This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F56EBE84C3D411F0B247027EDAE4EC9C.roa
File:                     F56EBE84C3D411F0B247027EDAE4EC9C.roa (raw, json)
Hash identifier:          phUHpEfrM/ZvI4E0IRQVy72x5n2wwOX4fV+k5nJkrTs=
Subject key identifier:   18:95:58:6B:90:72:FE:CA:07:00:61:90:AA:54:DF:A5:68:85:FE:E6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A985
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F56EBE84C3D411F0B247027EDAE4EC9C.roa
Signing time:             Mon 17 Nov 2025 16:46:27 +0000
ROA not before:           Mon 17 Nov 2025 16:46:22 +0000
ROA not after:            Sat 27 Dec 2025 16:46:22 +0000
asID:                     2914
IP address blocks:        154.83.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 24 Nov 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108933 (0x1a985)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 17 16:46:22 2025 GMT
            Not After : Dec 27 16:46:22 2025 GMT
        Subject: CN=691b5163-bfdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:61:3f:17:2f:88:ef:a4:17:f3:50:a5:96:
                    39:77:47:7b:df:0a:02:ea:72:6d:9b:60:5a:45:dd:
                    06:d5:79:0a:80:59:51:01:95:72:94:d7:bd:92:09:
                    3e:03:02:22:57:89:a1:90:74:e3:bd:a6:bc:82:42:
                    32:df:49:e7:17:6f:dc:b8:e8:1d:ce:28:fc:1b:cb:
                    93:b1:13:ef:b9:f1:24:93:e4:8a:b3:b6:96:f0:ab:
                    21:1d:f3:cf:ea:31:4e:83:de:e7:21:86:bb:f5:87:
                    68:18:84:b7:5c:30:7e:c8:4b:82:f3:35:d7:06:fb:
                    cc:35:1c:d2:39:8f:16:83:bb:dd:53:dd:a0:eb:4a:
                    9c:c6:f4:05:f5:bc:6a:90:95:3f:74:c6:3f:72:27:
                    31:f2:81:82:c2:3e:4c:0d:1a:b1:3c:33:a8:ac:4a:
                    2a:72:fd:c1:15:9a:3d:4e:a1:03:74:f8:ba:36:c5:
                    19:2e:b1:fb:b5:cb:a4:7c:42:4e:d3:cc:a3:17:af:
                    f3:5b:ce:f1:47:0b:43:41:80:2c:d1:c3:45:35:11:
                    c1:c6:d3:72:0d:86:40:5b:b8:3d:21:e6:2d:c2:1f:
                    13:10:8b:a8:df:b6:38:3f:9e:37:f3:a4:7c:d7:94:
                    7a:9d:f5:ab:68:a1:0b:bf:b3:5d:13:8d:05:5c:32:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:95:58:6B:90:72:FE:CA:07:00:61:90:AA:54:DF:A5:68:85:FE:E6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F56EBE84C3D411F0B247027EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:88:9d:8e:6e:71:ca:9d:66:c8:89:e4:25:9c:cf:82:f3:9a:
         e4:4e:82:77:0a:77:85:ab:85:e8:bf:f0:0d:06:7b:78:80:40:
         08:27:e7:df:b1:35:10:60:fa:ae:9b:7e:61:16:70:de:4d:5e:
         de:e7:3b:69:39:15:ac:08:9e:75:dd:2d:e2:ec:2b:26:04:7f:
         a7:fc:0c:2c:fd:78:5b:94:6f:e3:d7:57:df:b1:7d:32:27:57:
         8a:26:e6:4d:b3:e7:d6:42:ce:9c:97:4e:8b:6d:f0:c0:f9:cf:
         32:ac:65:8d:8f:a4:a8:c8:6d:67:f8:af:f1:b9:81:30:2e:76:
         73:3b:d2:0c:1d:86:cf:96:d0:b0:fc:20:2f:18:2b:b4:90:16:
         93:58:a0:87:0d:6c:19:d0:03:49:b7:ea:df:07:17:13:68:e7:
         48:26:c4:70:b9:01:94:8c:2e:af:c2:1e:d0:8b:66:35:22:33:
         34:a9:f2:27:04:17:70:f9:6f:0a:f4:11:e4:2e:cd:10:bf:2c:
         25:d8:08:1c:ea:bb:46:d7:cd:67:0b:a5:22:50:58:2e:07:e6:
         bc:9c:23:9e:80:9a:15:ef:02:e8:56:52:5d:cd:ec:9d:a8:fd:
         46:0a:47:17:b9:26:bb:62:1c:c9:61:29:a1:ab:e0:80:78:84:
         8a:0a:cf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 20:47:20 2025 by rpki-client