This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DD110AADB3111F08EAC10B2DAE4EC9C.roa
File:                     8DD110AADB3111F08EAC10B2DAE4EC9C.roa (raw, json)
Hash identifier:          7MsZUqQkFm3aABa5TtfRhPCi9iFhdPY/DyLzF/VqUr4=
Subject key identifier:   B1:A5:2E:07:C8:F5:B5:F9:74:69:DC:28:3B:A5:42:63:DE:2B:CD:46
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AED4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DD110AADB3111F08EAC10B2DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 10:17:13 +0000
ROA not before:           Wed 17 Dec 2025 10:17:08 +0000
ROA not after:            Sat 24 Jan 2026 10:17:08 +0000
asID:                     13335
IP address blocks:        154.90.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110292 (0x1aed4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 10:17:08 2025 GMT
            Not After : Jan 24 10:17:08 2026 GMT
        Subject: CN=69428329-f71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:25:cf:0e:c9:e0:a0:26:6a:cb:cb:76:b9:
                    ad:00:37:54:7d:5d:4f:9d:a0:4f:58:05:88:89:49:
                    7e:7b:ba:84:df:2f:aa:62:db:0f:ad:c3:39:01:c4:
                    f7:c9:9c:88:64:7c:74:99:f7:bb:08:30:6f:71:1d:
                    76:08:30:2d:7d:59:0e:c0:81:97:be:ac:0a:3e:69:
                    62:d4:51:aa:f7:ba:71:60:b5:c2:03:99:e6:25:fb:
                    d3:ac:e3:d4:90:2c:dd:10:e1:1b:67:b3:11:94:8b:
                    1e:ed:0b:23:d5:3c:54:37:7f:d7:62:e3:b2:02:cb:
                    9b:d6:c5:e3:86:96:43:3e:96:1e:ff:c6:b1:11:17:
                    ae:5b:dd:24:a0:f4:0f:85:9e:ef:bf:20:f0:17:6f:
                    3b:8e:44:ca:6b:a7:b2:dc:d2:20:cb:1d:6f:8c:73:
                    48:fe:27:3c:02:13:61:fd:2f:0d:66:e8:ed:64:e7:
                    ae:d6:aa:62:b6:49:bc:41:cb:fc:d2:eb:c6:a9:ed:
                    b7:06:c9:d3:20:0a:3b:3a:d4:28:c3:83:b6:ed:3b:
                    26:ec:b5:97:49:e1:98:2a:b9:12:ff:93:96:76:b9:
                    ef:e1:06:98:17:c2:2d:33:65:2f:5e:38:02:9a:25:
                    f7:90:86:83:14:d5:9a:26:24:5e:3a:80:67:f7:5b:
                    2b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A5:2E:07:C8:F5:B5:F9:74:69:DC:28:3B:A5:42:63:DE:2B:CD:46
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DD110AADB3111F08EAC10B2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:d2:02:82:27:9b:3b:77:24:7d:19:4f:ca:50:40:e6:c8:a4:
         27:74:bc:12:26:85:a5:58:21:2a:fe:af:fe:0f:36:a6:0e:ff:
         98:84:2f:57:42:c6:8d:4e:a5:63:a8:9c:79:60:8d:23:ac:81:
         01:30:22:f9:37:66:8b:cd:85:c2:40:1f:d9:a2:e8:8d:7b:fe:
         10:18:b8:8e:52:54:b9:3d:2d:c7:a7:0c:6e:e9:67:1d:2a:eb:
         85:39:2a:a9:7a:80:53:81:8d:82:6f:cd:ed:73:bb:43:90:27:
         21:b7:87:b5:43:67:1e:e1:b2:c0:50:d1:57:01:79:d5:2a:af:
         c2:2c:58:cc:0a:77:d7:28:95:63:d8:3e:a7:d1:a0:ae:e5:2a:
         de:0f:22:97:df:83:7a:8f:a9:16:bd:d2:79:f8:16:8b:aa:69:
         63:36:f9:d2:fa:0a:55:05:d4:48:7c:4b:e5:a3:a5:8e:0b:21:
         57:b3:6f:6a:37:62:3d:4c:d6:4f:23:7a:10:e8:f9:ed:c0:c8:
         01:04:cc:81:13:fd:f8:8e:00:6f:2d:dd:08:a4:92:3d:0f:21:
         19:71:2a:17:54:a7:bc:59:4d:6f:29:c1:b3:d9:ba:6d:7b:fe:
         09:f8:f6:2f:be:df:f7:61:09:d2:9a:6b:57:94:37:79:21:f0:
         ab:05:9a:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAa7UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjE3MTAxNzA4WhcNMjYwMTI0MTAxNzA4WjAYMRYw
FAYDVQQDEw02OTQyODMyOS1mNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxt0lzw7J4KAmasvLdrmtADdUfV1PnaBPWAWIiUl+e7qE3y+qYtsPrcM5
AcT3yZyIZHx0mfe7CDBvcR12CDAtfVkOwIGXvqwKPmli1FGq97pxYLXCA5nmJfvT
rOPUkCzdEOEbZ7MRlIse7Qsj1TxUN3/XYuOyAsub1sXjhpZDPpYe/8axEReuW90k
oPQPhZ7vvyDwF287jkTKa6ey3NIgyx1vjHNI/ic8AhNh/S8NZujtZOeu1qpitkm8
Qcv80uvGqe23BsnTIAo7OtQow4O27Tsm7LWXSeGYKrkS/5OWdrnv4QaYF8ItM2Uv
XjgCmiX3kIaDFNWaJiReOoBn91sr8wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLGl
LgfI9bX5dGncKDulQmPeK81GMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84REQxMTBBQURCMzExMUYwOEVBQzEwQjJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlpGMA0GCSqGSIb3DQEB
CwUAA4IBAQCV0gKCJ5s7dyR9GU/KUEDmyKQndLwSJoWlWCEq/q/+DzamDv+YhC9X
QsaNTqVjqJx5YI0jrIEBMCL5N2aLzYXCQB/ZouiNe/4QGLiOUlS5PS3Hpwxu6Wcd
KuuFOSqpeoBTgY2Cb83tc7tDkCcht4e1Q2ce4bLAUNFXAXnVKq/CLFjMCnfXKJVj
2D6n0aCu5SreDyKX34N6j6kWvdJ5+BaLqmljNvnS+gpVBdRIfEvlo6WOCyFXs29q
N2I9TNZPI3oQ6PntwMgBBMyBE/34jgBvLd0IpJI9DyEZcSoXVKe8WU1vKcGz2bpt
e/4J+PYvvt/3YQnSmmtXlDd5IfCrBZqf
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:37 2025 by rpki-client