This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB77799ABF8F11F089E95893DAE4EC9C.roa
File:                     FB77799ABF8F11F089E95893DAE4EC9C.roa (raw, json)
Hash identifier:          lLYvKU0YvsbvYumzfKtBkSe2VMKkwXPnrbQLuF8p2Lw=
Subject key identifier:   13:E6:B2:92:AC:85:D7:88:2A:5E:64:23:8E:01:3F:DB:76:46:EE:C3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A886
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB77799ABF8F11F089E95893DAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 06:22:37 +0000
ROA not before:           Wed 12 Nov 2025 06:22:32 +0000
ROA not after:            Wed 11 Nov 2026 06:22:32 +0000
asID:                     213736
IP address blocks:        154.92.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108678 (0x1a886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 12 06:22:32 2025 GMT
            Not After : Nov 11 06:22:32 2026 GMT
        Subject: CN=691427ad-9a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:f8:b6:f5:eb:db:e2:02:b6:ab:67:fd:1c:
                    9b:2f:3e:31:56:05:aa:b7:3b:13:cc:c8:1c:e4:eb:
                    31:04:5c:75:35:c7:bf:28:83:85:61:40:36:ea:27:
                    5e:ea:78:d2:e7:dc:a8:f3:1a:68:bb:e3:80:ee:cd:
                    ec:f7:44:8c:5e:43:bd:26:ec:41:14:fa:cb:47:8a:
                    5c:d0:35:ed:c7:71:71:b9:02:e3:e2:63:41:70:ed:
                    3b:bd:e5:d6:96:42:00:89:a8:eb:fa:8a:ab:f3:a1:
                    07:61:0d:84:aa:41:28:2d:7f:60:08:4f:d2:15:2e:
                    c3:8c:fa:fb:54:7a:65:b7:24:af:2d:d3:2d:48:53:
                    06:a4:25:05:89:3a:7a:37:d3:45:b6:20:a5:94:c3:
                    35:eb:ec:9b:a8:88:41:a2:1c:8b:59:ff:a8:b9:10:
                    30:ae:50:3b:75:8f:92:36:79:ee:13:70:c1:4b:83:
                    dc:7e:a2:db:dc:dc:47:68:b6:80:92:57:67:b6:8b:
                    a2:77:f9:f4:15:de:c2:f8:17:c2:68:e3:26:32:36:
                    01:ef:23:16:7e:b4:cd:70:70:d5:60:d2:04:8d:c3:
                    cd:29:69:95:b4:ca:31:ff:af:c8:9d:d6:7a:be:d8:
                    87:db:cd:54:a1:ac:8b:f0:79:ca:ec:ec:67:bb:f2:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E6:B2:92:AC:85:D7:88:2A:5E:64:23:8E:01:3F:DB:76:46:EE:C3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB77799ABF8F11F089E95893DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a0:24:02:05:96:66:25:ac:f3:ff:67:64:ac:a1:06:2d:c3:
         71:21:e0:a2:ef:83:6f:85:7f:d0:69:8b:b9:11:55:00:fb:dc:
         32:c0:2a:e6:6a:8d:22:dd:54:55:73:e0:ad:82:7e:57:ed:c0:
         dd:2c:a9:56:fd:df:e7:a6:75:2a:fa:93:74:e9:c7:0e:5d:ab:
         92:e4:09:10:49:1d:fb:73:f4:7b:9f:b4:23:11:59:ee:d8:74:
         b8:b7:5f:5a:cd:32:fa:de:b4:30:c5:17:04:53:aa:c2:7e:d3:
         14:38:ec:c1:04:ba:be:df:e2:d3:51:c3:71:19:eb:24:fb:e1:
         10:90:26:a5:f7:be:ad:a6:a3:7c:3d:59:17:25:06:12:3b:36:
         55:05:e1:e6:e7:8b:c8:a4:00:4f:0d:ee:46:63:d4:8e:4b:b9:
         71:63:e9:09:74:b3:c7:02:61:04:48:a7:63:ac:ea:47:0e:2c:
         3f:7d:da:98:b9:e3:f3:f3:35:87:4b:5b:f0:e0:2e:d9:97:38:
         5b:e7:8a:11:bc:c6:eb:57:cb:b2:25:d6:15:0f:48:e3:9d:a1:
         af:db:9f:01:81:d5:23:99:0d:14:07:69:64:b7:24:e1:5d:02:
         cf:9f:6e:0d:0f:7b:40:e6:9b:29:0b:78:cd:f7:ec:cb:24:29:
         0a:f4:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:09 2025 by rpki-client