This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F497D15AC00D11F0AAE7A39BDAE4EC9C.roa
File:                     F497D15AC00D11F0AAE7A39BDAE4EC9C.roa (raw, json)
Hash identifier:          h12Jqs6pGEf0mKcRqnUS9m7JJgK5ISQumzxWOHXkOpE=
Subject key identifier:   C5:5F:8B:08:C4:BE:68:E6:0B:D4:79:A4:4C:3F:00:A4:8E:92:EB:88
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A8C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F497D15AC00D11F0AAE7A39BDAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 21:24:22 +0000
ROA not before:           Wed 12 Nov 2025 21:24:18 +0000
ROA not after:            Mon 18 May 2026 21:24:18 +0000
asID:                     54600
IP address blocks:        154.91.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108741 (0x1a8c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 12 21:24:18 2025 GMT
            Not After : May 18 21:24:18 2026 GMT
        Subject: CN=6914fb06-99de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:5f:43:5a:9b:f4:23:d8:6d:e0:35:ec:fd:
                    8b:ba:dc:51:05:85:e0:12:b2:e9:8d:e2:c4:59:6e:
                    7b:eb:30:1d:ee:ff:e0:50:74:11:1f:6a:ad:9b:aa:
                    09:70:cb:a2:c2:ec:90:71:d0:53:0c:0f:c6:ad:99:
                    3f:90:3f:1f:89:7f:7a:d7:2a:db:81:71:d1:5f:5a:
                    db:96:72:df:65:46:15:6a:74:4a:ae:57:e6:d3:a2:
                    ed:cf:77:24:53:b9:77:3f:ca:08:3c:f7:59:de:80:
                    eb:9c:e9:32:c9:e8:9d:48:10:80:6c:d7:14:0d:55:
                    ea:4a:87:44:5f:71:a9:65:5b:58:a7:c4:67:af:c0:
                    d6:a8:27:7e:0b:35:cd:b5:19:44:eb:a8:91:9a:e8:
                    a5:c1:69:c3:c5:28:04:48:e5:e3:d6:fc:e6:da:aa:
                    45:c7:47:fb:c7:26:55:ae:c5:f9:51:c3:86:bc:7b:
                    12:92:c0:0b:e2:4b:4d:b7:f0:d6:01:1f:85:74:3c:
                    d0:b0:db:1a:6d:bd:bd:c0:a4:e3:82:e1:67:b4:a4:
                    f0:a8:4a:f3:aa:05:b8:55:06:65:44:15:77:be:c4:
                    80:92:37:b9:7f:07:39:2a:1a:6f:db:f3:eb:59:c4:
                    a0:3c:38:5a:e1:31:d5:f3:03:07:de:ac:ae:44:b1:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5F:8B:08:C4:BE:68:E6:0B:D4:79:A4:4C:3F:00:A4:8E:92:EB:88
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F497D15AC00D11F0AAE7A39BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:48:da:a4:2e:3d:cc:2c:73:70:1b:b4:45:50:71:4b:49:4b:
         7c:14:25:16:5e:a6:b2:9c:4c:b2:0c:a8:7e:bb:57:ea:cd:2e:
         07:f7:5f:5c:f0:f1:3f:0d:ae:d0:c7:e1:70:85:ed:c2:cb:b4:
         a0:b5:74:60:8f:ec:98:0f:bc:9d:69:2f:c4:88:01:38:13:2f:
         7e:df:a4:47:1e:2d:9d:b5:8b:bf:4b:28:58:86:2d:a0:ad:b6:
         95:03:8b:86:af:d9:c7:b8:9e:e0:8d:9b:c8:9c:04:ed:dc:d7:
         89:ca:9d:07:81:be:10:ab:41:11:01:d5:97:16:d5:47:6e:68:
         ef:cb:a0:29:7b:9c:b5:80:c6:ce:66:e4:57:a3:01:00:37:f0:
         77:90:17:4b:aa:f5:cb:4d:a0:f9:b9:f0:54:c6:72:0d:b8:83:
         7c:69:be:7c:47:9e:86:1b:83:ec:4f:0b:82:4c:09:f1:6b:61:
         88:11:53:8d:0e:df:7e:91:40:81:97:82:59:31:16:b5:f1:47:
         d3:00:d2:b8:d9:4f:51:81:97:f3:07:f0:d8:aa:63:74:43:61:
         76:ee:bd:e6:42:cc:a1:70:b5:01:ab:e9:aa:5e:73:d6:7a:43:
         0c:2e:e1:18:cd:86:69:8f:77:cb:be:0e:19:c7:70:44:fa:2a:
         a4:2c:ac:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:24:56 2025 by rpki-client