This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC114994D65B11F0A30BF9E2DAE4EC9C.roa
File:                     EC114994D65B11F0A30BF9E2DAE4EC9C.roa (raw, json)
Hash identifier:          7hpIMXKGGTYlJvvih/hGcvWAuro7adjuIw2u30bjZ+8=
Subject key identifier:   30:A4:28:73:86:E2:7B:85:A0:64:54:20:6E:A2:1F:10:DB:E0:74:AA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ADDD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC114994D65B11F0A30BF9E2DAE4EC9C.roa
Signing time:             Thu 11 Dec 2025 06:37:54 +0000
ROA not before:           Thu 11 Dec 2025 06:37:49 +0000
ROA not after:            Sat 17 Jan 2026 06:37:49 +0000
asID:                     214120
IP address blocks:        154.199.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110045 (0x1addd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 11 06:37:49 2025 GMT
            Not After : Jan 17 06:37:49 2026 GMT
        Subject: CN=693a66c2-46a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:51:e3:9f:13:e2:5a:ba:1d:18:c8:3a:43:71:
                    a4:24:3f:61:3c:29:72:10:fa:75:8a:19:3f:ea:42:
                    87:5b:9b:03:2a:dc:bc:e6:dc:40:70:c3:8b:09:4f:
                    cb:8d:33:d0:8d:29:fa:89:0c:04:8a:e5:96:b9:98:
                    76:3d:54:8d:99:d2:c4:5a:bf:ea:63:b0:a9:a7:59:
                    d0:1d:7e:27:53:81:c0:d6:5d:b9:1f:30:6d:a5:d9:
                    af:92:e6:4a:40:49:b4:c0:62:f3:4f:da:41:2f:c6:
                    f9:37:5e:5e:b7:a0:1a:b6:b7:41:6c:90:61:21:aa:
                    c6:d4:70:2a:4c:cd:60:36:5e:87:f2:57:70:0e:eb:
                    91:c2:84:af:1e:ae:f7:de:5e:b3:da:94:8a:e1:66:
                    92:33:55:46:b7:16:78:4d:49:13:69:8a:de:b7:67:
                    b9:33:25:cf:2f:ab:f1:0e:f9:aa:a3:f0:8f:ce:38:
                    78:3e:2c:1a:8b:c0:33:49:3a:18:17:7c:19:ef:7c:
                    b4:f4:f0:9e:03:e2:46:97:0b:d5:3c:15:46:7d:65:
                    32:0d:53:ed:97:24:fe:23:9e:3c:4e:7b:f0:8e:98:
                    aa:2e:df:6a:a6:56:a3:7e:13:5d:2c:47:6d:f6:21:
                    b4:39:7e:48:de:bf:12:9a:11:5c:2b:a5:5e:0c:ab:
                    cc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A4:28:73:86:E2:7B:85:A0:64:54:20:6E:A2:1F:10:DB:E0:74:AA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC114994D65B11F0A30BF9E2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:27:e9:62:be:42:bc:7d:9d:1c:27:56:cb:17:d6:5f:97:69:
         af:9d:20:1f:89:a2:7b:0b:07:56:06:bb:d1:3a:d1:18:b4:12:
         9a:36:bf:f1:98:00:3c:ec:77:08:63:17:bb:7a:c5:57:1f:cd:
         1c:21:16:08:ee:3f:03:a4:e6:bb:c8:fd:6b:ed:15:4c:14:c3:
         3e:db:b7:e2:71:9a:da:d9:9e:d9:12:07:ba:33:75:77:08:00:
         25:35:4c:34:ce:e4:ef:1b:2c:36:f3:f0:44:3c:52:e7:f2:15:
         fa:94:3b:9e:46:b4:a4:08:e2:e4:91:31:39:1d:fd:5a:6e:fd:
         a7:d2:1b:e9:15:ba:af:aa:92:79:4b:d2:f8:ed:03:87:27:c6:
         16:2f:48:a5:89:c8:33:4d:2a:19:1f:61:f7:80:26:9b:60:9f:
         2a:5f:29:e6:1a:50:2e:d8:e6:5f:ae:09:4f:c8:25:78:00:dc:
         be:91:d2:d0:e4:fd:1b:66:c5:b2:86:91:16:5e:38:2e:fc:d0:
         64:12:9f:f1:8b:20:5d:ff:a8:74:bf:f2:a2:b6:d7:1a:a7:d0:
         32:f9:95:f5:f2:8d:72:1e:81:9a:3a:85:a3:8a:f0:7f:a5:dd:
         53:eb:1a:c9:49:4f:3d:be:ba:00:29:c6:16:5d:4a:3d:c2:8d:
         67:ee:50:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:21 2025 by rpki-client