This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8F5BC4EBFD111F088BA2AABDAE4EC9C.roa
File:                     F8F5BC4EBFD111F088BA2AABDAE4EC9C.roa (raw, json)
Hash identifier:          A+4Eqm4GjUXi3rsm48nP0oxijmOasY7RalHM/nzYbKI=
Subject key identifier:   D7:BF:E7:C4:EE:09:0B:64:CE:33:80:6F:D6:4A:60:68:15:3E:94:F5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A8A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8F5BC4EBFD111F088BA2AABDAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 14:15:00 +0000
ROA not before:           Wed 12 Nov 2025 14:14:55 +0000
ROA not after:            Mon 18 May 2026 14:14:55 +0000
asID:                     152849
IP address blocks:        154.210.16.0/20 maxlen: 24
                          154.213.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108708 (0x1a8a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 12 14:14:55 2025 GMT
            Not After : May 18 14:14:55 2026 GMT
        Subject: CN=69149664-013b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:a3:3d:af:58:30:33:ba:21:b3:06:3d:af:
                    fe:7e:c0:7a:85:db:e0:2a:23:2e:e7:ce:f8:e3:ec:
                    bb:05:93:83:71:aa:c0:1a:b1:2c:bc:f6:dc:18:85:
                    79:ba:41:bb:a3:06:c9:ea:8d:50:12:6b:de:b2:1a:
                    b7:95:da:9e:17:23:8a:0c:68:fb:17:1a:1a:c4:de:
                    5e:12:5f:ff:a2:57:35:49:57:e0:ce:34:3c:cd:cb:
                    8f:14:d6:f1:b3:60:5a:4b:3c:7d:60:ff:30:3c:08:
                    ae:df:bc:c6:1b:e6:a6:c4:16:b9:8e:94:65:9f:4c:
                    69:95:19:d8:af:45:b4:51:89:59:97:a6:ef:ae:e5:
                    eb:f9:77:08:16:bb:f2:a8:8c:df:33:70:62:4d:ef:
                    ce:6f:b6:0d:38:ad:6d:62:fe:6c:15:7f:98:fc:7d:
                    1c:94:cf:a2:f6:3e:92:6f:16:ea:cb:9e:2c:5a:d1:
                    c6:90:29:49:0f:ed:95:0d:52:12:51:63:4d:67:8e:
                    98:5f:e6:b2:7e:e4:ee:da:7f:40:03:d6:60:e9:83:
                    85:a9:8a:f3:51:5a:12:f9:c8:f2:e6:76:2d:8b:e8:
                    c7:cf:ea:9d:11:f2:c2:54:83:e4:64:ac:53:6f:ec:
                    af:05:76:8e:f8:f3:89:67:eb:d0:d5:a8:4e:38:ad:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BF:E7:C4:EE:09:0B:64:CE:33:80:6F:D6:4A:60:68:15:3E:94:F5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8F5BC4EBFD111F088BA2AABDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.16.0/20
                  154.213.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:37:67:56:ff:58:35:26:9b:01:64:7d:cf:04:20:48:e3:b7:
         eb:d1:ad:4a:b2:40:5f:f8:1e:3b:c6:bf:14:c5:bd:1d:ad:cd:
         d8:33:93:8c:a6:61:b5:11:a5:1a:7a:90:f2:26:dd:51:93:88:
         e2:6a:26:30:b2:20:b2:a5:c9:e7:74:13:50:11:ad:26:05:19:
         4c:89:61:7e:a3:5d:43:db:6c:57:7c:63:b7:da:c9:45:90:e1:
         b7:46:0d:d3:f2:68:e9:cb:c7:7b:ec:41:33:66:a1:24:a9:cf:
         92:5c:db:38:b0:2d:90:52:3e:79:a5:d6:45:2e:66:9a:af:d7:
         ee:d9:ef:72:e0:73:70:79:01:32:a9:60:4b:52:de:d2:76:fe:
         a4:52:eb:e9:59:39:88:e3:5a:bc:f7:50:f7:61:89:95:6e:c6:
         e4:92:82:73:83:e9:6f:77:c9:08:0b:13:02:94:95:ff:6d:a8:
         99:01:18:eb:85:50:3d:fb:ce:3a:14:5b:99:07:8f:31:74:03:
         d0:db:68:f7:08:6b:7a:16:86:1c:fc:d2:8a:f9:db:22:a0:31:
         47:a0:ee:b8:b2:f8:1c:ef:20:c4:8c:b6:07:2e:fc:74:14:cb:
         39:6f:8d:2b:0b:f8:0e:d4:b9:5a:ec:8b:b3:ff:e7:77:28:0a:
         7d:4c:09:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:24 2025 by rpki-client