This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A29CCCEDB6911F09C5A2988DAE4EC9C.roa
File:                     4A29CCCEDB6911F09C5A2988DAE4EC9C.roa (raw, json)
Hash identifier:          Jlx2lq8+LvTcwKKFo9mxU0rBZycqW7CPfUBi5p48HSQ=
Subject key identifier:   EA:59:48:9D:1E:CB:B9:05:5B:8C:23:67:CF:91:25:DB:B6:DD:12:D4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A29CCCEDB6911F09C5A2988DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 16:56:11 +0000
ROA not before:           Wed 17 Dec 2025 16:56:06 +0000
ROA not after:            Sat 27 Dec 2025 16:56:06 +0000
asID:                     141883
IP address blocks:        154.86.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110357 (0x1af15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 16:56:06 2025 GMT
            Not After : Dec 27 16:56:06 2025 GMT
        Subject: CN=6942e0ab-6e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:e1:fc:bf:e3:1b:74:34:49:d8:dd:c5:06:
                    a6:bd:67:b2:18:4a:18:15:99:20:76:40:a3:a0:c9:
                    de:05:10:16:c5:2c:6e:a0:96:79:db:b1:4c:98:fb:
                    78:2b:f4:2d:57:89:35:4d:88:3c:ba:53:88:4a:54:
                    ec:cb:8d:f5:f7:77:9e:96:16:15:1a:37:2e:23:c9:
                    7e:31:81:93:a9:6a:29:aa:bf:ff:59:6b:b7:26:ba:
                    79:12:a7:cc:dc:59:6e:c1:e0:1b:80:42:82:67:5a:
                    85:d3:d6:c3:2c:04:8b:0f:fc:2b:b3:21:36:74:59:
                    2f:a5:73:40:69:fc:11:62:72:0e:b3:75:42:0e:13:
                    87:93:2d:d1:b2:4a:07:73:d4:3f:66:90:87:af:9b:
                    07:13:1d:64:5c:02:17:3f:30:9a:45:83:5b:c8:38:
                    a4:d3:06:b7:5e:39:37:63:32:8c:c6:40:09:c9:3e:
                    c9:89:0a:bc:4e:fc:6b:d3:b2:39:61:c3:81:78:89:
                    ee:50:4d:0b:fd:1d:c9:5f:0f:65:9b:24:d3:36:7c:
                    e0:a8:71:37:60:22:ce:8a:fb:aa:ca:0d:58:57:4d:
                    bb:9d:46:80:58:31:38:d7:23:cf:00:2e:ad:4c:89:
                    cc:0c:5a:1c:04:b1:c0:49:c3:70:04:13:29:fa:72:
                    18:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:59:48:9D:1E:CB:B9:05:5B:8C:23:67:CF:91:25:DB:B6:DD:12:D4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A29CCCEDB6911F09C5A2988DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:40:df:58:ff:be:47:59:cc:be:57:d2:fe:3e:5f:30:a3:77:
         64:34:a1:c3:b6:a1:a1:b9:91:bc:52:e5:ae:e0:65:b5:c8:c5:
         ad:11:fc:29:91:92:7a:9c:a8:af:37:b8:a3:c1:ed:a5:0b:89:
         ac:42:ff:4e:ad:85:2b:9d:7b:4d:fc:aa:d0:0b:d5:ee:e1:da:
         f5:60:9b:03:ec:49:3d:26:0a:5c:cb:0f:7d:1b:80:ac:2a:60:
         69:16:09:13:0c:3e:e0:77:75:90:26:b4:1f:f1:94:de:3d:fb:
         13:da:2b:3e:e0:e3:9b:26:69:44:bd:86:6c:a8:a8:77:44:b9:
         a5:65:91:f5:6c:41:1c:58:f0:d1:e0:e9:60:4e:76:7c:33:c9:
         75:37:83:f7:ee:28:4f:15:cd:c0:99:9f:a5:bf:4e:61:53:60:
         4d:5e:57:e6:67:c1:32:70:6f:e2:c8:1a:95:8f:c4:2e:d7:f4:
         39:17:0e:5d:a6:19:b7:9a:42:7a:13:c9:00:58:06:c5:d2:5f:
         a6:40:9f:14:6e:24:4e:52:02:3a:d1:9a:02:f8:7d:35:11:d6:
         3f:bc:71:47:b4:80:36:18:83:eb:39:60:e5:01:b1:2f:ec:cb:
         e1:63:66:ed:f8:bd:e8:90:45:f1:54:42:e3:57:0c:6a:8f:c9:
         ef:fe:5d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:02:16 2025 by rpki-client