This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FDB45BCD1E011F0B798D9C0DAE4EC9C.roa
File:                     0FDB45BCD1E011F0B798D9C0DAE4EC9C.roa (raw, json)
Hash identifier:          /4YHq3BANrH6zj5ZW3WniXclt80OdwksEgZ2uFMe3wM=
Subject key identifier:   51:43:D8:12:BE:5B:2A:50:0D:FC:84:BD:46:7D:8C:E6:5C:54:54:3E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AD21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FDB45BCD1E011F0B798D9C0DAE4EC9C.roa
Signing time:             Fri 05 Dec 2025 13:41:12 +0000
ROA not before:           Fri 05 Dec 2025 13:41:07 +0000
ROA not after:            Tue 27 Jan 2026 13:41:07 +0000
asID:                     137899
IP address blocks:        154.219.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109857 (0x1ad21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  5 13:41:07 2025 GMT
            Not After : Jan 27 13:41:07 2026 GMT
        Subject: CN=6932e0f8-4f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:10:9e:5a:b9:b1:2b:24:91:1f:e6:9f:38:
                    ed:fa:ca:72:d0:78:d5:64:70:d0:dc:86:39:ab:20:
                    a5:1b:62:2a:f0:13:9d:46:a4:2d:25:09:67:16:78:
                    03:00:fb:4f:28:42:60:46:0b:b8:22:fb:b6:7b:2e:
                    d1:1c:99:ee:05:04:c5:1a:62:27:57:0a:6e:cf:b2:
                    06:9a:29:35:0e:1a:1d:bc:53:be:c6:8c:8e:dc:59:
                    00:e2:6e:7b:74:0c:66:89:77:fc:5b:a2:23:00:75:
                    3a:9e:9b:d0:4c:16:a5:f2:89:95:3e:0e:8a:47:71:
                    48:d1:1d:ee:7f:25:00:d7:49:06:7b:89:ec:e1:5f:
                    23:a6:d1:50:37:2a:db:22:f5:4c:15:01:4c:51:b1:
                    0c:25:50:ce:b8:82:07:30:eb:ea:c8:b9:61:a0:dc:
                    d5:27:92:7d:b5:47:db:29:e6:81:23:f6:ba:c6:36:
                    84:5b:90:00:38:8f:82:73:3f:82:92:82:34:3d:4e:
                    c8:19:ca:bf:00:35:be:94:63:31:ae:4d:37:99:fb:
                    b7:33:b1:14:6b:e9:cd:b0:e1:8e:17:e6:15:1d:56:
                    0f:26:6a:70:ac:19:d2:91:68:2d:de:a6:8b:81:47:
                    71:11:c6:d9:49:d3:72:68:6c:62:33:a1:d8:a5:15:
                    2b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:43:D8:12:BE:5B:2A:50:0D:FC:84:BD:46:7D:8C:E6:5C:54:54:3E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FDB45BCD1E011F0B798D9C0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bc:f6:dd:6e:66:a1:4a:61:9d:e9:c5:74:17:b9:d2:ba:ca:e9:
         01:e0:94:87:02:07:58:fb:43:76:50:63:ef:b9:6e:a4:a3:23:
         f1:1f:2e:4c:f5:ba:12:c1:04:21:45:6f:68:34:8b:f2:05:d8:
         d8:b7:9d:e6:2f:91:7e:85:48:bc:8c:0a:3f:0d:23:65:0e:ae:
         62:b1:6a:28:50:de:c6:7b:64:5e:d8:a2:af:50:30:f7:cd:56:
         97:6f:1e:cc:f6:91:a9:f0:29:de:3a:b3:cc:a1:3b:a8:9e:aa:
         ce:ac:8b:4a:bb:44:13:49:52:40:cf:85:03:0b:a2:a7:e1:a2:
         75:9f:74:9e:cb:96:51:74:50:23:66:d2:e7:13:54:e4:68:df:
         cd:c3:db:32:27:79:44:b1:fb:64:ec:53:94:a2:fa:d1:bd:44:
         db:d6:35:c6:f7:ea:b4:5f:91:ea:40:89:e1:da:34:e3:40:50:
         e3:21:e1:5e:2e:87:32:31:72:94:54:d9:ea:5b:0b:d0:10:64:
         f5:6e:73:4f:e0:e6:14:82:15:90:8d:97:f7:36:26:a0:23:cf:
         31:e2:d6:46:9b:bc:5d:87:f9:a1:f3:8b:2d:c3:73:2a:4b:83:
         22:d8:55:52:e7:f0:34:ef:bb:e1:82:e4:39:31:b3:98:2f:13:
         4b:65:93:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:08:26 2025 by rpki-client