This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC03C7CD59A11F0BFAA01A4DAE4EC9C.roa
File:                     7EC03C7CD59A11F0BFAA01A4DAE4EC9C.roa (raw, json)
Hash identifier:          oV9c8DTuH5CXV84PpIbSBFZV1JmOfO3/iZ3rbgye5wg=
Subject key identifier:   00:23:DC:4A:C3:4D:65:9B:E3:C1:95:0A:29:B5:63:31:80:64:C9:82
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AD73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC03C7CD59A11F0BFAA01A4DAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 07:33:18 +0000
ROA not before:           Wed 10 Dec 2025 07:33:13 +0000
ROA not after:            Tue 30 Dec 2025 07:33:13 +0000
asID:                     153671
IP address blocks:        154.196.128.0/24 maxlen: 24
                          154.196.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109939 (0x1ad73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 10 07:33:13 2025 GMT
            Not After : Dec 30 07:33:13 2025 GMT
        Subject: CN=6939223e-da0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:e0:fd:40:25:20:79:c9:3d:ad:0a:61:e4:
                    06:f5:87:eb:c5:f7:e0:6f:8a:d6:bf:92:f0:65:06:
                    a6:b4:68:64:89:f3:f3:63:3f:c3:b3:48:59:b5:61:
                    2c:0d:c8:d0:45:d8:54:1c:cc:4a:aa:87:fd:da:f1:
                    2a:45:a4:18:a9:b8:3b:ae:5a:fa:d6:37:4b:1a:ac:
                    72:78:ac:00:56:ea:3b:5c:9d:3f:36:83:90:05:e5:
                    c4:f9:d4:eb:9f:9e:ca:94:f9:75:8e:78:22:90:ad:
                    f6:ba:7b:2a:93:e2:4c:9f:d6:ef:04:16:a0:93:9f:
                    52:d2:d3:a0:70:ea:dd:02:fa:a9:05:6b:b7:6a:17:
                    22:e8:e2:2b:4b:e2:83:78:07:94:ae:13:ba:8e:e9:
                    23:34:b0:46:f0:3f:b0:5d:18:b8:8b:e3:5d:32:49:
                    4c:72:9f:96:55:2e:50:36:4f:12:84:93:51:ae:62:
                    de:1c:93:95:3b:27:76:3d:54:c3:46:57:61:8d:d5:
                    03:bc:82:81:54:fd:7e:b5:e4:cd:00:d4:00:49:d6:
                    58:d7:d3:3e:5c:38:61:62:d9:5d:71:4f:cd:da:d2:
                    9f:42:1b:02:79:25:a3:76:ac:82:3f:aa:fd:56:0e:
                    4d:bb:6a:fe:c4:4a:8c:fd:7f:4f:c8:21:ec:e7:59:
                    e6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:23:DC:4A:C3:4D:65:9B:E3:C1:95:0A:29:B5:63:31:80:64:C9:82
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC03C7CD59A11F0BFAA01A4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.128.0/24
                  154.196.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:05:e7:cf:b1:a8:99:bb:e1:16:3c:71:41:0c:39:6f:08:2d:
         13:6c:7b:62:a1:26:2d:03:c8:ca:c6:7d:6e:76:cb:6f:b0:12:
         eb:95:e8:4f:41:d9:de:f9:fa:e6:be:5e:7e:27:1c:3b:b3:07:
         f2:92:f7:07:07:d1:ba:08:80:3f:30:39:16:8f:2c:67:c9:e9:
         67:e9:bb:7d:c8:0f:49:32:a1:8f:aa:bb:47:5a:6b:da:cd:0b:
         95:59:3b:5e:6a:43:83:4e:68:90:48:4d:dd:ee:0c:90:58:ec:
         20:21:ac:d6:b7:c3:57:65:49:7e:f9:2d:62:d9:32:ec:c4:04:
         66:69:ca:bd:79:ee:98:ba:a0:8b:e0:e1:db:31:87:27:d1:75:
         9d:c8:82:11:0e:ea:fd:75:ee:e1:0f:06:71:71:1b:fa:ca:6b:
         ce:41:23:8c:d5:9f:d4:4d:3c:40:8c:f0:1e:eb:ec:9f:85:28:
         51:fc:a4:f5:1b:ff:fa:d5:ec:d5:72:22:d0:d0:1d:eb:7d:8f:
         d5:49:19:75:f4:56:4d:06:a1:1a:c4:18:e5:7c:d4:ed:c8:50:
         ab:e9:f2:8c:df:9e:9d:f9:a6:01:24:72:b2:dc:ac:54:f3:42:
         c0:b1:85:45:f4:aa:e9:2f:e1:a5:3f:33:0a:cb:ff:d5:f8:af:
         3c:01:e9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:50 2025 by rpki-client