This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04B49C9CDBE511F08430C495DAE4EC9C.roa
File:                     04B49C9CDBE511F08430C495DAE4EC9C.roa (raw, json)
Hash identifier:          RanIhtPkkOOTqALgtKjExyoIw/EB0MFOTbY2G8ROwxk=
Subject key identifier:   49:8A:22:07:A7:62:53:2B:7E:01:0C:51:AE:DF:A3:20:B6:3B:8D:57
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04B49C9CDBE511F08430C495DAE4EC9C.roa
Signing time:             Thu 18 Dec 2025 07:41:52 +0000
ROA not before:           Thu 18 Dec 2025 07:41:45 +0000
ROA not after:            Sat 17 Jan 2026 07:41:45 +0000
asID:                     153671
IP address blocks:        154.196.170.0/23 maxlen: 24
                          154.196.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110419 (0x1af53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 18 07:41:45 2025 GMT
            Not After : Jan 17 07:41:45 2026 GMT
        Subject: CN=6943b040-6169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c5:b2:4a:09:31:b5:df:32:d8:b0:0d:3f:b8:
                    30:de:0a:d9:03:81:bd:7a:7c:ce:9c:22:fe:de:18:
                    ce:ca:78:35:88:21:de:6a:66:98:14:63:9c:ca:92:
                    78:e8:07:fd:e0:66:74:fa:80:f2:01:e3:a5:13:4c:
                    ef:2b:d5:d4:2f:77:f0:c3:81:91:cb:36:c3:25:4c:
                    14:ad:53:f3:07:44:36:42:28:0a:5b:0b:5d:02:26:
                    e3:64:05:1c:fd:3c:d6:e9:79:76:c4:6a:18:ec:fb:
                    25:8b:bb:49:82:c2:08:f4:93:df:ad:57:52:1e:ec:
                    da:59:a0:64:74:65:89:91:ee:0f:69:1f:db:37:19:
                    94:14:ac:6f:c0:74:41:10:40:8f:c0:ab:91:7c:cf:
                    2c:20:75:d0:db:00:8a:9b:14:a4:48:9c:03:f5:62:
                    c0:10:15:cf:36:a1:e7:4c:6a:3b:ee:48:a5:04:e1:
                    6f:f7:97:35:67:d2:3d:a0:cf:24:51:cf:4b:19:57:
                    92:f8:ff:f5:d2:14:57:16:c7:1f:16:be:e8:de:a6:
                    b7:20:ed:91:4a:35:2a:11:11:db:d1:2e:b2:2d:57:
                    a3:d7:83:96:1b:ee:83:5e:fc:e2:13:f2:63:6a:f6:
                    43:27:49:fa:e7:ba:0f:f0:4c:b6:b3:4e:c9:43:04:
                    b9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8A:22:07:A7:62:53:2B:7E:01:0C:51:AE:DF:A3:20:B6:3B:8D:57
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04B49C9CDBE511F08430C495DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.170.0/23
                  154.196.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:d1:4c:e6:58:c2:d7:13:de:5e:2d:3d:b0:d7:0c:27:41:62:
         ad:ad:b0:8c:ce:31:10:3b:a0:5e:14:f9:df:34:b8:c0:dc:6c:
         48:dd:93:bd:48:c4:67:09:bc:56:92:9b:df:d5:60:9c:e1:d4:
         2c:de:2e:b6:fc:e0:49:77:f8:60:5a:85:98:b8:d5:e9:06:c1:
         02:c9:12:49:45:b6:d3:17:5a:39:d1:0f:36:c2:ce:c9:31:63:
         f6:cf:47:5e:f9:cb:d7:3f:63:0c:61:5f:b1:fb:25:c9:11:94:
         ae:50:11:00:c8:d1:ab:cc:ff:4e:60:9a:de:82:ea:a1:ab:a8:
         f9:6b:82:31:e5:2e:af:59:88:24:33:a0:ff:10:65:a9:cd:1e:
         db:cf:6a:1a:0f:e3:f2:c6:94:9f:f0:4c:38:cb:7d:8f:69:b5:
         a9:0a:2f:be:3d:10:c1:70:68:ca:1f:96:df:fc:1f:02:2e:a9:
         38:93:3f:36:eb:f8:7e:42:31:a3:08:c7:0b:98:db:e4:7f:93:
         d8:c1:c1:7d:28:c1:19:de:f0:6a:3d:67:ab:cb:4e:50:ce:30:
         46:d9:82:50:b7:e2:1c:be:52:ac:89:71:3b:77:bb:f0:7f:09:
         19:0b:8c:30:56:10:ab:9e:c2:ec:e7:2a:90:e2:01:c7:d3:92:
         12:64:f4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:02:20 2025 by rpki-client