This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5F84492C04211F0AD5C43F5DAE4EC9C.roa
File:                     E5F84492C04211F0AD5C43F5DAE4EC9C.roa (raw, json)
Hash identifier:          IUZgFJh/MZQqQh06zSFJUxXcJwo6u4xY6/RbgpX7Vhk=
Subject key identifier:   A5:C3:22:C7:ED:D4:26:93:0F:32:63:7B:A0:CA:CF:23:62:67:E7:3D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A8DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5F84492C04211F0AD5C43F5DAE4EC9C.roa
Signing time:             Thu 13 Nov 2025 03:43:21 +0000
ROA not before:           Thu 13 Nov 2025 03:43:15 +0000
ROA not after:            Sun 14 Dec 2025 03:43:15 +0000
asID:                     139880
IP address blocks:        154.83.224.0/20 maxlen: 24
                          154.199.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108766 (0x1a8de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 13 03:43:15 2025 GMT
            Not After : Dec 14 03:43:15 2025 GMT
        Subject: CN=691553d9-acdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3a:79:d9:fe:b5:cd:c1:af:60:f6:12:d3:b7:
                    57:76:b8:c9:d3:63:e0:68:5a:d7:0b:bc:82:e7:50:
                    a4:45:3a:20:ae:6a:d1:7b:cf:1a:8c:fc:d1:ad:70:
                    94:d0:60:c5:ef:54:e9:f7:5c:f0:44:a3:88:9e:3c:
                    5a:39:b4:73:16:28:c4:69:97:1b:92:cc:31:e2:d9:
                    41:de:58:28:14:be:ff:9b:ca:2a:e8:74:46:dd:4a:
                    19:a6:e7:cb:09:08:fa:fd:11:98:3e:87:b5:da:f9:
                    ab:ff:62:9e:d4:4c:d1:11:c4:ef:54:d2:ee:10:13:
                    22:ce:8b:0e:28:f7:ac:68:86:2c:36:f8:dd:32:27:
                    09:08:cf:4d:54:00:d8:db:fd:ff:26:61:98:31:ee:
                    fe:20:d7:ce:bf:00:f4:ae:2c:2f:43:08:dd:8d:be:
                    46:78:4e:b7:bd:50:88:23:7e:25:a2:17:a3:9f:3a:
                    37:90:60:ca:d1:20:b3:44:6f:34:15:5f:f5:9f:19:
                    91:8c:3b:c2:11:f8:1a:e2:12:59:47:cd:08:eb:87:
                    ca:2c:46:5b:14:c4:38:d0:10:53:f8:96:04:87:99:
                    5b:b8:ff:c1:d1:f8:b2:d1:cc:b7:36:88:b8:2e:73:
                    b9:78:8f:bb:cf:05:c5:44:93:9e:7a:6a:a0:ab:0c:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C3:22:C7:ED:D4:26:93:0F:32:63:7B:A0:CA:CF:23:62:67:E7:3D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5F84492C04211F0AD5C43F5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.224.0/20
                  154.199.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:82:cc:1c:1b:04:22:ec:78:f0:56:7d:02:6e:89:ca:88:fb:
         16:ad:22:6b:76:d4:15:94:d2:49:ef:1c:57:a6:62:9b:c3:93:
         61:5c:17:f1:ab:95:f8:74:95:97:7e:c2:d5:b7:80:74:a0:20:
         9b:59:ca:1d:40:e1:44:5c:72:d5:ec:fd:e2:de:ad:7b:e1:5b:
         f0:f7:e4:9d:8a:73:69:25:0c:fa:12:56:6f:28:58:6a:59:cc:
         16:b2:60:aa:a6:dd:d8:bf:83:aa:7c:8a:b0:b0:ef:95:0a:df:
         1d:ed:05:22:14:c0:5e:68:02:ce:60:82:98:22:0a:f9:4c:bb:
         c8:80:00:dc:c1:8b:f7:ad:43:78:88:ae:dc:25:7b:38:32:29:
         dd:0b:1d:a9:f4:fb:15:10:56:12:bc:a8:4c:a9:6b:7d:75:5e:
         b0:50:a1:ed:55:94:40:b5:82:b0:97:bb:b9:1c:67:97:14:a5:
         2c:29:ab:17:0b:99:15:9b:49:e2:41:d8:6c:b1:50:0c:48:7b:
         b3:b5:46:18:e6:40:90:7f:22:7b:52:e4:da:32:a5:fb:bf:8f:
         37:8d:2a:a6:b4:67:85:5a:af:ac:28:7d:35:6a:06:d6:db:33:
         b6:db:a5:12:b2:1b:61:f5:3a:1f:4b:33:d4:6e:dd:b8:8d:1e:
         31:c5:a3:0a
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAajeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTEzMDM0MzE1WhcNMjUxMjE0MDM0MzE1WjAYMRYw
FAYDVQQDEw02OTE1NTNkOS1hY2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4zp52f61zcGvYPYS07dXdrjJ02PgaFrXC7yC51CkRTogrmrRe88ajPzR
rXCU0GDF71Tp91zwRKOInjxaObRzFijEaZcbkswx4tlB3lgoFL7/m8oq6HRG3UoZ
pufLCQj6/RGYPoe12vmr/2Ke1EzREcTvVNLuEBMizosOKPesaIYsNvjdMicJCM9N
VADY2/3/JmGYMe7+INfOvwD0riwvQwjdjb5GeE63vVCII34lohejnzo3kGDK0SCz
RG80FV/1nxmRjDvCEfga4hJZR80I64fKLEZbFMQ40BBT+JYEh5lbuP/B0fiy0cy3
Noi4LnO5eI+7zwXFRJOeemqgqwz4aQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFKXD
Isft1CaTDzJje6DKzyNiZ+c9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNUY4NDQ5MkMwNDIxMUYwQUQ1QzQzRjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEmlPgAwQEmscgMA0GCSqG
SIb3DQEBCwUAA4IBAQBSgswcGwQi7HjwVn0CbonKiPsWrSJrdtQVlNJJ7xxXpmKb
w5NhXBfxq5X4dJWXfsLVt4B0oCCbWcodQOFEXHLV7P3i3q174Vvw9+SdinNpJQz6
ElZvKFhqWcwWsmCqpt3Yv4OqfIqwsO+VCt8d7QUiFMBeaALOYIKYIgr5TLvIgADc
wYv3rUN4iK7cJXs4MindCx2p9PsVEFYSvKhMqWt9dV6wUKHtVZRAtYKwl7u5HGeX
FKUsKasXC5kVm0niQdhssVAMSHuztUYY5kCQfyJ7UuTaMqX7v483jSqmtGeFWq+s
KH01agbW2zO226USshth9TofSzPUbt24jR4xxaMK
-----END CERTIFICATE-----
Generated at Wed Dec 3 11:45:33 2025 by rpki-client