This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FB549AAD12011F08BDFC78EDAE4EC9C.roa
File:                     4FB549AAD12011F08BDFC78EDAE4EC9C.roa (raw, json)
Hash identifier:          uYz8lSV5WKefeh7g5CaIOQtLJ+TyEze5KUsOmrXMzk4=
Subject key identifier:   00:DE:86:63:B6:50:3E:A5:C3:3D:E4:FA:57:5E:6E:63:F5:93:C8:4B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ACE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FB549AAD12011F08BDFC78EDAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 14:48:36 +0000
ROA not before:           Thu 04 Dec 2025 14:48:30 +0000
ROA not after:            Mon 08 Dec 2025 14:48:30 +0000
asID:                     61461
IP address blocks:        154.216.192.0/18 maxlen: 24
                          154.218.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109794 (0x1ace2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  4 14:48:30 2025 GMT
            Not After : Dec  8 14:48:30 2025 GMT
        Subject: CN=69319f44-25a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:4c:f2:37:34:f5:f2:10:f2:af:ff:bb:8a:
                    83:6e:a2:07:c2:a9:5c:f9:ff:07:77:2f:3d:80:a2:
                    dc:a9:a4:52:2c:9a:66:9a:70:cc:1e:62:62:6a:d2:
                    8e:6d:f2:ca:7d:0d:e9:4e:98:8e:2f:b4:ab:ab:1a:
                    92:32:d2:02:b7:a5:74:85:48:f5:7f:d1:54:c5:77:
                    39:a8:b5:14:27:91:5b:51:d1:d5:ba:54:34:2a:6b:
                    03:c9:32:7c:8a:4d:88:28:b4:41:3c:5c:95:69:9f:
                    91:9e:7f:44:f9:47:8d:58:f3:29:21:32:b1:13:c7:
                    a0:c0:42:08:ac:04:bd:8a:69:b5:52:46:06:11:ac:
                    83:f2:80:9c:6f:43:80:65:92:0c:69:37:dc:a9:ce:
                    0a:4a:fa:79:ba:27:a5:f1:60:e3:40:e0:ea:6c:ef:
                    e6:37:0a:ac:6a:8a:6c:ef:cb:88:eb:37:ba:86:d9:
                    2a:a2:ac:43:6e:87:f8:33:8f:5c:29:03:83:a8:71:
                    55:3a:7f:5b:c9:1a:05:c6:52:31:5a:c6:c8:47:c2:
                    c0:7d:dc:37:6c:ae:a0:4a:f3:d2:f6:28:3e:74:fe:
                    0d:cc:e1:ed:ef:b4:ea:8c:61:ed:e0:5b:e5:ad:8b:
                    7f:2b:f3:c9:a6:98:de:9f:6a:cc:86:27:5a:ac:6d:
                    ca:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DE:86:63:B6:50:3E:A5:C3:3D:E4:FA:57:5E:6E:63:F5:93:C8:4B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FB549AAD12011F08BDFC78EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.216.192.0/18
                  154.218.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         93:26:5a:13:1f:42:8e:3b:35:6a:72:63:23:78:16:67:87:10:
         53:5e:03:7b:2c:ca:26:ba:09:45:34:71:21:b3:30:13:8f:c4:
         9b:e0:fb:f3:1f:4f:92:8f:b7:63:0d:0a:ed:24:4f:ac:b8:16:
         1c:8b:e9:54:45:df:f6:d1:eb:67:90:ac:38:37:b5:82:44:7c:
         6e:fa:9c:5a:89:9e:26:78:e9:46:92:93:91:73:76:0e:9e:f3:
         33:a2:23:6f:88:a1:ce:89:ee:44:ea:aa:f6:ab:49:43:83:a3:
         02:1b:c6:ce:e9:9f:b7:27:87:ff:c7:e3:17:2b:f0:dc:73:0b:
         ee:5b:48:8d:3e:78:d1:31:0a:83:5d:55:36:c6:3c:4d:ca:26:
         a1:1c:70:36:e5:0b:9b:ea:f9:e2:c0:54:f2:8c:91:6f:f5:24:
         c2:93:00:6d:e4:99:03:f1:d3:9f:a8:5a:19:e9:fe:be:db:7d:
         12:64:35:0d:4a:9f:26:bb:37:82:c7:c2:e0:23:83:d8:34:b7:
         0d:09:05:ac:66:fd:bd:0a:82:cf:c2:8e:69:7e:b1:0b:a3:78:
         a4:d5:d4:a8:d3:42:18:d1:d1:5f:fe:ef:06:e2:ac:9f:60:58:
         1c:fc:41:22:13:d8:56:25:62:49:6c:05:ba:6b:e3:9f:42:58:
         bb:bf:30:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:52:17 2025 by rpki-client