This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E16762A4D06511F0BE3C8079DAE4EC9C.roa
File:                     E16762A4D06511F0BE3C8079DAE4EC9C.roa (raw, json)
Hash identifier:          4Bvx26xpA1wQ3EYTVpyxcvc1znCvtmxphomDMNPFl4c=
Subject key identifier:   2B:4F:0F:67:52:97:99:15:4A:C0:DE:46:C4:53:59:FA:8C:5D:10:D8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ACB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E16762A4D06511F0BE3C8079DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 16:34:04 +0000
ROA not before:           Wed 03 Dec 2025 16:34:00 +0000
ROA not after:            Sun 03 Dec 2028 16:34:00 +0000
asID:                     17561
IP address blocks:        154.196.141.0/24 maxlen: 24
                          154.197.32.0/24 maxlen: 24
                          154.200.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109746 (0x1acb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  3 16:34:00 2025 GMT
            Not After : Dec  3 16:34:00 2028 GMT
        Subject: CN=6930667c-713e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:a6:fb:1f:4b:09:c8:74:36:18:7c:6b:cb:
                    82:76:bb:ed:60:fb:d5:26:d3:31:3f:f8:01:59:0b:
                    46:8f:ed:e9:3a:38:db:d3:dd:91:00:59:3a:3a:af:
                    7b:ee:a9:5b:66:dc:ac:fa:2d:61:68:5d:6f:f3:52:
                    cc:d7:d9:41:14:36:e3:71:e2:1e:95:d5:fd:22:f1:
                    80:a9:40:46:0f:72:82:c1:a3:89:f0:0c:60:49:34:
                    80:6e:e7:f2:26:35:03:bc:07:19:1a:a1:1d:da:32:
                    e0:ba:6c:09:65:73:c9:05:3d:70:85:0a:9c:08:23:
                    19:f4:6d:4d:a4:6f:e9:0a:e1:aa:7f:d7:b9:39:8f:
                    2e:42:d7:d4:29:e2:5d:82:57:95:82:49:84:3c:5a:
                    21:e7:0c:d7:aa:e0:f3:40:4f:8b:9e:6e:c9:c4:ff:
                    00:99:43:66:c0:da:94:a4:85:39:88:0e:da:56:84:
                    78:eb:58:32:cd:38:37:08:d9:0c:78:ee:98:4e:9e:
                    6f:0d:8b:78:75:1f:c5:c6:47:c0:2d:f6:b9:bd:1b:
                    69:e1:2b:9b:d9:bf:8d:93:cb:22:f2:58:ec:d7:eb:
                    c5:2b:8d:71:07:e1:c1:04:b2:d0:98:30:cf:2b:fc:
                    79:81:b8:b9:0f:e0:ac:4f:e9:9b:c6:58:61:75:e3:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4F:0F:67:52:97:99:15:4A:C0:DE:46:C4:53:59:FA:8C:5D:10:D8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E16762A4D06511F0BE3C8079DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.141.0/24
                  154.197.32.0/24
                  154.200.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:d2:87:d5:ab:79:cf:08:97:5e:7b:a2:59:c2:f5:ab:85:f3:
         25:d0:69:30:c3:11:c7:81:4c:f1:09:44:4c:5a:2c:e8:4f:96:
         46:9d:5d:e3:c5:36:04:f6:b4:ca:5d:0c:40:92:b4:3e:d9:b5:
         8f:da:d3:de:a5:d8:93:7d:6c:5d:4a:cc:5e:8e:e1:3b:d4:88:
         70:25:32:d8:ce:df:1b:cb:7b:43:cf:50:31:d5:5c:4a:be:56:
         16:05:22:32:ef:5f:c6:04:66:89:db:ab:0e:84:4e:24:1b:4c:
         07:a7:e3:13:11:c1:41:b4:a1:00:75:19:e5:71:ed:cb:f7:c4:
         25:dd:66:ad:4a:58:e7:99:7e:2e:54:cc:f6:07:0b:f5:39:64:
         b9:6f:b2:2a:7b:b1:72:03:99:f9:83:08:70:63:fc:ba:8c:1e:
         71:55:d1:10:d7:2f:70:e3:0b:1a:30:eb:14:0b:24:e4:ea:ef:
         0a:2d:6c:af:a7:78:a6:1d:9f:2c:02:53:a4:93:35:38:d8:23:
         a9:ee:ba:56:59:c6:a6:a4:b6:39:26:48:2d:e9:d5:4c:a7:0f:
         0f:78:2d:e2:51:be:c6:96:0c:45:dc:95:d3:60:e4:06:85:ef:
         4c:19:0a:30:b8:e7:da:76:53:02:a2:c6:94:bf:0f:25:8b:63:
         f8:07:84:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:10:30 2025 by rpki-client