This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06878906D11011F093647AA9DAE4EC9C.roa
File:                     06878906D11011F093647AA9DAE4EC9C.roa (raw, json)
Hash identifier:          4ms1OY3Q5cQNYGyxWwi2OD7Aoo/ERfadXwir2qi9t+c=
Subject key identifier:   F7:80:A2:47:A7:CC:3D:59:C1:9B:0A:5D:E1:97:D5:B9:64:4B:AF:E9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ACD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06878906D11011F093647AA9DAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 12:52:01 +0000
ROA not before:           Thu 04 Dec 2025 12:51:56 +0000
ROA not after:            Mon 05 Jan 2026 12:51:56 +0000
asID:                     271956
IP address blocks:        154.88.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109784 (0x1acd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  4 12:51:56 2025 GMT
            Not After : Jan  5 12:51:56 2026 GMT
        Subject: CN=693183f1-183b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:70:5b:af:0c:bb:87:34:b9:49:f3:70:1f:
                    3b:bf:6f:2c:19:c2:41:73:05:e6:be:6d:43:19:5a:
                    08:35:d4:5d:87:17:90:a7:ce:62:ad:44:42:7f:0e:
                    0c:dd:d7:59:f1:bd:bb:2a:09:ea:fb:5f:78:c5:7e:
                    58:1d:fd:f8:c5:9d:1e:66:7a:1e:23:f6:11:d2:66:
                    ed:44:2e:b2:02:41:da:d4:7d:54:c4:5a:0d:76:b1:
                    86:8f:ef:bf:e9:86:08:31:23:ca:46:2d:d3:a1:6d:
                    85:f6:82:cb:32:1e:c7:05:0d:8a:b7:83:90:de:43:
                    2d:ca:a7:93:3a:be:70:93:96:19:6e:1b:a5:a0:07:
                    ae:9f:a6:39:cf:ca:2a:b9:c3:fe:b5:ad:b0:42:9f:
                    b4:29:94:d3:2a:08:a9:68:80:a2:95:bf:ae:69:da:
                    c4:d0:12:32:4d:f6:c0:ba:33:00:7f:c3:68:12:4d:
                    7b:9e:b7:51:2f:e6:d9:9d:a8:5f:83:8e:59:68:25:
                    b6:0b:d0:26:cf:a0:fe:c5:3a:ea:c6:49:6e:5d:d7:
                    dd:69:e0:12:f2:2c:3f:c8:49:78:a4:30:58:69:00:
                    ad:82:27:4d:54:78:f9:76:22:48:89:e3:80:01:8a:
                    77:21:4c:0b:91:bf:c6:44:68:d2:24:30:68:e7:0d:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:80:A2:47:A7:CC:3D:59:C1:9B:0A:5D:E1:97:D5:B9:64:4B:AF:E9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06878906D11011F093647AA9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:99:27:f5:1d:da:9f:42:fd:6d:d7:f6:4e:d3:7e:15:6d:
         e2:d1:3d:87:36:c1:b0:f6:e6:59:0c:0b:9d:77:e5:45:00:ba:
         7b:fb:9b:fc:c2:de:75:56:4d:f6:1a:53:68:d5:ad:f9:13:3f:
         4e:2b:9f:4f:ef:29:17:83:2a:e6:1f:0a:7f:b8:fd:91:5a:d5:
         6c:fa:94:93:f0:ed:f5:51:ba:18:02:b0:d6:66:c5:65:03:e5:
         bf:c4:f8:be:fc:43:fa:64:9a:49:60:a8:d1:98:82:7d:dd:76:
         9b:15:74:a9:86:09:0b:d4:be:96:e3:93:85:3f:9c:a8:e3:ba:
         3a:43:66:97:a1:68:74:25:09:cc:39:77:6d:99:a0:2e:b0:a6:
         e3:5f:c6:14:46:87:72:a8:46:fb:24:8a:8e:fa:4a:f3:c6:aa:
         0c:1e:6a:a5:53:a7:46:3c:a6:75:6c:36:cf:54:e7:8f:43:73:
         90:e2:da:5f:c2:40:5a:00:a0:4b:42:92:1d:aa:cb:aa:22:9a:
         31:df:3e:8a:57:2c:09:ae:a5:8f:b7:23:b5:e1:20:4a:40:fb:
         b3:f7:10:f4:95:27:15:42:23:f5:bd:ed:d1:df:a4:0e:0c:3c:
         c3:91:0d:a3:31:27:81:92:75:c1:0c:40:50:4d:0d:99:f0:41:
         f7:7c:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:29:22 2025 by rpki-client