This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1AF94D0DCF711F0AB04BAC9DAE4EC9C.roa
File:                     A1AF94D0DCF711F0AB04BAC9DAE4EC9C.roa (raw, json)
Hash identifier:          D99uoCbqmfZ3uKmTzdhUGMPq4WtVtRvEMlcGXwiQdKM=
Subject key identifier:   61:96:7C:83:A7:F5:51:16:39:51:4F:35:2F:91:64:05:67:AC:96:F9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AFAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1AF94D0DCF711F0AB04BAC9DAE4EC9C.roa
Signing time:             Fri 19 Dec 2025 16:27:38 +0000
ROA not before:           Fri 19 Dec 2025 16:27:33 +0000
ROA not after:            Mon 02 Feb 2026 16:27:33 +0000
asID:                     63023
IP address blocks:        154.90.135.0/24 maxlen: 24
                          154.94.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110510 (0x1afae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 19 16:27:33 2025 GMT
            Not After : Feb  2 16:27:33 2026 GMT
        Subject: CN=69457cfa-46d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2a:1c:13:ed:0f:a7:e9:81:38:41:ca:ab:1e:
                    15:00:61:6d:d5:e1:ba:bb:b5:66:ef:6b:03:90:1f:
                    7a:6b:0f:9e:57:82:92:92:f6:89:9c:63:d9:a0:a0:
                    6e:3f:9e:20:97:d0:33:38:0a:27:3e:33:89:08:f2:
                    1d:af:88:e1:f9:cc:02:51:36:ed:a5:d6:f7:07:50:
                    40:9e:13:f8:69:df:40:18:de:48:d8:55:c0:49:52:
                    55:a2:9f:54:26:25:81:22:e9:23:85:fb:01:08:0b:
                    85:01:b6:31:0c:dc:f5:84:5b:b3:76:99:cf:7d:a7:
                    67:14:8c:85:74:8b:75:cb:a5:43:ae:b3:25:ed:4f:
                    c1:a7:93:d7:d4:8e:55:a0:52:9c:61:f5:b6:0b:a4:
                    16:45:84:06:82:ef:29:0e:25:07:3e:d5:69:52:16:
                    38:86:0e:39:5f:36:c1:7c:5a:f4:d6:42:e3:56:cb:
                    b4:b4:7a:2b:4a:0e:b2:56:8f:49:58:b4:d2:a9:f8:
                    71:50:52:8b:ae:62:51:c9:d4:5a:8e:5f:8c:b3:32:
                    89:a6:fd:e0:a6:c5:d9:62:c6:a0:54:e1:7d:38:18:
                    e6:73:bc:01:66:fc:67:cd:00:ca:7c:0e:b1:e3:9b:
                    20:de:bc:ac:b4:57:37:24:37:09:14:12:b3:a0:18:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:96:7C:83:A7:F5:51:16:39:51:4F:35:2F:91:64:05:67:AC:96:F9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1AF94D0DCF711F0AB04BAC9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.135.0/24
                  154.94.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:a4:35:03:dd:f8:ec:d9:19:87:13:57:24:0e:92:55:e1:e7:
         6c:58:dd:32:69:0f:22:39:fb:ec:23:1a:24:15:c2:85:f8:ed:
         7d:83:3f:c4:39:bc:d8:28:3c:6a:16:f2:2d:cd:cd:bd:df:5e:
         5d:8e:cb:71:08:70:d1:35:ea:83:7a:f0:cb:83:1e:01:b6:bf:
         da:e5:aa:da:a7:56:2a:cc:8e:6c:5d:00:4d:91:a8:be:b1:b4:
         5b:2d:13:d4:34:a6:2a:2b:4b:2f:5a:8b:09:24:00:31:5f:d8:
         96:72:e0:c8:b9:fd:6c:a8:a8:d3:c1:81:bc:f6:78:70:c7:03:
         23:e1:c9:c7:ba:b5:36:7c:a9:7f:4f:2f:76:64:35:e6:1f:47:
         fd:3b:b2:ff:5a:d4:93:c4:2c:49:54:22:41:8f:dc:c0:86:d6:
         2a:a6:27:3d:d7:34:1f:22:06:0d:49:39:69:f4:de:66:e8:f1:
         08:c3:8a:85:59:01:cb:ae:e6:10:23:39:d9:f9:32:2c:d7:b8:
         91:f2:1f:86:03:44:72:04:9b:da:7e:30:a8:d8:d3:5a:8a:01:
         2b:db:ef:37:04:7f:33:e8:76:92:69:3e:51:d5:db:2f:ec:5c:
         11:fb:fd:c8:67:01:fb:e2:21:60:f6:2e:5a:c0:47:99:45:37:
         a6:6c:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:21 2025 by rpki-client