This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB2A0FACECA11F0A6E8DFE2DAE4EC9C.roa
File:                     FDB2A0FACECA11F0A6E8DFE2DAE4EC9C.roa (raw, json)
Hash identifier:          eFw7JQwNY7m4I0JgVZFvf0P0Pt7yCymY/xkv9cqzRG4=
Subject key identifier:   DD:D1:54:EE:EF:C5:8E:39:2E:20:6E:ED:B7:05:CB:52:8C:5E:08:62
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB2A0FACECA11F0A6E8DFE2DAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 15:32:49 +0000
ROA not before:           Mon 01 Dec 2025 15:32:39 +0000
ROA not after:            Sun 13 Dec 2026 15:32:39 +0000
asID:                     58460
IP address blocks:        154.81.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109400 (0x1ab58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  1 15:32:39 2025 GMT
            Not After : Dec 13 15:32:39 2026 GMT
        Subject: CN=692db521-bf72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:a4:34:f2:92:86:fa:0c:4b:9e:e5:e9:cf:
                    be:99:0c:97:f7:18:58:e7:08:69:02:e2:4f:1e:38:
                    bc:01:32:fa:79:1c:53:cc:29:13:fc:65:aa:30:9a:
                    ad:58:b9:fc:6e:b2:7a:9e:6b:c4:e6:68:7a:51:2f:
                    1c:4a:93:e7:54:31:e9:7d:fc:af:00:5c:5c:20:12:
                    fc:72:f6:25:7c:b5:6f:b5:44:b1:5d:ab:81:25:9a:
                    9a:ff:45:e4:31:bb:0d:19:98:65:86:32:0f:5b:4d:
                    c8:5a:80:23:ad:76:42:45:c8:82:b7:46:60:c3:39:
                    6b:bb:93:c0:4e:a2:ed:ea:4a:fa:6b:9e:a5:d2:d7:
                    cb:6c:4c:9c:65:e5:f7:40:5f:f2:0a:a5:4d:70:9c:
                    08:18:40:5e:26:85:4b:f4:2f:7b:c9:1c:d4:08:91:
                    d5:d7:9b:96:99:84:82:c1:f4:ce:db:6e:5b:44:3f:
                    68:48:37:e6:78:0f:bd:49:77:c9:68:7f:41:3a:89:
                    6e:3b:c7:46:73:7d:5a:37:c2:2d:1a:42:29:80:b8:
                    43:bd:7e:83:a9:d0:a5:fa:e2:b6:91:65:89:24:37:
                    34:2a:9c:fc:8d:c6:ea:17:81:ac:8b:ef:c3:b2:28:
                    63:17:17:79:81:9c:17:d6:5a:4d:f3:bb:16:61:ac:
                    47:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D1:54:EE:EF:C5:8E:39:2E:20:6E:ED:B7:05:CB:52:8C:5E:08:62
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB2A0FACECA11F0A6E8DFE2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:d9:13:d7:6d:bf:e3:6b:29:94:f7:10:e7:fa:4e:17:36:34:
         f6:31:62:04:8e:46:2f:c0:df:7d:dc:87:2e:d8:af:9a:d6:ea:
         be:96:bc:9e:8e:a3:c6:a7:e5:8b:13:05:4f:47:7d:4a:e9:ba:
         64:94:7c:77:2a:26:0c:59:0c:68:37:61:6c:de:9a:e9:5a:f7:
         e7:01:47:a8:5c:6d:c3:2b:f5:b0:56:c2:4d:13:04:8d:3a:1f:
         6f:06:75:54:31:53:38:af:69:c3:29:6e:66:89:2c:03:ec:c4:
         13:6a:9c:fc:5f:bc:9b:a2:85:a6:c0:b8:4b:49:b0:79:84:8e:
         5b:da:30:34:69:1e:c4:ac:c3:ed:76:cc:fd:58:eb:39:c9:47:
         4f:05:59:b9:22:ea:f0:d9:1e:6f:57:4d:d1:19:95:6a:86:a5:
         27:74:6b:b1:ba:99:f2:3e:7c:a0:92:e0:7a:ca:9f:0c:64:18:
         4e:e4:79:0c:26:a2:b9:b6:8e:88:7a:c3:14:9c:b6:53:27:2b:
         9c:c6:cf:1a:00:92:37:34:ba:37:81:9d:24:d9:c4:c5:6e:01:
         0d:11:08:2f:83:ff:73:d0:f1:d5:6a:ba:8b:fb:de:4c:0b:d4:
         bd:27:14:b8:46:d2:22:71:53:e0:06:60:ca:a2:0a:ce:c2:72:
         ba:5b:a7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:31 2025 by rpki-client