This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE694E6ECAE811F081461893DAE4EC9C.roa
File:                     DE694E6ECAE811F081461893DAE4EC9C.roa (raw, json)
Hash identifier:          R1DtFANmHzMBv+tZzTOkGxjV4hAroOE+ODoQaAs6whE=
Subject key identifier:   37:41:E7:B4:DE:B2:3F:FA:09:81:D4:AE:D1:2C:36:5E:04:CC:72:59
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AAC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE694E6ECAE811F081461893DAE4EC9C.roa
Signing time:             Wed 26 Nov 2025 16:56:36 +0000
ROA not before:           Wed 26 Nov 2025 16:56:29 +0000
ROA not after:            Wed 03 Dec 2025 16:56:29 +0000
asID:                     397423
IP address blocks:        154.202.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 03 Dec 2025 16:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109257 (0x1aac9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 26 16:56:29 2025 GMT
            Not After : Dec  3 16:56:29 2025 GMT
        Subject: CN=69273144-93c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:a2:e1:29:9e:ee:a0:aa:8b:88:79:af:87:
                    9f:a4:f7:19:da:b2:83:ef:3a:d3:8e:19:03:ef:53:
                    9f:33:0d:e7:d5:73:77:84:f1:7e:19:45:7c:00:4c:
                    83:7a:5b:25:fe:c5:f2:06:b9:d4:1e:21:4d:ff:18:
                    30:4d:d2:7d:ab:84:98:96:04:98:f5:0f:90:ba:a2:
                    2f:74:45:7c:e8:fb:76:f4:8e:f3:1f:bf:fb:48:36:
                    ef:6f:2e:bd:9e:13:aa:ff:93:33:65:25:a0:11:cd:
                    67:b3:81:3d:1e:7d:21:80:46:0c:db:1a:61:95:17:
                    d9:dd:bd:5d:e6:15:64:88:c8:34:79:5f:4e:16:68:
                    9c:de:ab:9d:d2:14:5f:5d:c4:df:27:1e:9d:87:b0:
                    a7:d5:ec:31:51:ea:ec:d9:a5:32:dc:a6:28:56:60:
                    55:6f:cb:82:b9:20:d5:9f:e5:b1:fe:b6:3d:e5:3f:
                    78:03:d3:f1:22:f8:8c:f7:c8:83:1e:7e:95:c4:2d:
                    83:61:7b:a7:47:fb:c3:a8:e9:72:96:d2:59:b7:09:
                    01:38:cc:fa:c1:f6:f4:5c:b2:f1:a3:75:1c:13:04:
                    6d:64:c6:41:11:b7:91:cb:f0:b5:69:5c:e0:02:e7:
                    be:a9:b1:74:e3:d0:22:51:be:3a:46:84:ba:4a:ae:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:41:E7:B4:DE:B2:3F:FA:09:81:D4:AE:D1:2C:36:5E:04:CC:72:59
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE694E6ECAE811F081461893DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:02:b9:5b:b7:7e:f1:50:d5:6f:22:02:34:6e:54:0f:a2:b8:
         fd:4a:cd:46:71:10:1c:b6:ab:48:72:f3:18:5d:05:7f:f5:f2:
         1e:fa:4f:f2:7b:49:d9:b3:58:44:b7:23:fd:cb:bc:44:96:c1:
         d5:7d:c0:df:43:4f:c7:dc:b2:2a:5a:6a:32:b6:88:9a:87:77:
         5b:5a:4e:79:e8:75:e2:67:72:85:f5:3a:ae:0d:ad:ce:c7:cd:
         5d:bc:78:57:d5:61:ed:af:59:20:b7:00:08:53:6c:5f:5f:28:
         b4:4d:7e:ac:cf:1f:cd:c4:4c:67:ea:be:20:e4:3f:d6:4f:4d:
         27:41:48:29:56:7a:ae:ac:3b:47:4e:13:c0:e0:56:b4:73:f5:
         d5:13:e6:7b:b1:80:61:e4:e6:98:8f:3c:99:e6:60:5c:8d:92:
         5f:f5:35:e4:82:6a:ca:a5:a3:32:1b:21:2e:5b:a0:4a:25:db:
         fe:a6:af:de:4a:08:0c:b9:bc:67:f6:c5:50:d6:08:64:92:da:
         18:ee:db:02:25:01:a9:a7:a2:b2:bf:be:79:27:ab:6c:bf:b7:
         cd:03:c6:45:a2:35:74:e8:6c:a9:d9:ab:8a:fe:a0:8c:33:1c:
         18:50:f0:7e:6e:a1:97:a8:60:fe:0c:12:aa:75:8f:54:44:ed:
         b4:98:ba:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:29:00 2025 by rpki-client