This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E459F62EDCD711F0B90B8A86DAE4EC9C.roa
File:                     E459F62EDCD711F0B90B8A86DAE4EC9C.roa (raw, json)
Hash identifier:          Sm2930ATE/aggd4zPhAw32yG8c+nm82iAF6PIQmtUuI=
Subject key identifier:   3D:BF:76:05:5A:E9:F3:3B:67:79:62:96:93:D6:8D:AD:A0:E5:B2:64
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AFA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E459F62EDCD711F0B90B8A86DAE4EC9C.roa
Signing time:             Fri 19 Dec 2025 12:40:26 +0000
ROA not before:           Fri 19 Dec 2025 12:40:21 +0000
ROA not after:            Fri 18 Dec 2026 12:40:21 +0000
asID:                     8796
IP address blocks:        154.205.192.0/19 maxlen: 24
                          154.205.222.0/24 maxlen: 24
                          154.205.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110498 (0x1afa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 19 12:40:21 2025 GMT
            Not After : Dec 18 12:40:21 2026 GMT
        Subject: CN=694547ba-ad9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:16:02:a3:2d:db:cf:e0:70:9c:ee:22:b7:
                    c5:31:1f:a7:30:40:5a:91:5d:91:b2:10:c4:a4:08:
                    ab:c7:93:c4:7c:d2:96:65:78:20:d2:3a:0d:49:02:
                    94:5e:cf:5a:16:28:34:86:51:8c:23:0c:bd:53:6f:
                    3f:21:83:91:48:bb:be:bd:5c:a8:1d:a3:3a:df:16:
                    c0:8f:52:b2:af:90:2d:5d:0a:4b:98:8b:a4:f3:d2:
                    e1:5b:a9:2c:6e:59:18:41:ca:52:10:bf:f5:63:b7:
                    93:67:48:fc:de:9e:22:e1:42:9c:92:40:7f:99:a3:
                    d5:ac:a1:79:f3:f0:4b:ef:f0:0b:f1:b9:ae:fb:c2:
                    cd:39:7e:cc:5a:04:bf:7b:ba:31:02:c2:25:77:21:
                    f5:df:4f:95:ba:a8:a4:3a:b9:7b:9e:6f:72:bd:18:
                    f8:c4:60:95:20:4a:95:81:9a:c4:f5:d6:37:e2:3c:
                    e0:3c:d2:b7:9f:ee:44:c6:95:45:18:3c:62:31:b3:
                    2a:85:0c:e4:90:65:0f:de:02:a5:b1:23:c1:4f:02:
                    96:99:74:84:c6:32:3c:fa:f1:3d:33:5f:cf:2d:40:
                    63:e4:83:d7:e5:69:1d:cb:96:ea:56:d2:2f:c8:09:
                    22:f1:96:fa:90:fe:75:76:ec:6f:25:a2:6e:cf:6c:
                    63:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BF:76:05:5A:E9:F3:3B:67:79:62:96:93:D6:8D:AD:A0:E5:B2:64
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E459F62EDCD711F0B90B8A86DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:1c:af:2c:5e:45:7f:5e:80:d7:1b:37:1f:b0:e1:fc:57:39:
         a0:7b:f5:71:55:1f:93:78:05:d1:d0:f0:84:2b:e0:77:08:8b:
         3f:72:67:50:0f:82:91:b4:38:77:bb:61:41:30:27:c8:c5:e8:
         49:aa:63:0e:02:27:73:cc:7d:79:74:7e:19:03:b6:66:de:a8:
         c9:79:f1:ec:4f:4d:04:9a:44:76:25:04:04:ba:21:37:56:7c:
         86:dd:63:34:22:9d:bb:f9:67:c7:43:44:d3:42:9f:1d:2d:e4:
         97:69:cf:fc:31:87:00:cc:56:5e:19:15:cb:98:52:b3:60:40:
         e6:01:11:67:b7:86:15:1b:7e:df:b9:31:8f:0c:59:43:d4:4d:
         37:8d:0b:3b:4e:f7:45:86:5b:cc:15:ff:12:9b:61:a6:11:d3:
         c2:fc:7d:ba:88:f5:7d:6a:a2:51:8e:8a:3a:9f:e0:46:40:cd:
         16:c7:22:94:7e:4d:9d:ab:f7:ed:f9:95:6c:39:2b:1c:de:fd:
         4f:e3:98:0c:5f:8f:01:ba:12:3c:ef:5e:e8:1c:1e:bb:01:4b:
         27:b4:53:90:46:16:cd:a7:20:39:51:0e:b9:9a:49:2f:34:09:
         0e:29:2d:d4:5b:90:7a:b4:98:ce:41:71:49:ea:91:ba:a2:15:
         7a:6f:c9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:17 2025 by rpki-client