This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D68A52BCDA6311F08D59EEA7DAE4EC9C.roa
File:                     D68A52BCDA6311F08D59EEA7DAE4EC9C.roa (raw, json)
Hash identifier:          aiF9Mf0LaZlZuciC0pSbVKZYnPyXLvSodPmHCXrB0uk=
Subject key identifier:   E3:88:5B:6A:27:37:B7:DF:D1:25:B3:8D:8D:08:56:57:C3:32:EF:EC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AE72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D68A52BCDA6311F08D59EEA7DAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 09:44:39 +0000
ROA not before:           Tue 16 Dec 2025 09:44:34 +0000
ROA not after:            Sat 21 Mar 2026 09:44:34 +0000
asID:                     209242
IP address blocks:        154.198.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110194 (0x1ae72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 16 09:44:34 2025 GMT
            Not After : Mar 21 09:44:34 2026 GMT
        Subject: CN=69412a07-453a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:d5:32:d2:fc:6f:36:bb:cf:82:72:94:b7:
                    42:c9:06:9a:3e:f1:fb:79:b4:ae:cf:52:49:8d:dd:
                    94:d0:e8:6e:31:11:3c:bd:34:1d:65:b1:4a:87:35:
                    69:d5:6a:37:cd:23:06:4d:ae:2f:da:cf:40:c5:af:
                    7b:e6:a4:a8:94:be:06:0f:64:38:b7:26:45:25:69:
                    89:f3:8a:76:73:3c:b7:b9:0e:3b:fc:f5:55:3b:71:
                    ba:18:ac:e7:9e:0d:78:d1:cd:27:3a:04:6f:c7:57:
                    49:ea:13:bf:33:b1:1f:9f:36:18:2a:6f:5f:bf:b1:
                    e6:4a:67:74:6c:98:66:a3:f6:ee:a9:9d:4a:27:80:
                    90:be:d3:fd:41:bf:d4:19:31:a1:91:da:37:a0:0a:
                    5b:8e:27:7e:35:5f:3e:31:58:4d:6c:07:f8:02:de:
                    31:f3:96:e1:77:b4:53:24:b0:78:ce:d8:93:9e:29:
                    da:fe:02:71:d7:45:ef:e4:24:e0:3b:43:ce:97:06:
                    60:b2:d3:d6:7b:df:7e:1f:39:e9:26:63:a1:49:0f:
                    f9:80:02:99:f7:a9:34:7b:a9:9b:84:27:5f:b7:f6:
                    28:5c:6e:73:c6:d5:9f:9f:c6:bd:8b:bf:dc:41:28:
                    4d:2e:7e:c4:4e:30:1b:e0:84:a3:49:f8:f7:3a:1c:
                    5c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:88:5B:6A:27:37:B7:DF:D1:25:B3:8D:8D:08:56:57:C3:32:EF:EC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D68A52BCDA6311F08D59EEA7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:0b:da:d1:1a:2e:c5:26:34:08:f9:db:ca:82:d0:40:17:a7:
         b1:83:54:85:7f:bc:95:d7:95:22:11:8d:6d:9a:73:2d:d4:73:
         d7:c6:12:38:07:12:2d:8b:9d:64:a5:90:7e:ea:c7:27:dd:f9:
         d4:8b:ce:5e:2a:88:b5:63:2b:d1:4b:ab:ea:96:92:e1:0d:c1:
         9c:d0:b0:eb:7a:ed:e7:a0:fb:b2:d2:12:54:b6:fd:b6:c5:0d:
         34:05:44:b2:a3:06:e9:d3:fd:f2:e1:dd:5a:53:59:e8:48:04:
         1b:da:9e:ba:02:4c:34:15:30:88:db:16:ab:ba:18:5e:83:22:
         e3:fc:65:91:de:8b:47:46:fe:05:1e:af:01:4c:08:c1:87:80:
         a1:8c:bc:5d:f0:c4:3b:91:74:38:7c:d3:13:e7:60:99:1b:9a:
         6d:18:57:4e:88:ee:2f:05:82:61:c9:b4:6c:00:b9:c4:ac:60:
         96:87:82:d1:cd:e9:f9:a7:a6:37:51:33:b1:18:ec:d1:58:08:
         b8:23:42:ef:fe:be:36:72:e2:cf:c7:00:62:52:c4:96:24:7f:
         38:a0:f1:c0:77:df:40:f1:46:ca:6c:f5:1d:28:d8:20:83:01:
         d8:a1:73:32:ec:98:42:bc:7b:f3:5a:af:cf:52:b1:75:f3:f5:
         9d:8d:da:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAa5yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjE2MDk0NDM0WhcNMjYwMzIxMDk0NDM0WjAYMRYw
FAYDVQQDEw02OTQxMmEwNy00NTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwZ7VMtL8bza7z4JylLdCyQaaPvH7ebSuz1JJjd2U0OhuMRE8vTQdZbFK
hzVp1Wo3zSMGTa4v2s9Axa975qSolL4GD2Q4tyZFJWmJ84p2czy3uQ47/PVVO3G6
GKznng140c0nOgRvx1dJ6hO/M7EfnzYYKm9fv7HmSmd0bJhmo/buqZ1KJ4CQvtP9
Qb/UGTGhkdo3oApbjid+NV8+MVhNbAf4At4x85bhd7RTJLB4ztiTnina/gJx10Xv
5CTgO0POlwZgstPWe99+HznpJmOhSQ/5gAKZ96k0e6mbhCdft/YoXG5zxtWfn8a9
i7/cQShNLn7ETjAb4ISjSfj3OhxcxwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOOI
W2onN7ff0SWzjY0IVlfDMu/sMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENjhBNTJCQ0RBNjMxMUYwOEQ1OUVFQTdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsatMA0GCSqGSIb3DQEB
CwUAA4IBAQBXC9rRGi7FJjQI+dvKgtBAF6exg1SFf7yV15UiEY1tmnMt1HPXxhI4
BxIti51kpZB+6scn3fnUi85eKoi1YyvRS6vqlpLhDcGc0LDreu3noPuy0hJUtv22
xQ00BUSyowbp0/3y4d1aU1noSAQb2p66Akw0FTCI2xaruhhegyLj/GWR3otHRv4F
Hq8BTAjBh4ChjLxd8MQ7kXQ4fNMT52CZG5ptGFdOiO4vBYJhybRsALnErGCWh4LR
zen5p6Y3UTOxGOzRWAi4I0Lv/r42cuLPxwBiUsSWJH84oPHAd99A8UbKbPUdKNgg
gwHYoXMy7JhCvHvzWq/PUrF18/Wdjdqp
-----END CERTIFICATE-----
Generated at Fri Dec 19 16:48:59 2025 by rpki-client