This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F25F2276DC1411F0BAE319BEDAE4EC9C.roa
File:                     F25F2276DC1411F0BAE319BEDAE4EC9C.roa (raw, json)
Hash identifier:          ojdGUZvm9VUw+40wH1VajszQAGdE7r1CfMaikAu8fLg=
Subject key identifier:   BC:EB:4B:26:97:50:D1:D8:9B:5C:E4:57:BB:2A:A0:31:5B:F2:F8:47
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F25F2276DC1411F0BAE319BEDAE4EC9C.roa
Signing time:             Thu 18 Dec 2025 13:24:57 +0000
ROA not before:           Thu 18 Dec 2025 13:24:53 +0000
ROA not after:            Fri 09 Jan 2026 13:24:53 +0000
asID:                     141883
IP address blocks:        154.86.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110457 (0x1af79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 18 13:24:53 2025 GMT
            Not After : Jan  9 13:24:53 2026 GMT
        Subject: CN=694400a9-880d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:d6:03:c8:d8:96:04:e9:6f:9c:16:d0:92:
                    f0:07:a6:01:a5:08:6a:6a:b6:f2:70:44:17:98:a0:
                    3e:6a:27:b4:b2:9a:da:b2:26:f4:ab:ed:13:fc:eb:
                    07:26:1e:eb:40:b7:a7:43:c4:d3:5c:c2:8b:84:ac:
                    09:dc:c5:5f:54:8c:ad:5c:aa:49:a2:f0:f7:ad:95:
                    e9:bb:28:60:9c:5b:33:2e:bd:22:87:6b:0a:b2:fc:
                    cf:6e:28:f0:6f:92:70:d4:38:19:66:d4:c6:dc:b7:
                    f5:ff:10:3b:38:77:b2:31:d6:69:6a:0b:3e:f5:91:
                    32:ae:53:28:ed:4c:21:7d:4d:40:71:cc:ec:eb:5f:
                    fa:0f:f8:a6:3a:eb:16:96:69:92:25:fd:f5:6d:f6:
                    9c:db:59:2b:54:62:f2:66:1c:61:29:9c:0e:29:26:
                    58:bf:6f:74:f5:94:0f:d9:d0:71:60:14:4d:43:48:
                    5f:cb:3e:1f:af:e8:7e:37:a9:83:1e:34:4d:52:31:
                    91:53:20:52:c5:a0:c2:80:59:f0:da:a7:31:02:ba:
                    01:d4:b5:d6:ff:11:bf:0b:d5:1d:06:82:2e:13:de:
                    c1:92:33:05:a0:63:88:78:2d:ee:c9:ab:72:3e:e7:
                    57:bb:fd:fd:1d:46:a7:e6:f7:2a:6c:b5:f3:ad:fa:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EB:4B:26:97:50:D1:D8:9B:5C:E4:57:BB:2A:A0:31:5B:F2:F8:47
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F25F2276DC1411F0BAE319BEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:e4:ec:aa:4a:98:92:d1:6c:a1:cf:05:c4:49:64:53:ac:c4:
         17:56:c3:1e:71:ca:9c:da:f9:ba:97:d8:29:04:e2:e5:67:dc:
         e9:70:66:d0:20:b5:a4:2b:37:e8:8e:f0:3e:8d:0e:b6:00:4b:
         fe:6c:25:1d:d1:e1:a9:cc:a5:3d:b1:ff:0d:08:f7:a0:2c:ec:
         a1:34:22:01:66:af:cc:9d:fe:9f:01:cb:ac:b9:bb:58:a1:b4:
         7a:16:44:f6:da:b0:2b:5b:7e:cb:ab:29:01:36:c8:43:d3:3d:
         c8:3f:27:89:42:3b:75:50:06:f2:cf:c1:5c:fe:a5:01:49:ec:
         65:60:f6:4f:e9:cd:76:66:f9:39:8a:73:13:6b:3d:11:8d:23:
         3e:82:8d:c3:f9:34:7f:57:da:6c:88:3c:a6:03:e7:30:71:d4:
         43:84:ad:95:d4:6a:21:42:24:b3:53:ec:a9:32:e9:31:78:f5:
         3f:87:bc:19:e5:3d:09:9e:e5:ec:4b:66:54:e0:65:65:3d:f0:
         9a:89:b8:f9:76:4c:fa:6d:56:22:0d:aa:4d:8f:87:cb:21:1f:
         b2:59:eb:e2:15:e4:1b:b9:9c:55:14:ae:39:3f:93:86:29:2a:
         dc:d5:09:14:52:aa:95:56:c1:23:3e:a8:85:df:27:57:8d:83:
         a0:e0:2a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:03:16 2025 by rpki-client