This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2185F40E02211F0A91262A8DAE4EC9C.roa
File:                     B2185F40E02211F0A91262A8DAE4EC9C.roa (raw, json)
Hash identifier:          8XgrBZK5T1KpCLfBbvnApwEQ3EXuu8Ony2bryj9gHS0=
Subject key identifier:   4D:DC:94:37:3C:41:4A:65:68:51:0D:FA:B4:CE:EF:EE:5D:A4:3A:32
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B069
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2185F40E02211F0A91262A8DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 17:13:29 +0000
ROA not before:           Tue 23 Dec 2025 17:13:22 +0000
ROA not after:            Thu 24 Dec 2026 17:13:22 +0000
asID:                     132546
IP address blocks:        154.197.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110697 (0x1b069)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 23 17:13:22 2025 GMT
            Not After : Dec 24 17:13:22 2026 GMT
        Subject: CN=694acdb9-d3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:85:3c:ba:c3:ca:86:f9:23:83:65:e3:b1:fa:
                    f2:37:31:9b:b8:bd:14:20:84:cd:1d:e5:75:84:82:
                    4f:9d:73:89:c9:0f:ad:dd:51:b1:6d:23:f3:3d:23:
                    3f:24:b6:50:0d:0c:31:55:90:c7:4e:7a:a9:98:4c:
                    71:08:b5:32:15:46:9d:c3:c4:d8:e2:bb:39:54:c2:
                    e4:96:c8:5f:fe:7f:8a:0f:74:af:84:07:d1:0e:72:
                    68:45:8d:6b:49:96:2e:3c:db:16:1f:b7:2c:a3:a1:
                    22:1d:7e:2a:60:ee:f4:d9:78:cc:16:32:57:11:ea:
                    2e:82:2c:2d:fa:be:38:dd:04:9a:ea:ac:45:08:03:
                    35:2d:cd:18:4f:66:f3:34:13:59:1f:6d:4a:0d:e2:
                    af:44:d1:1d:af:b8:87:05:b4:a5:b5:86:ee:78:1d:
                    77:91:c3:ea:7f:e7:cc:37:f8:0a:ec:fd:a3:b1:71:
                    dc:e7:d3:02:16:76:e7:ed:91:c7:79:07:fb:95:b4:
                    45:ad:0b:c0:89:b7:12:0f:81:97:b3:a8:11:94:2a:
                    ce:6f:6d:22:f0:4d:e7:d7:ee:4e:7e:92:24:a8:2c:
                    ce:11:8c:ad:9a:79:4f:7b:54:3d:0f:83:b4:c0:12:
                    36:20:e7:9c:cb:de:aa:ce:53:92:f5:d4:95:55:3a:
                    86:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DC:94:37:3C:41:4A:65:68:51:0D:FA:B4:CE:EF:EE:5D:A4:3A:32
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2185F40E02211F0A91262A8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:31:8e:23:9b:a5:c0:ff:66:c7:c4:b0:fa:07:83:7f:60:3a:
         89:f5:84:bd:c0:c0:0c:50:93:ef:e6:3b:4d:62:4a:b2:6a:db:
         05:0b:c0:6a:05:7b:d4:0a:92:1b:90:2b:07:ef:4a:68:33:25:
         42:4b:fc:e3:8e:21:29:3d:92:70:4d:b4:a6:18:50:1e:ad:3c:
         8a:46:76:b7:1b:9f:6e:01:45:00:a4:c1:a6:01:12:38:9d:1c:
         9d:4c:84:a8:05:95:7f:4b:e3:6b:23:f9:66:55:e3:ed:e1:ac:
         a6:34:02:d8:62:11:3d:40:0c:7c:8a:c4:ee:ee:ff:9c:b8:ef:
         cd:75:70:21:bc:e2:18:df:8a:1e:23:b1:1b:ba:e9:e0:d5:d6:
         92:5b:30:91:7a:25:4d:6e:88:b9:b4:18:68:74:68:31:3c:d3:
         73:b9:6e:f7:1d:67:d0:9d:20:d9:75:7e:c9:50:31:3e:b7:0e:
         92:c7:2c:db:0c:39:30:9b:e1:14:dc:a4:e7:35:68:48:f3:7b:
         cb:6e:8c:0b:28:e8:d5:13:3e:e2:54:b4:cb:d5:e8:4b:5e:ac:
         58:37:86:68:58:ec:f3:b4:ae:09:3e:ac:5f:20:80:4a:36:f0:
         ca:9a:b7:3d:ee:4e:2a:0f:8d:7a:36:d7:61:79:73:2f:ea:28:
         ff:89:fd:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbBpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjIzMTcxMzIyWhcNMjYxMjI0MTcxMzIyWjAYMRYw
FAYDVQQDEw02OTRhY2RiOS1kM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6oU8usPKhvkjg2XjsfryNzGbuL0UIITNHeV1hIJPnXOJyQ+t3VGxbSPz
PSM/JLZQDQwxVZDHTnqpmExxCLUyFUadw8TY4rs5VMLklshf/n+KD3SvhAfRDnJo
RY1rSZYuPNsWH7cso6EiHX4qYO702XjMFjJXEeougiwt+r443QSa6qxFCAM1Lc0Y
T2bzNBNZH21KDeKvRNEdr7iHBbSltYbueB13kcPqf+fMN/gK7P2jsXHc59MCFnbn
7ZHHeQf7lbRFrQvAibcSD4GXs6gRlCrOb20i8E3n1+5OfpIkqCzOEYytmnlPe1Q9
D4O0wBI2IOecy96qzlOS9dSVVTqGQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE3c
lDc8QUplaFEN+rTO7+5dpDoyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMjE4NUY0MEUwMjIxMUYwQTkxMjYyQThEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVnMA0GCSqGSIb3DQEB
CwUAA4IBAQCtMY4jm6XA/2bHxLD6B4N/YDqJ9YS9wMAMUJPv5jtNYkqyatsFC8Bq
BXvUCpIbkCsH70poMyVCS/zjjiEpPZJwTbSmGFAerTyKRna3G59uAUUApMGmARI4
nRydTISoBZV/S+NrI/lmVePt4aymNALYYhE9QAx8isTu7v+cuO/NdXAhvOIY34oe
I7Ebuung1daSWzCReiVNboi5tBhodGgxPNNzuW73HWfQnSDZdX7JUDE+tw6Sxyzb
DDkwm+EU3KTnNWhI83vLbowLKOjVEz7iVLTL1ehLXqxYN4ZoWOzztK4JPqxfIIBK
NvDKmrc97k4qD416NtdheXMv6ij/if34
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:10:09 2026 by rpki-client