This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E9BA140E24711F09B1315ADDAE4EC9C.roa
File:                     8E9BA140E24711F09B1315ADDAE4EC9C.roa (raw, json)
Hash identifier:          UmBwAeoTrptueDqafKzuiZ1s+lCtgqKD/hmZs72CXGE=
Subject key identifier:   F6:CB:24:64:A5:11:B5:42:CF:FC:27:5A:E0:29:36:95:C0:15:8D:84
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B16F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E9BA140E24711F09B1315ADDAE4EC9C.roa
Signing time:             Fri 26 Dec 2025 10:42:21 +0000
ROA not before:           Fri 26 Dec 2025 10:42:16 +0000
ROA not after:            Tue 06 Jan 2026 10:42:16 +0000
asID:                     138456
IP address blocks:        154.197.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110959 (0x1b16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 26 10:42:16 2025 GMT
            Not After : Jan  6 10:42:16 2026 GMT
        Subject: CN=694e668d-98f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:f3:0f:ed:99:67:2c:91:38:33:ef:d9:e8:
                    91:68:95:d1:05:eb:cd:21:5c:c1:57:ff:b3:ec:57:
                    6f:fe:25:30:f9:fc:66:9f:3d:56:79:df:45:6f:5e:
                    0c:a1:be:e9:fb:35:e8:b6:ab:d9:cf:e6:09:ce:ce:
                    5c:c4:af:d2:d6:4c:e8:8e:8e:e9:53:e5:83:35:91:
                    16:28:30:f8:66:58:5c:e7:e4:7f:bd:7e:a4:96:97:
                    fb:36:e1:d2:88:96:94:7d:20:8c:84:6b:1c:cc:7e:
                    c2:01:bc:35:d7:1f:c2:be:74:3d:2f:b5:f3:95:51:
                    2c:eb:c6:57:fe:45:f6:10:ac:5c:47:69:9b:4d:2d:
                    63:b9:d3:88:02:5b:e4:5f:fb:1a:63:da:b8:3c:21:
                    7f:cd:e7:97:7e:f1:32:6a:24:25:3f:9d:65:dd:ff:
                    3f:26:39:4a:d9:a5:4d:f2:08:6b:28:b1:a2:6c:4a:
                    7a:77:96:d7:65:91:05:44:e0:26:e6:92:a6:80:8b:
                    ee:b9:a8:37:58:90:7c:b4:53:02:39:82:03:43:78:
                    ab:f0:ca:2f:da:84:e6:c7:b1:06:72:8a:2a:33:ba:
                    4b:95:f4:8d:db:94:14:de:89:34:84:a3:23:31:66:
                    e8:5f:bb:d1:f4:ec:58:c6:5a:ba:9e:be:a8:29:07:
                    de:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CB:24:64:A5:11:B5:42:CF:FC:27:5A:E0:29:36:95:C0:15:8D:84
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E9BA140E24711F09B1315ADDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:d3:72:74:9b:89:9c:06:69:c9:2b:0f:86:29:3c:69:b0:
         6f:86:03:e7:48:7c:ee:6b:1f:f2:e3:31:79:ce:21:d7:e7:c7:
         9b:9c:ee:00:23:6b:60:f1:e4:52:c3:27:d9:27:26:04:b7:5a:
         2e:a8:bd:ec:a1:cd:17:36:f7:37:a2:ef:31:e9:40:8c:57:9b:
         88:4f:30:13:d0:ae:7a:2a:cb:57:ec:d3:51:5f:fc:08:08:2d:
         f1:38:5d:23:da:d3:0b:c5:73:fb:ab:0f:ba:bc:b3:2a:cf:8d:
         5a:16:7a:d8:60:5a:38:35:13:1d:12:13:9a:eb:b7:9b:8a:0b:
         a0:1d:09:d3:10:4e:7d:ee:d8:7e:d2:e9:38:9e:24:f8:9c:2f:
         af:f1:fd:ef:b6:f8:ee:d7:06:0c:93:55:d9:f9:d0:95:f0:35:
         9c:60:28:6c:db:0f:d0:d9:de:80:fd:c1:f0:87:5d:fd:f1:25:
         ef:5a:a1:43:a1:0d:42:0c:79:ae:30:77:12:18:a7:01:c8:65:
         8a:bf:6a:77:e9:92:cb:df:49:bb:14:ec:00:02:e3:5d:c8:3e:
         33:62:24:05:b2:b7:ec:84:87:e6:34:f6:90:bf:ac:32:6a:98:
         7e:dc:23:6e:6c:38:cb:dd:71:ae:03:a8:64:53:ab:bc:d4:9e:
         dc:d7:22:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 15:49:50 2025 by rpki-client