This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8424FB2CDA7B11F0922C01BADAE4EC9C.roa
File:                     8424FB2CDA7B11F0922C01BADAE4EC9C.roa (raw, json)
Hash identifier:          ESFqs3E5Jq60TAcPocibSNmnWWGns15qhZBV2t5BJBg=
Subject key identifier:   0C:F1:2B:EE:9B:FD:E2:5B:BA:2E:63:71:49:47:5B:E1:EC:5D:B4:41
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AEA1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8424FB2CDA7B11F0922C01BADAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 12:34:08 +0000
ROA not before:           Tue 16 Dec 2025 12:34:03 +0000
ROA not after:            Sat 27 Dec 2025 12:34:03 +0000
asID:                     54801
IP address blocks:        154.86.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110241 (0x1aea1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 16 12:34:03 2025 GMT
            Not After : Dec 27 12:34:03 2025 GMT
        Subject: CN=694151c0-2db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ab:28:89:07:ee:3c:ca:fa:a1:f9:6d:0f:43:
                    b7:2a:b2:23:a0:33:07:93:f1:dd:ce:6c:23:a5:80:
                    ff:b6:31:85:fb:68:dc:60:eb:97:f7:79:16:23:4a:
                    3c:07:24:8e:cd:1e:2f:2a:e2:41:ca:af:02:fb:da:
                    b9:7a:53:13:e4:35:f7:cd:3d:a3:24:fc:1d:fc:4b:
                    42:5a:28:9c:fc:30:35:c6:4b:48:54:e8:66:d2:30:
                    0b:76:e5:cd:20:f6:16:42:db:a1:d0:08:6c:41:2b:
                    b0:69:2e:8d:f3:64:bb:d0:54:de:92:06:3a:0b:16:
                    af:f4:4d:a9:33:a8:05:b7:b9:a9:58:d5:19:eb:72:
                    d1:ff:c4:eb:9f:bd:d1:34:1f:bd:f8:4c:87:1a:70:
                    4a:6a:0e:6c:f8:f3:3d:1e:61:1a:22:3c:53:ce:41:
                    a1:ac:ae:04:3e:d8:8d:c9:97:1c:e1:34:35:74:25:
                    d2:df:7f:26:ff:bb:9a:bd:2d:2a:6b:43:84:34:74:
                    b3:b3:92:aa:22:ed:ec:5a:a7:ee:8f:69:fa:bd:08:
                    c9:04:c2:d4:a1:a0:1c:65:4e:eb:ea:9f:40:27:62:
                    2e:c3:7f:b2:8c:c3:29:ff:cd:1e:10:df:31:6a:95:
                    8a:e5:ee:95:df:80:16:d4:50:13:2e:b9:0a:0e:07:
                    2d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F1:2B:EE:9B:FD:E2:5B:BA:2E:63:71:49:47:5B:E1:EC:5D:B4:41
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8424FB2CDA7B11F0922C01BADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:fd:fb:7a:19:81:8d:81:36:b0:45:c6:0b:e3:db:66:d2:61:
         4b:f7:0a:ee:80:50:67:b9:15:54:27:65:6b:b3:35:cb:02:5c:
         73:8b:db:c2:fe:28:8d:ea:56:a3:f4:66:65:f3:3f:d2:94:33:
         af:e9:65:f5:c0:97:8c:ca:40:d7:1b:37:7b:af:ab:65:3e:e6:
         52:3c:c2:71:c8:cc:d5:00:b3:c2:c6:ee:39:6b:cb:da:16:4b:
         97:7b:fb:ec:9c:62:87:60:ca:f3:46:82:04:85:90:fb:9e:d9:
         21:d4:bf:56:8f:72:48:70:96:96:d8:95:e3:6e:a0:af:ce:f7:
         fe:f3:9b:88:9d:d0:68:3a:dd:0d:be:9a:3a:da:bc:f1:df:4e:
         a8:10:2c:88:92:e4:e5:82:da:1b:4b:13:43:34:ee:8e:40:27:
         da:be:0a:60:32:1a:57:25:a4:67:df:56:31:6d:5a:c0:30:11:
         06:ee:a0:3b:22:79:0a:32:f5:f3:6d:79:fc:ab:73:78:0b:d6:
         13:eb:4d:ee:e7:44:86:a6:78:1e:51:cc:d6:76:14:20:39:84:
         b8:e5:f3:d8:85:9b:0b:ee:f5:dc:c1:56:4a:30:8e:fd:cd:d3:
         6f:b1:a2:f8:87:4c:0a:1b:d4:ae:b3:23:28:63:4b:dc:70:35:
         63:80:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:46 2025 by rpki-client