This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C163D0CCD03411F0B5D151CADAE4EC9C.roa
File:                     C163D0CCD03411F0B5D151CADAE4EC9C.roa (raw, json)
Hash identifier:          w/Wva1RBVbNMVZ8QeF12mPBF0NJmMKlANzQF3fXuG1Y=
Subject key identifier:   14:60:42:EC:BA:E3:25:EA:AF:76:59:12:8B:C8:59:79:CF:38:6F:93
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AC43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C163D0CCD03411F0B5D151CADAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 10:42:31 +0000
ROA not before:           Wed 03 Dec 2025 10:42:17 +0000
ROA not after:            Sat 07 Mar 2026 10:42:17 +0000
asID:                     6453
IP address blocks:        154.210.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109635 (0x1ac43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  3 10:42:17 2025 GMT
            Not After : Mar  7 10:42:17 2026 GMT
        Subject: CN=69301417-5cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ea:33:1a:6d:ac:90:a0:ad:3e:4b:72:cf:d8:
                    d8:98:76:8a:94:c3:4b:5e:4f:e7:d7:64:ad:22:04:
                    ba:e1:51:27:07:31:0d:66:d6:01:dc:30:c4:90:11:
                    c2:1a:ab:69:1d:fb:2b:0a:2c:0d:9e:58:a8:d2:2e:
                    c6:68:00:08:1c:7b:22:9e:f6:54:a8:4b:35:29:cc:
                    a3:40:c0:6c:5a:e8:20:a8:4e:2e:11:52:2b:21:bb:
                    c8:ca:3c:f9:43:f3:5b:08:94:de:bb:62:e7:42:0e:
                    94:fe:f4:f4:d8:a6:46:ad:cf:cf:db:12:f4:98:22:
                    02:3f:1f:45:8d:09:a2:22:82:1c:86:17:a7:eb:21:
                    43:20:d7:a3:e8:69:61:96:68:9d:62:3b:54:15:4d:
                    6d:ce:49:ac:6d:8d:cf:fa:52:a9:57:93:e2:43:ea:
                    da:8d:8d:5b:40:f9:b9:c0:10:a4:fc:9a:49:42:c8:
                    83:ba:9e:27:02:9c:9f:65:52:23:53:c3:ba:35:55:
                    58:d7:26:94:4a:c8:6a:de:8b:20:4a:6c:75:ce:f0:
                    a3:f9:cb:b7:2f:9f:65:99:b0:e7:e7:87:73:12:1e:
                    4a:5e:3c:89:5e:12:2b:02:c2:ba:d7:d2:e9:5e:02:
                    57:a9:91:75:5c:74:5e:a3:a9:7d:e1:f7:6c:eb:c5:
                    e2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:60:42:EC:BA:E3:25:EA:AF:76:59:12:8B:C8:59:79:CF:38:6F:93
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C163D0CCD03411F0B5D151CADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:41:24:57:19:84:5a:6c:5e:be:48:1e:8b:62:e9:eb:be:f9:
         03:ba:21:ab:aa:ec:28:c8:0c:e1:70:36:6c:d0:9e:c0:1c:98:
         16:f7:4b:62:f4:5e:c3:e0:ad:0a:59:96:98:e3:07:60:a3:13:
         13:f1:2d:35:ef:a9:f3:9b:13:e0:d3:aa:e8:8f:24:8d:7f:9d:
         5e:d3:1f:a7:b6:ee:66:50:3f:0a:30:36:6d:d3:dd:81:96:be:
         8e:c8:0b:37:ca:50:e0:3c:2e:69:bd:e6:ab:dd:7f:c3:de:a9:
         c3:83:b6:4e:86:91:2f:47:5e:cd:e4:13:64:d9:fa:0b:57:d5:
         f8:28:b1:5d:52:17:bb:10:6c:bb:27:e1:90:50:c4:f4:3e:bb:
         cc:7a:68:b8:67:68:4b:2a:4d:6f:d2:f9:31:1b:97:e8:5e:26:
         da:0d:17:09:bd:b4:38:8c:f5:01:f9:56:c8:8a:97:a5:30:98:
         27:b5:bf:97:de:67:b1:42:33:82:4c:e9:9b:1e:88:e1:f9:21:
         eb:91:cf:8e:c0:7b:57:c8:f3:e1:d6:4c:a1:fa:5b:5c:0d:ab:
         9a:2d:ec:db:3c:3b:71:ff:c5:82:84:9c:d6:a2:3d:54:91:61:
         f1:fa:dd:7e:49:97:6a:5e:e2:80:31:9d:d6:ff:ed:97:dc:b2:
         ed:e4:ca:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaxDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAzMTA0MjE3WhcNMjYwMzA3MTA0MjE3WjAYMRYw
FAYDVQQDEw02OTMwMTQxNy01Y2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAveozGm2skKCtPktyz9jYmHaKlMNLXk/n12StIgS64VEnBzENZtYB3DDE
kBHCGqtpHfsrCiwNnlio0i7GaAAIHHsinvZUqEs1KcyjQMBsWuggqE4uEVIrIbvI
yjz5Q/NbCJTeu2LnQg6U/vT02KZGrc/P2xL0mCICPx9FjQmiIoIchhen6yFDINej
6GlhlmidYjtUFU1tzkmsbY3P+lKpV5PiQ+rajY1bQPm5wBCk/JpJQsiDup4nApyf
ZVIjU8O6NVVY1yaUSshq3osgSmx1zvCj+cu3L59lmbDn54dzEh5KXjyJXhIrAsK6
19LpXgJXqZF1XHReo6l94fds68XiMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBRg
Quy64yXqr3ZZEovIWXnPOG+TMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMTYzRDBDQ0QwMzQxMUYwQjVEMTUxQ0FEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLeMA0GCSqGSIb3DQEB
CwUAA4IBAQBpQSRXGYRabF6+SB6LYunrvvkDuiGrquwoyAzhcDZs0J7AHJgW90ti
9F7D4K0KWZaY4wdgoxMT8S0176nzmxPg06rojySNf51e0x+ntu5mUD8KMDZt092B
lr6OyAs3ylDgPC5pvear3X/D3qnDg7ZOhpEvR17N5BNk2foLV9X4KLFdUhe7EGy7
J+GQUMT0PrvMemi4Z2hLKk1v0vkxG5foXibaDRcJvbQ4jPUB+VbIipelMJgntb+X
3mexQjOCTOmbHojh+SHrkc+OwHtXyPPh1kyh+ltcDauaLezbPDtx/8WChJzWoj1U
kWHx+t1+SZdqXuKAMZ3W/+2X3LLt5Mo0
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:40:03 2025 by rpki-client