This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91F6023CDB1111F087A9F4EADAE4EC9C.roa
File:                     91F6023CDB1111F087A9F4EADAE4EC9C.roa (raw, json)
Hash identifier:          KjvIcYVVjgYEYrGfILAhGSfhZCzdJEP4KXVjnHlUmdc=
Subject key identifier:   5F:AF:49:90:AC:06:B1:95:D5:55:62:ED:DA:2C:21:9C:65:6A:49:77
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AEAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91F6023CDB1111F087A9F4EADAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 06:28:16 +0000
ROA not before:           Wed 17 Dec 2025 06:28:11 +0000
ROA not after:            Mon 05 Jan 2026 06:28:11 +0000
asID:                     273937
IP address blocks:        154.88.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110252 (0x1aeac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 06:28:11 2025 GMT
            Not After : Jan  5 06:28:11 2026 GMT
        Subject: CN=69424d80-1f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bf:8d:f9:f9:61:92:fd:6c:bf:0a:bc:13:5d:
                    a9:d2:96:c5:63:8d:de:da:22:96:11:82:27:0b:ab:
                    85:54:34:24:ea:e1:61:dc:74:cb:f7:cd:95:54:4f:
                    77:db:9e:d8:83:c7:73:a6:a0:2e:4d:5a:42:6e:2e:
                    de:9b:bf:bc:cb:f4:b2:d2:f8:c3:67:92:c8:de:74:
                    91:74:94:c8:63:be:4e:a6:e6:4f:9b:e9:a4:cb:5f:
                    49:d0:44:45:08:f6:a2:94:ec:23:82:60:71:4c:0b:
                    67:a9:6c:67:4a:02:59:91:a5:7c:8a:b7:12:41:8c:
                    c7:88:ff:ef:a7:ad:8e:2d:bc:11:62:b0:cb:de:a5:
                    4f:d4:d9:ac:82:33:a4:af:f1:1f:4a:b9:90:cf:62:
                    cc:84:80:c9:a7:d7:b8:eb:fb:25:1e:9a:f8:21:06:
                    2f:54:1e:92:ac:bb:b0:54:4a:b4:99:af:d9:aa:42:
                    a9:9d:6e:98:4d:fc:1f:48:bc:4b:dd:07:ae:b4:21:
                    c5:c0:a7:0d:a6:ae:90:dd:41:08:bd:5c:ed:d6:df:
                    2c:d1:da:c5:27:4b:0f:0c:48:e9:ca:2b:e4:dd:2f:
                    bf:4f:7b:7e:bd:ac:6d:e4:5f:cb:cf:be:6e:dc:85:
                    0b:79:82:ed:7a:df:67:65:cf:83:e9:06:0e:4a:18:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AF:49:90:AC:06:B1:95:D5:55:62:ED:DA:2C:21:9C:65:6A:49:77
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91F6023CDB1111F087A9F4EADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:4c:37:9a:11:ce:11:fe:59:d1:71:e6:22:a1:5f:ae:39:c3:
         95:11:de:9b:34:2d:ea:51:15:0a:a8:26:2b:f2:76:e8:cf:b0:
         b9:e8:59:42:af:c2:4f:26:b2:7c:4e:60:31:c7:8f:53:26:31:
         6a:dd:eb:ce:f3:6f:52:cf:d1:b2:29:76:3c:83:e1:9a:c2:a0:
         55:82:67:e0:12:9e:fe:04:81:b1:4d:30:4b:1a:62:1e:dc:35:
         18:5b:0d:64:a2:0b:93:bc:d6:55:d7:dd:0c:2a:38:6a:b9:40:
         1b:ff:a1:82:39:ab:c9:ec:74:a9:65:6d:1a:9b:60:10:19:2a:
         da:1f:22:8b:18:12:68:f9:5b:cd:7c:1b:15:8f:32:37:67:02:
         3d:0f:c7:2e:94:69:52:b7:42:74:68:5d:6a:5a:6c:72:a4:8e:
         2d:45:23:92:c1:3b:d7:6e:47:da:25:33:59:12:77:a8:99:4d:
         b7:2d:61:d5:6f:c2:e7:e9:da:a1:ee:03:e1:3c:24:11:d8:6d:
         ac:65:f5:e3:1e:50:2c:9a:40:3c:c6:b2:38:5b:c0:d7:e7:bb:
         99:f9:e8:be:41:56:a7:df:91:29:51:61:c2:18:e8:69:a1:51:
         ba:7d:f9:52:5f:8e:c8:68:56:37:20:9c:db:47:17:f4:10:12:
         51:91:a1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:03:17 2025 by rpki-client