This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E5C3118DFCA11F0BBC25288DAE4EC9C.roa
File:                     0E5C3118DFCA11F0BBC25288DAE4EC9C.roa (raw, json)
Hash identifier:          KNrmNc1DkXXVgoZXz5MCX8/5yIv98Kaw73J4ie0oGyg=
Subject key identifier:   E8:E6:0D:04:87:E7:01:22:9E:64:E3:DB:D8:4B:67:95:87:26:D8:C0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B006
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E5C3118DFCA11F0BBC25288DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 06:38:58 +0000
ROA not before:           Tue 23 Dec 2025 06:38:52 +0000
ROA not after:            Tue 20 Jan 2026 06:38:52 +0000
asID:                     20326
IP address blocks:        154.199.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 18:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110598 (0x1b006)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 23 06:38:52 2025 GMT
            Not After : Jan 20 06:38:52 2026 GMT
        Subject: CN=694a3902-4e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:06:27:f3:7c:60:41:98:b2:38:9f:9f:c9:0d:
                    c1:59:ff:b7:b9:06:3f:69:d3:12:a2:af:ba:e8:b9:
                    e6:05:8c:7c:6f:5c:b7:de:53:86:db:dd:02:e6:a8:
                    29:ff:52:1a:05:c5:ac:1e:62:d6:e9:b7:03:79:32:
                    b7:75:88:c9:f4:c5:e4:86:de:a3:6b:2a:de:09:9f:
                    00:b5:70:0a:57:42:10:18:9d:ba:ad:5a:d5:da:c2:
                    d5:4d:b5:f5:e8:7b:bc:01:1c:4e:d9:48:ef:ec:4a:
                    8a:d0:3d:ca:46:b9:a8:6e:bc:67:ce:0f:39:02:22:
                    61:11:d5:66:43:5f:63:80:ee:1f:43:02:2f:e8:cd:
                    ed:74:06:61:83:93:9b:e3:0a:ca:22:99:aa:56:13:
                    27:67:04:bc:8e:3c:7f:51:26:80:81:e5:e1:73:5f:
                    a5:2b:0c:b7:2d:14:9d:73:11:ff:9c:a1:cf:4a:35:
                    b5:f1:15:b9:05:ec:5c:ce:6e:80:21:f8:11:af:0b:
                    e5:5c:75:7e:06:e8:65:85:99:84:db:7a:f5:20:e5:
                    35:54:11:70:e1:cc:c5:5f:8d:9c:0d:74:6b:d0:ec:
                    83:c7:e4:0a:80:02:02:29:58:20:03:c2:f7:7d:b2:
                    57:26:b3:bd:7f:91:1f:27:6b:7d:72:5b:9a:ca:94:
                    c3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E6:0D:04:87:E7:01:22:9E:64:E3:DB:D8:4B:67:95:87:26:D8:C0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E5C3118DFCA11F0BBC25288DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:ad:e8:b7:f4:14:bd:dc:d0:80:e6:db:3a:ee:8b:f4:94:63:
         e0:4e:82:a0:26:a6:3d:ef:32:83:99:11:f0:13:94:8b:d4:69:
         9c:0a:a6:d5:9d:b2:de:e7:ff:c3:6c:b8:d5:86:fa:19:0c:91:
         2b:f7:4d:d5:a3:e1:cc:5f:3e:f2:2a:1d:0c:01:b3:75:cc:51:
         1b:04:c8:b2:e5:83:76:e0:84:b9:28:10:26:cd:95:28:c1:b0:
         b0:2c:c7:64:e3:e2:fa:56:8e:53:4f:0e:98:be:8c:7e:1d:9b:
         5f:15:5f:f3:6c:94:e4:35:7e:36:9f:5f:a6:87:9c:a9:29:77:
         89:40:f3:7b:7e:25:24:2a:22:75:1f:57:7c:c1:86:51:0c:a3:
         72:75:96:b5:ca:b6:b4:f3:32:d0:0b:10:57:98:a2:86:98:43:
         d1:b0:c1:1f:3c:8e:98:77:0f:c1:90:22:8c:46:38:14:b8:ce:
         54:bf:e2:92:68:20:39:67:e1:7a:13:ea:a5:06:0e:50:35:56:
         75:0c:15:e9:0a:87:5c:33:c8:e8:8a:ff:d1:65:ce:bd:06:87:
         41:bb:a7:6c:9c:09:ee:cf:3a:35:0b:7f:be:17:fa:5f:dc:81:
         08:a3:15:91:25:2f:5e:6e:ca:a9:e1:e8:5e:4d:e9:b6:96:f9:
         94:09:aa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:19:55 2025 by rpki-client