8f:
                    df:0e:f8:96:a4:2d:21:ec:0a:2f:e5:c7:52:88:34:
                    54:6d:ea:6f:9b:96:6d:fa:81:b3:3d:f0:7c:dd:c1:
                    0e:11:a1:e3:ed:69:99:d0:22:19:33:19:0a:2a:a9:
                    ae:b9:33:e2:84:b3:02:cc:55:18:81:af:87:ae:ae:
                    96:40:93:13:d5:b0:b2:57:55:e1:01:a2:9b:25:e5:
                    ab:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1B:07:71:DB:5C:0E:F0:57:5B:78:3D:BB:06:68:10:52:F7:03:F4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC687FEC6D111F0B5EF92CCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c5:17:48:a6:87:55:20:b3:8e:c0:db:87:a0:01:14:00:4f:1d:
         36:68:41:6f:f0:a3:a4:21:54:fe:a4:59:66:f2:49:2d:cb:59:
         b4:cb:b9:2e:b6:ef:9c:5b:70:27:a0:90:e0:c1:f8:29:94:59:
         df:d6:d1:65:6e:61:13:e1:a7:49:2c:fa:ba:ae:19:4d:30:0d:
         83:1e:71:bb:e6:b5:09:bb:50:60:98:d5:4e:04:1b:da:87:ec:
         56:16:cc:b2:b7:7f:d1:bf:50:78:ca:d7:1e:de:6c:fa:97:67:
         e9:21:9c:77:ac:dd:cf:cc:d5:0d:21:74:5e:64:b8:3c:a5:b2:
         5e:a4:9b:c5:bf:2f:c8:e1:5a:50:01:13:6a:78:81:f7:4c:0d:
         ca:d8:81:09:84:3b:d6:7a:ff:63:03:2e:e2:ae:94:03:98:69:
         b3:9f:37:d8:af:cb:84:26:33:96:77:4e:ca:c1:a7:a1:eb:ac:
         db:a0:31:9b:c8:d6:b8:3e:b5:ce:3b:29:c2:e4:40:40:3a:5a:
         29:0a:db:c6:b8:4e:4a:f1:47:8f:16:a0:02:e3:3a:bf:b5:c8:
         f9:65:f2:88:ed:94:25:c7:3a:33:78:b1:6b:4e:04:d7:95:9b:
         7e:c6:70:32:d9:e0:4a:e0:0a:3c:1f:d1:f2:7e:5a:73:73:33:
         d2:6b:3d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:20 2025 by rpki-client