This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE75639EDB4F11F0AD5D19EBDAE4EC9C.roa
File:                     DE75639EDB4F11F0AD5D19EBDAE4EC9C.roa (raw, json)
Hash identifier:          6JtF7rcX6Ums+cgStW3C9EuB0VTJdMSUEg0lBzo5pRw=
Subject key identifier:   B9:08:0D:31:36:16:47:2A:2F:47:7F:33:67:70:CF:EA:9E:54:EC:C5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AEFB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE75639EDB4F11F0AD5D19EBDAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 13:54:13 +0000
ROA not before:           Wed 17 Dec 2025 13:54:08 +0000
ROA not after:            Fri 23 Jan 2026 13:54:08 +0000
asID:                     19318
IP address blocks:        154.194.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110331 (0x1aefb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 13:54:08 2025 GMT
            Not After : Jan 23 13:54:08 2026 GMT
        Subject: CN=6942b605-1d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:7e:b6:ff:93:08:e3:dd:42:10:93:39:23:
                    3a:4d:d5:5e:27:51:7b:07:a5:0d:ef:6a:46:dd:65:
                    fd:b5:f9:12:83:4a:b0:5f:7f:5b:75:a7:e6:af:2f:
                    c6:68:b8:05:50:69:91:8e:af:c3:30:05:ed:bb:11:
                    bc:a5:01:6c:f7:2f:8f:57:a3:f4:63:80:63:4c:68:
                    af:f7:28:da:7f:1b:88:a4:57:08:61:2c:d4:2c:00:
                    43:5d:59:9c:c9:c4:c8:4d:4b:50:69:c9:d2:d0:0a:
                    6a:e1:c8:bc:2c:7c:79:e0:42:71:4a:9c:a5:06:71:
                    10:62:da:f0:d3:b0:f0:bb:d5:96:a4:0e:80:9f:83:
                    77:a1:f5:38:44:06:53:e2:0c:69:39:a0:34:ce:ad:
                    61:a4:03:5d:c5:29:6e:f2:d1:0d:14:de:5c:22:30:
                    1f:3e:b2:6f:14:24:85:1c:1a:15:c6:e3:46:b5:6a:
                    a0:57:ce:63:27:c5:ae:35:79:0a:25:10:59:03:c0:
                    e2:a4:e4:31:70:2f:e5:c0:47:43:1f:34:ac:c4:49:
                    66:ab:a6:3d:43:b5:c4:c5:e8:e6:2b:3a:39:ea:8e:
                    4b:c8:37:90:11:c0:73:3f:63:7b:e5:12:08:6c:30:
                    b6:31:41:88:2b:84:f3:35:5b:ea:fd:d6:dc:a0:9f:
                    99:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:08:0D:31:36:16:47:2A:2F:47:7F:33:67:70:CF:EA:9E:54:EC:C5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE75639EDB4F11F0AD5D19EBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:52:50:d1:8d:a9:fb:6b:bb:48:c7:81:02:c5:c3:ff:00:0f:
         e7:d8:44:1c:5c:f3:85:11:a5:a4:24:46:98:64:68:7e:04:76:
         b8:8b:55:0a:4c:1a:2d:7c:66:9d:10:3a:1a:e1:f4:48:c1:b0:
         c0:0d:6f:a9:fb:69:4d:70:f4:97:32:f2:80:a2:cd:6d:84:61:
         fb:8f:a7:3b:26:47:80:c2:de:51:a7:65:bb:77:e3:25:18:af:
         ab:e3:e7:69:b3:4a:f1:e3:bc:61:21:5e:ef:1d:70:4c:36:d1:
         e1:f4:d8:5c:55:e7:7c:fc:15:78:9e:51:e3:f0:b7:8c:28:77:
         e4:43:3e:3d:cb:55:40:ea:6a:71:5e:a8:55:76:5d:a8:39:3f:
         8a:da:26:69:e5:26:8f:4c:64:96:65:a2:36:8e:60:58:60:a2:
         40:92:51:fb:63:e0:6e:21:19:03:ae:9c:a5:2c:b4:0b:ca:1c:
         29:41:f0:04:65:03:05:f6:02:e5:a8:d6:7a:cf:3d:43:1e:01:
         3d:fd:f8:fa:3f:a4:c4:e0:f0:8e:ec:b0:ba:4c:62:c4:3b:69:
         96:38:b9:76:bd:03:20:38:0b:f4:44:a3:1b:83:8d:f8:41:7a:
         27:ed:1d:06:d6:46:bf:73:d5:6e:1c:25:92:ba:06:f8:60:af:
         e9:2b:41:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:07:20 2025 by rpki-client