This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C14DDCE04D11F0A1B8F6AEDAE4EC9C.roa
File:                     53C14DDCE04D11F0A1B8F6AEDAE4EC9C.roa (raw, json)
Hash identifier:          cGpCRLgB+ZMT5V09TUL4T7O95v6QPHJThcCpj/W6Mbs=
Subject key identifier:   5D:D8:19:A9:26:5D:3A:75:7E:51:E7:10:4A:F5:32:3B:AE:89:3A:1A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B07D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C14DDCE04D11F0A1B8F6AEDAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 22:18:37 +0000
ROA not before:           Tue 23 Dec 2025 22:18:32 +0000
ROA not after:            Fri 06 Feb 2026 22:18:32 +0000
asID:                     20326
IP address blocks:        154.193.134.0/23 maxlen: 24
                          154.193.156.0/23 maxlen: 24
                          154.222.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 18:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110717 (0x1b07d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 23 22:18:32 2025 GMT
            Not After : Feb  6 22:18:32 2026 GMT
        Subject: CN=694b153d-51d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:f9:fc:f8:2b:e9:27:bc:82:e8:7d:e6:a9:
                    27:1d:fa:aa:21:3e:5f:6d:3a:52:46:48:a9:7b:db:
                    c7:11:eb:09:dc:7f:68:e5:98:06:cd:16:9a:2d:b2:
                    f9:50:fd:f4:65:cf:9f:ac:46:e3:1d:ed:9b:b5:57:
                    d5:39:34:cf:a4:cb:77:9e:6f:1e:31:68:40:d7:3a:
                    07:4a:7b:fc:04:4b:61:d2:ce:44:22:95:33:34:51:
                    ad:1f:37:06:56:4a:07:45:50:d9:8e:94:80:e7:e9:
                    92:77:cc:fc:bc:b9:b0:97:e2:a1:c4:b7:a8:29:85:
                    42:5d:88:5f:3b:ec:29:b3:b5:a1:ec:58:58:fb:a3:
                    23:6f:ee:c9:2c:37:a8:21:14:4a:85:bf:c3:52:20:
                    60:a1:17:42:59:8a:7c:66:9e:7a:a2:3b:23:5d:8e:
                    d7:4b:f3:c3:08:4b:11:4b:5c:08:85:39:b6:1b:ca:
                    af:aa:a9:ca:91:07:3e:a6:4e:9b:d6:2f:e8:e6:a2:
                    fa:76:12:41:d0:5b:ca:85:33:8c:c7:28:fa:a5:3a:
                    98:ac:80:79:37:5f:fb:e5:66:63:83:98:e3:a2:eb:
                    2f:d1:f2:35:64:71:a8:78:26:6f:a6:b2:a2:7b:ba:
                    84:1b:98:90:47:9f:31:51:c5:21:e8:f2:13:58:c8:
                    72:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D8:19:A9:26:5D:3A:75:7E:51:E7:10:4A:F5:32:3B:AE:89:3A:1A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C14DDCE04D11F0A1B8F6AEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.134.0/23
                  154.193.156.0/23
                  154.222.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:6c:6a:85:b9:45:cb:4b:c4:e4:4e:d6:df:12:4d:e4:ab:fd:
         43:6d:10:91:ab:65:61:79:89:73:b3:c6:6d:df:3f:d0:91:e8:
         3c:d3:31:8c:62:79:07:a0:10:41:36:eb:e8:df:90:61:9e:91:
         03:13:b0:0d:73:d0:78:09:a0:a2:2f:7f:ee:7c:91:1e:43:6e:
         2f:32:b3:41:38:96:d8:d2:61:d2:b6:90:a6:e6:87:f6:51:96:
         7e:65:f2:24:d5:90:1f:21:38:5d:70:87:3f:3f:3f:f2:1f:73:
         02:92:72:90:d1:d9:dd:f6:d7:f6:e9:42:14:2d:bf:9e:9e:33:
         93:0c:3c:0e:80:5c:03:d8:7a:87:09:ff:3e:55:a2:46:5b:17:
         6d:76:24:f2:28:52:73:7b:66:ea:7c:14:b8:7c:3b:f5:81:ae:
         0b:e9:85:d0:1f:fb:7a:7e:4d:da:da:f2:35:6d:6c:45:16:1a:
         70:6f:e3:45:76:cc:43:3b:7f:a5:a0:37:5d:8f:46:11:f8:12:
         0e:88:ee:30:64:a5:ca:5b:d5:73:47:22:28:4d:98:d2:3e:8e:
         be:05:8b:a3:ab:dd:0d:7a:1d:e1:85:a1:74:2b:8b:f1:bd:c5:
         47:d8:40:ba:52:b8:7d:fa:37:56:1d:40:72:18:5f:01:d9:78:
         b3:e6:af:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:19:54 2025 by rpki-client