This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8780EFE8D73211F0B1F735A3DAE4EC9C.roa
File:                     8780EFE8D73211F0B1F735A3DAE4EC9C.roa (raw, json)
Hash identifier:          V8R45Sb3MmuvEa/JbL5SZlWmRb0dWdDSkmTn4idfcG8=
Subject key identifier:   60:73:8B:A9:F3:16:E6:D1:14:84:86:50:DD:27:5D:C6:AC:14:07:3A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ADF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8780EFE8D73211F0B1F735A3DAE4EC9C.roa
Signing time:             Fri 12 Dec 2025 08:14:07 +0000
ROA not before:           Fri 12 Dec 2025 08:14:03 +0000
ROA not after:            Tue 20 Jan 2026 08:14:03 +0000
asID:                     273155
IP address blocks:        154.200.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110070 (0x1adf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 12 08:14:03 2025 GMT
            Not After : Jan 20 08:14:03 2026 GMT
        Subject: CN=693bcecf-18ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:a9:04:a9:de:87:3f:25:6b:78:a7:1b:a1:
                    cd:63:b8:f7:fe:69:60:34:a5:45:20:14:b6:6c:d2:
                    f8:9a:50:72:49:77:4a:23:55:a5:c4:8b:c4:fb:17:
                    64:27:c6:96:de:eb:4a:d1:46:bf:ea:c1:74:66:0a:
                    bf:96:46:9c:0c:75:13:cb:e0:ca:41:b2:93:25:88:
                    0f:17:c2:97:e5:db:cc:2d:20:73:1b:98:b2:bc:ff:
                    71:a5:92:39:2e:31:09:35:c2:61:13:07:3c:86:ca:
                    58:e0:b2:2a:c9:8b:23:9a:de:f1:e1:b5:72:17:be:
                    f7:8f:03:bf:1f:77:4c:8c:fc:6d:79:0a:3d:4d:38:
                    f1:0b:10:6c:39:f0:5d:a4:71:22:60:cb:6f:ea:df:
                    59:83:3b:d8:78:ab:e3:ec:92:dc:11:ba:07:6e:8a:
                    25:8c:e4:36:2f:1b:b7:5d:35:fe:55:53:97:82:74:
                    8c:0b:c5:06:fe:92:91:07:25:04:f4:b4:de:ce:ea:
                    2d:ee:bf:ca:42:7f:ab:f5:a1:c5:64:c7:53:d7:d7:
                    a4:c2:77:df:62:63:72:3d:e0:b0:ca:b0:1e:af:4f:
                    3c:37:a6:fe:31:bc:61:a3:1e:d9:bc:32:53:49:bf:
                    31:d8:d2:e5:58:67:0d:d2:81:a3:c4:c2:64:e2:05:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:73:8B:A9:F3:16:E6:D1:14:84:86:50:DD:27:5D:C6:AC:14:07:3A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8780EFE8D73211F0B1F735A3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:c7:00:c7:fa:c0:26:77:cc:82:2f:73:d5:cd:04:f4:98:
         d0:b0:5c:f4:a7:bc:a1:49:e2:67:ed:ac:7a:ba:f4:58:3e:b7:
         30:7a:2a:c5:da:4d:72:cf:d1:06:bd:c8:e4:55:56:ac:da:d2:
         d0:54:55:4e:92:49:fd:51:06:33:ee:ce:f7:76:4f:69:c2:64:
         f5:c5:be:13:fa:23:32:2d:6a:dc:a4:3e:a0:82:30:3a:b5:89:
         b3:c0:15:8c:51:50:dc:57:b9:12:a0:71:a6:ff:31:22:88:01:
         4a:ef:d7:54:24:43:56:80:62:57:cf:5f:78:b0:fe:2a:45:93:
         52:2f:c8:e0:3b:f8:b1:45:cf:3c:f7:a9:07:f6:96:3c:bc:28:
         fb:b2:7e:57:06:e6:06:7d:a0:d7:68:7d:9f:bc:59:c1:2c:ba:
         cc:83:5b:ab:fa:f9:d3:7f:71:08:46:ba:8f:94:14:e5:44:c2:
         e8:e9:ee:16:4c:3b:81:97:c8:00:88:f8:d6:a8:d7:da:ad:aa:
         f4:98:6a:a9:b2:bd:2c:9f:d1:bb:82:2a:14:23:4c:9a:54:e5:
         fe:ae:b4:fa:eb:6a:75:4e:d4:c2:54:92:cc:42:c8:ea:bd:2f:
         c5:3d:6a:2a:da:24:f1:d5:5c:c7:c0:f7:c0:4f:4d:89:6b:cf:
         b4:be:84:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:04:32 2025 by rpki-client