This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/858FB6F2D5E711F0B504BE7EDAE4EC9C.roa
File:                     858FB6F2D5E711F0B504BE7EDAE4EC9C.roa (raw, json)
Hash identifier:          yHt5CIHacJQmbPE58qak9+hFPB92mASffA2A+W72dac=
Subject key identifier:   90:ED:E3:85:A1:61:21:FC:C9:8B:BB:0D:1D:49:B3:38:8F:17:97:99
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ADD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/858FB6F2D5E711F0B504BE7EDAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 16:44:41 +0000
ROA not before:           Wed 10 Dec 2025 16:44:36 +0000
ROA not after:            Thu 15 Jan 2026 16:44:36 +0000
asID:                     397423
IP address blocks:        154.93.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110040 (0x1add8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 10 16:44:36 2025 GMT
            Not After : Jan 15 16:44:36 2026 GMT
        Subject: CN=6939a379-9cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2e:f5:28:ba:ce:6c:22:96:c4:88:c7:e1:35:
                    0c:01:86:bd:8e:c2:9c:59:4b:fb:30:25:4b:04:1e:
                    17:09:83:0c:4b:b7:92:98:d0:a9:a5:af:65:95:6f:
                    a7:ee:da:81:98:92:c7:48:71:06:8d:76:8b:13:f0:
                    e6:6a:c5:1c:81:94:37:07:ae:76:37:75:83:cb:8e:
                    34:13:a9:45:19:0b:07:fd:80:e5:46:dc:30:2c:a8:
                    52:87:3c:7e:f2:a6:7f:02:cd:72:f6:ab:72:7b:9a:
                    d0:89:45:0d:06:95:15:00:ca:22:37:99:9e:87:c0:
                    06:ee:bf:7a:a0:42:43:60:2c:16:2f:ce:bd:68:e6:
                    3d:ef:b1:fa:2b:96:4e:f4:80:49:cf:fc:1c:a8:b4:
                    fc:0c:5a:be:5c:e0:bd:6c:ec:ab:1c:b6:48:70:35:
                    cc:3c:eb:06:e0:21:80:ac:02:2a:ad:40:90:3f:62:
                    f6:69:fc:1e:54:49:8d:3e:8b:72:f4:dc:86:35:ac:
                    a4:4d:e5:40:af:1d:00:b2:3d:1b:0d:ce:4b:9b:6e:
                    92:57:11:71:7a:25:7d:4e:dc:3d:01:90:71:8a:e1:
                    71:0a:f4:39:6c:66:9a:c0:3f:3b:f0:eb:1a:b0:e8:
                    22:80:d2:f4:80:52:bd:b2:8f:75:8a:a3:3b:20:31:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:ED:E3:85:A1:61:21:FC:C9:8B:BB:0D:1D:49:B3:38:8F:17:97:99
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/858FB6F2D5E711F0B504BE7EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:3d:7c:88:ab:9d:b5:bc:1b:d5:e7:fa:bc:c5:b1:c5:0b:cf:
         f0:20:5d:79:d8:fd:12:bd:40:0e:54:86:54:b3:38:83:c7:fe:
         36:e9:62:af:fe:ad:90:9b:bf:69:f8:70:3c:9f:42:cb:b5:91:
         d0:0f:a2:fc:62:af:a5:c3:9b:78:6e:7d:1b:80:13:2e:f9:97:
         a3:b1:ae:ab:7d:27:73:c9:95:fd:48:4c:bf:8a:10:12:94:fd:
         e6:dd:c4:d9:37:b4:b1:d6:23:f4:34:66:39:bd:a2:0a:a5:4a:
         58:de:30:69:9f:75:a2:5e:61:11:52:59:b6:46:34:53:35:a2:
         46:b1:4e:c2:2b:94:25:95:38:aa:15:02:b0:08:d3:15:82:2c:
         85:14:75:04:f3:02:70:76:a9:85:8d:a4:97:35:af:af:4f:62:
         d7:ba:6f:9a:6c:e2:22:03:6a:b6:1a:d4:80:db:0b:ce:d4:74:
         a5:9d:f0:3e:c4:80:a3:bf:b6:36:31:43:75:d3:95:40:fd:cc:
         41:30:ea:c8:7e:6e:b7:1c:83:84:8e:8a:87:a3:bb:ef:82:89:
         f4:ac:c4:cd:69:e3:87:45:c8:d7:56:9c:fa:b3:02:dd:8a:21:
         3c:77:03:b4:bc:4a:b8:4e:4d:3e:b4:1e:ba:45:0c:de:ae:22:
         99:b0:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:50:21 2025 by rpki-client