This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EC50056D4D411F09AC9F8C7DAE4EC9C.roa
File:                     8EC50056D4D411F09AC9F8C7DAE4EC9C.roa (raw, json)
Hash identifier:          aDOL5Op4V8m8bdcEn1OBuJhXPFfdk3IY479TTFlG0sU=
Subject key identifier:   C2:F4:EA:BE:C0:CB:DD:A1:F5:5F:6A:74:D8:6F:C7:7B:F3:E7:43:4F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AD6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EC50056D4D411F09AC9F8C7DAE4EC9C.roa
Signing time:             Tue 09 Dec 2025 07:56:24 +0000
ROA not before:           Tue 09 Dec 2025 07:56:20 +0000
ROA not after:            Wed 07 Jan 2026 07:56:20 +0000
asID:                     272092
IP address blocks:        154.83.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109932 (0x1ad6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  9 07:56:20 2025 GMT
            Not After : Jan  7 07:56:20 2026 GMT
        Subject: CN=6937d628-f9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:33:51:ed:70:d6:cd:ef:a6:9a:87:25:02:
                    f6:39:ba:40:68:49:db:b1:6c:c9:f6:37:87:06:57:
                    ac:7e:08:89:ae:99:ca:25:fa:61:3c:c4:f8:3f:45:
                    dd:b5:11:42:29:57:3b:04:c8:a7:df:62:b5:23:eb:
                    7a:d6:e9:3d:02:bd:60:09:69:31:a3:10:67:bc:a2:
                    24:9e:0b:91:c6:b9:0f:62:a4:29:69:91:9b:47:7c:
                    3f:00:12:47:a7:e4:d3:ac:b3:68:ae:9e:0b:2f:c3:
                    e6:ec:be:4f:5e:4b:09:ec:f3:b9:aa:fb:76:3b:ed:
                    0a:9c:31:62:47:15:18:02:78:45:5c:7c:e2:fe:ec:
                    9e:cc:50:16:b1:38:bd:7b:7d:32:f2:5b:99:fb:91:
                    b1:1a:71:9f:d0:3b:8c:0e:d6:bc:80:29:71:71:1f:
                    18:37:96:5d:7f:de:7c:6c:bb:d0:f5:22:e7:53:2b:
                    96:e1:14:16:f4:94:a2:6d:44:87:0d:fd:ae:4f:a6:
                    da:83:09:2f:ec:95:be:f5:b9:68:63:62:15:68:bd:
                    d2:9e:3f:07:1e:01:73:d6:42:36:43:21:a9:82:6f:
                    8e:2e:b3:d1:75:62:4e:69:a5:04:b7:cb:d7:d3:d4:
                    b0:52:51:fe:9d:ae:5d:ba:6e:a9:93:79:c8:f6:37:
                    13:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F4:EA:BE:C0:CB:DD:A1:F5:5F:6A:74:D8:6F:C7:7B:F3:E7:43:4F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EC50056D4D411F09AC9F8C7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:96:ca:a1:1c:ff:f4:42:c6:8a:0d:c8:6b:ba:3b:a2:70:49:
         61:d2:d1:5b:3b:cf:75:96:3d:a5:dd:16:05:14:2d:c5:02:be:
         a3:c8:5a:66:b2:60:c6:09:dd:ac:62:0c:fa:40:67:7a:50:70:
         a7:27:ac:35:f2:eb:6c:d7:59:4b:30:d7:e3:3d:94:ce:3b:df:
         9d:ae:0e:74:02:b5:79:80:b1:eb:e1:dc:7e:2a:c5:62:32:c0:
         69:49:dc:16:a9:52:af:04:d7:45:ea:78:55:8c:8e:57:9c:84:
         47:61:8b:1a:3b:3c:6a:5d:63:75:a0:47:e4:d6:84:a0:64:96:
         03:0e:f4:36:93:03:01:58:40:12:d5:16:36:5d:22:72:46:95:
         a8:78:76:bc:d7:17:17:36:7c:6a:cf:f4:04:ce:e0:03:33:b1:
         df:7d:0b:39:1a:7d:22:3e:73:c1:a5:7b:43:e7:30:fb:de:b6:
         83:5a:13:a0:9d:ca:0b:30:18:37:af:0c:64:d0:2f:8a:ed:d1:
         65:10:15:e9:03:f6:95:d5:16:07:61:8a:57:3d:6d:0b:98:31:
         b5:00:d3:d5:77:c1:a1:30:a3:39:e8:ae:57:66:71:3e:f6:c1:
         46:f4:5a:5c:58:19:55:fe:f7:82:a2:7c:96:91:cc:21:7d:43:
         70:bb:ff:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 16:06:48 2025 by rpki-client