This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3BBC890DB7311F086E810C7DAE4EC9C.roa
File:                     B3BBC890DB7311F086E810C7DAE4EC9C.roa (raw, json)
Hash identifier:          8mnNNmqeS6xjDoy9QnQU5ze8nvgAGCXAeZYJCmLnQjE=
Subject key identifier:   D1:19:9D:11:22:D8:BD:29:75:1A:8B:0C:92:69:80:30:B8:2B:C9:C9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3BBC890DB7311F086E810C7DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 18:10:43 +0000
ROA not before:           Wed 17 Dec 2025 18:10:38 +0000
ROA not after:            Sat 27 Dec 2025 18:10:38 +0000
asID:                     8796
IP address blocks:        154.205.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110369 (0x1af21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 18:10:38 2025 GMT
            Not After : Dec 27 18:10:38 2025 GMT
        Subject: CN=6942f223-71ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0b:04:d8:cb:5b:86:72:2b:72:00:6e:7d:7f:
                    32:d6:66:f9:0a:e2:10:a5:ed:ee:3d:23:32:8a:0a:
                    cf:03:b9:98:f4:0e:36:3b:2f:bd:12:8f:85:68:cf:
                    c3:08:9d:4e:2a:69:27:c1:05:46:6b:1e:b0:00:39:
                    1f:cc:32:89:69:7a:46:4c:44:1c:c4:4b:fe:42:fa:
                    cb:d4:7a:6f:5d:c8:46:e5:5b:59:c3:0b:bb:41:83:
                    da:2a:2b:bc:71:d6:6d:cc:ce:02:e4:7c:c8:86:d7:
                    64:14:ec:0d:ba:a9:6b:35:4a:59:2c:21:27:7a:4d:
                    29:73:b7:78:95:d3:2c:88:8b:88:8d:1d:3a:d2:8c:
                    b2:9b:41:a6:75:f2:72:11:49:52:f3:77:1f:82:bf:
                    c2:fd:5c:a6:bb:90:7d:b0:a3:8d:79:91:5f:7f:e3:
                    f1:91:6d:49:46:3d:0f:8d:b0:1f:a1:63:53:8d:98:
                    b0:a2:d2:0d:ed:d2:9a:c9:5b:66:06:c5:5e:10:37:
                    82:c0:0f:e1:92:fd:42:02:94:5d:d0:46:52:6a:56:
                    34:73:b0:0c:fe:31:c8:30:23:5c:7a:79:d8:b3:dd:
                    40:06:bd:e7:b7:d5:81:9a:cd:45:87:d1:eb:6e:1a:
                    20:76:e1:88:5c:20:82:01:a1:c0:e4:2d:b6:2f:54:
                    96:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:19:9D:11:22:D8:BD:29:75:1A:8B:0C:92:69:80:30:B8:2B:C9:C9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3BBC890DB7311F086E810C7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2e:84:6e:77:0a:d3:86:08:b5:9d:0d:90:9d:17:f9:02:db:e2:
         41:72:fa:e3:0b:e4:8c:6a:f7:00:2f:58:bd:5d:e3:d0:11:48:
         68:c5:89:b6:21:b8:4c:df:be:11:ee:2a:42:36:4f:7d:62:85:
         f7:90:b8:80:53:14:ad:49:44:63:e4:81:3a:73:49:63:2d:68:
         07:aa:31:64:85:16:bf:db:ed:01:b3:2d:9c:c1:51:7e:2f:e8:
         30:97:b7:30:da:74:14:ef:ab:c8:fb:af:09:98:e6:e0:81:00:
         24:21:dc:19:d6:4b:a4:45:88:f8:07:c4:39:39:e0:ce:ac:b5:
         ba:bf:f1:b3:15:11:e7:98:e4:e1:73:8f:46:98:45:3b:f4:76:
         be:30:f6:24:8b:a2:05:07:70:55:dc:e6:0c:b0:68:da:e5:60:
         d4:7e:0f:c8:7f:1a:34:12:76:b3:85:0b:8a:53:4f:4a:6a:1b:
         75:22:1f:18:ee:9c:72:9c:db:7c:7b:54:be:55:4f:f5:9f:aa:
         a1:aa:cc:86:5d:7b:d1:a0:93:d3:f2:cd:31:9d:30:44:c1:8f:
         81:47:df:50:ae:3c:e3:31:c3:cc:9d:0a:04:16:67:9d:1a:e1:
         3b:c7:64:ba:1f:d6:1c:7d:0d:81:c0:6c:4b:d2:6b:48:9e:b9:
         59:e9:b1:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAa8hMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjE3MTgxMDM4WhcNMjUxMjI3MTgxMDM4WjAYMRYw
FAYDVQQDEw02OTQyZjIyMy03MWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArgsE2MtbhnIrcgBufX8y1mb5CuIQpe3uPSMyigrPA7mY9A42Oy+9Eo+F
aM/DCJ1OKmknwQVGax6wADkfzDKJaXpGTEQcxEv+QvrL1HpvXchG5VtZwwu7QYPa
Kiu8cdZtzM4C5HzIhtdkFOwNuqlrNUpZLCEnek0pc7d4ldMsiIuIjR060oyym0Gm
dfJyEUlS83cfgr/C/Vymu5B9sKONeZFff+PxkW1JRj0PjbAfoWNTjZiwotIN7dKa
yVtmBsVeEDeCwA/hkv1CApRd0EZSalY0c7AM/jHIMCNcennYs91ABr3nt9WBms1F
h9HrbhogduGIXCCCAaHA5C22L1SWwwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNEZ
nREi2L0pdRqLDJJpgDC4K8nJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CM0JCQzg5MERCNzMxMUYwODZFODEwQzdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFms3AMA0GCSqGSIb3DQEB
CwUAA4IBAQAuhG53CtOGCLWdDZCdF/kC2+JBcvrjC+SMavcAL1i9XePQEUhoxYm2
IbhM374R7ipCNk99YoX3kLiAUxStSURj5IE6c0ljLWgHqjFkhRa/2+0Bsy2cwVF+
L+gwl7cw2nQU76vI+68JmObggQAkIdwZ1kukRYj4B8Q5OeDOrLW6v/GzFRHnmOTh
c49GmEU79Ha+MPYki6IFB3BV3OYMsGja5WDUfg/Ifxo0EnazhQuKU09Kaht1Ih8Y
7pxynNt8e1S+VU/1n6qhqsyGXXvRoJPT8s0xnTBEwY+BR99QrjzjMcPMnQoEFmed
GuE7x2S6H9YcfQ2BwGxL0mtInrlZ6bGB
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:17 2025 by rpki-client