This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1957E9C6D59E11F0B2FAA0BADAE4EC9C.roa
File:                     1957E9C6D59E11F0B2FAA0BADAE4EC9C.roa (raw, json)
Hash identifier:          EHsqu+9tb2IPHeC7jYF94eDrwcarspWR/pnknu96nbk=
Subject key identifier:   C1:E2:11:CC:5A:2F:03:70:FF:67:EF:0E:C3:2A:FB:BF:5E:29:39:C3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AD75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1957E9C6D59E11F0B2FAA0BADAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 07:59:06 +0000
ROA not before:           Wed 10 Dec 2025 07:59:00 +0000
ROA not after:            Mon 16 Mar 2026 07:59:00 +0000
asID:                     142002
IP address blocks:        154.83.26.0/24 maxlen: 24
                          154.83.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109941 (0x1ad75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 10 07:59:00 2025 GMT
            Not After : Mar 16 07:59:00 2026 GMT
        Subject: CN=6939284a-bcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:d0:6e:17:20:5f:64:6d:04:2d:bd:f4:d2:
                    c0:ba:c5:16:4b:39:32:cc:20:e4:a6:ea:d6:50:36:
                    43:0e:4d:fc:6b:bc:69:fd:91:e6:76:e7:8e:7f:b4:
                    7c:33:96:83:9b:0e:41:36:d2:d2:a1:17:a6:2a:46:
                    0d:89:60:b7:eb:19:3d:18:df:cb:02:00:1c:51:0b:
                    17:71:f1:a6:25:ac:1a:29:37:39:d3:35:a8:77:3d:
                    7f:44:d8:a1:2c:46:3e:c8:20:04:12:b4:aa:27:52:
                    82:b3:ab:3a:01:3f:f3:f9:3d:25:eb:ee:61:8a:bb:
                    73:77:0e:d0:28:82:45:96:47:9b:c5:7d:95:7e:d0:
                    25:55:ce:cb:59:15:33:79:a2:4c:e8:07:2a:f8:7a:
                    8f:c4:3a:03:9d:54:c6:e0:59:61:cb:b8:a7:ce:26:
                    5a:92:24:90:6d:0f:25:f0:5e:7a:98:7c:60:fb:d0:
                    01:7c:5d:8b:ff:3e:1e:7a:4f:7c:88:14:5b:9c:c0:
                    2f:97:11:06:d0:a8:86:35:72:84:f5:d9:8b:67:55:
                    17:95:4d:24:23:59:c0:31:b2:88:11:4a:01:03:da:
                    41:54:ea:30:e9:7f:b4:42:54:03:e8:61:cc:a0:16:
                    ea:c2:74:95:e7:ce:75:a0:af:38:9c:03:57:11:d7:
                    10:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E2:11:CC:5A:2F:03:70:FF:67:EF:0E:C3:2A:FB:BF:5E:29:39:C3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1957E9C6D59E11F0B2FAA0BADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:36:a0:1a:27:ff:f1:2b:5c:c8:8f:16:9d:3d:0a:96:9a:26:
         da:39:88:30:e3:82:d4:e1:55:0e:99:57:bb:7a:69:1d:02:f2:
         03:bd:f0:a3:23:a1:28:d1:5d:5b:6d:51:fb:69:b5:99:e5:c4:
         43:cc:5d:00:e4:64:52:07:56:15:bd:18:df:c7:39:48:08:a5:
         33:fb:f8:78:ea:64:6b:bd:fc:84:5d:44:da:0e:2c:4a:9f:eb:
         39:73:0a:b4:b5:41:e7:f8:4e:64:22:a9:c0:b6:df:af:00:b1:
         5b:9d:94:62:49:cd:97:36:7e:6d:63:a1:a0:8b:7e:57:5e:e3:
         0d:32:41:74:a6:ba:50:55:35:25:30:bd:75:aa:df:ae:f2:89:
         c6:84:d7:2b:bf:38:44:0b:f9:49:65:fa:1e:77:f4:ac:9f:ec:
         1e:53:48:a4:2d:e6:23:9f:35:55:7b:4d:2d:9c:fd:20:8f:75:
         3e:ea:fc:37:ef:f8:1b:fa:ee:d9:39:e7:87:58:65:e9:c2:95:
         56:e7:c3:93:bc:76:fd:39:db:d8:1c:ab:67:d8:3f:f5:99:7e:
         fe:09:2c:eb:d7:c9:2d:87:95:81:30:fa:c0:67:21:fd:98:e5:
         15:fd:42:73:f9:cf:1d:63:8f:d6:71:f5:71:73:df:55:13:a9:
         f4:73:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:47 2025 by rpki-client