This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B48A5B20DCF811F08AF606D0DAE4EC9C.roa
File:                     B48A5B20DCF811F08AF606D0DAE4EC9C.roa (raw, json)
Hash identifier:          5GZ40NuF650Pk2QhueV+yWZT37Zu7rhO8iFeCt9tjks=
Subject key identifier:   69:8E:93:9A:9D:58:D2:90:E3:B3:B2:22:22:79:49:35:C7:F1:C3:B9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AFB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B48A5B20DCF811F08AF606D0DAE4EC9C.roa
Signing time:             Fri 19 Dec 2025 16:35:19 +0000
ROA not before:           Fri 19 Dec 2025 16:35:14 +0000
ROA not after:            Tue 03 Feb 2026 16:35:14 +0000
asID:                     63023
IP address blocks:        154.222.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110512 (0x1afb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 19 16:35:14 2025 GMT
            Not After : Feb  3 16:35:14 2026 GMT
        Subject: CN=69457ec7-4a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:75:99:a3:05:e0:b1:1f:cb:33:ab:1e:c5:55:
                    c9:6a:7a:96:2e:ea:7b:1d:3f:9f:84:9e:ff:ba:e5:
                    e8:c1:f6:3e:49:7f:67:20:74:b2:fd:c7:3e:b1:d5:
                    7d:49:35:c8:bf:cd:6e:ad:2f:dd:85:45:5f:e9:0f:
                    80:e6:ee:35:81:aa:6d:f9:58:7f:5e:d0:b1:6a:84:
                    80:2d:31:7e:30:b3:02:ac:6b:00:29:4f:af:cc:7c:
                    1b:8b:14:43:bf:2d:64:8a:d5:7b:8e:eb:ae:fc:0d:
                    61:00:19:00:f9:35:0c:0a:5f:18:c1:e8:92:fe:5e:
                    63:6f:fb:24:43:3e:02:b8:e4:3b:b6:cb:0f:0b:3c:
                    03:c2:83:0a:ac:ac:da:d3:f3:9c:12:ef:35:1c:42:
                    0a:32:6f:61:76:5d:6e:66:e2:8e:4f:5c:02:8c:bf:
                    9b:7e:1c:c7:73:83:ba:20:b6:e8:9e:ea:39:cf:e6:
                    75:90:00:e1:e9:ba:81:6d:f2:9b:47:fb:87:4d:ae:
                    d4:01:30:21:de:23:4c:a0:15:69:29:43:48:7c:60:
                    b4:fb:f8:25:4d:38:04:54:43:99:aa:b4:8b:b1:62:
                    80:ef:c3:ad:5c:e8:21:ad:02:74:43:39:dd:b1:0d:
                    6a:e3:0a:cb:96:df:60:c2:93:c0:58:c9:57:48:a2:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8E:93:9A:9D:58:D2:90:E3:B3:B2:22:22:79:49:35:C7:F1:C3:B9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B48A5B20DCF811F08AF606D0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:1b:e0:c5:e3:bb:f7:61:74:17:50:3c:09:3b:37:cb:ea:99:
         1b:54:01:d2:e6:20:45:ed:94:2b:fb:98:03:db:f6:5b:0e:61:
         33:38:59:71:1b:19:58:09:30:c1:74:49:4d:c9:0e:b4:26:2e:
         d5:93:a6:08:17:a0:63:09:f7:b8:92:fc:31:7d:c4:a4:0f:ed:
         41:c0:f8:4f:3b:ce:a3:9b:18:d1:23:18:1b:a2:8b:e3:58:ba:
         0c:5a:94:70:ef:e2:f0:ad:9b:7e:67:ff:d0:f3:0c:78:ba:92:
         e6:c9:4a:1a:5d:4f:39:a4:63:d8:f5:3b:6a:6b:e6:ed:55:6e:
         16:e1:3f:e3:01:db:94:b5:6e:ed:ae:75:d7:97:02:0a:99:03:
         7e:a0:a5:75:59:ed:65:10:78:83:ae:31:7a:4a:dc:dc:37:1e:
         4c:5e:83:96:ca:5a:37:7a:e2:e1:db:d9:d3:73:36:3e:a9:d8:
         1a:74:f6:bf:1d:0f:b4:97:f3:7e:56:7f:cd:b2:c4:3f:71:9d:
         e6:3d:72:fd:e6:c2:43:ff:9f:a5:14:cd:c7:d8:f2:ec:d0:d4:
         bd:4c:a9:4c:84:7a:54:5b:59:5e:d6:f7:94:af:46:71:52:c5:
         99:9c:21:07:bb:ac:8b:e0:ff:78:cc:99:3e:70:3b:bc:4b:98:
         fe:8b:48:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:45 2025 by rpki-client