This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E9D1812DB5411F0B57B8989DAE4EC9C.roa
File:                     8E9D1812DB5411F0B57B8989DAE4EC9C.roa (raw, json)
Hash identifier:          13k3Nd3Cn/w3aD8ZpYbhnBTNmR6maDj90OT+xATKlgc=
Subject key identifier:   3E:14:B8:F6:42:32:F4:0E:5F:A1:0F:04:A0:B9:1B:2F:E7:79:B1:36
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AEFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E9D1812DB5411F0B57B8989DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 14:27:47 +0000
ROA not before:           Wed 17 Dec 2025 14:27:42 +0000
ROA not after:            Fri 26 Dec 2025 14:27:42 +0000
asID:                     138915
IP address blocks:        154.223.62.0/23 maxlen: 24
                          154.223.64.0/24 maxlen: 24
                          154.223.65.0/24 maxlen: 24
                          154.223.66.0/23 maxlen: 24
                          154.223.68.0/23 maxlen: 24
                          154.223.70.0/23 maxlen: 24
                          154.223.72.0/23 maxlen: 24
                          154.223.74.0/23 maxlen: 24
                          154.223.76.0/23 maxlen: 24
                          154.223.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110333 (0x1aefd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 14:27:42 2025 GMT
            Not After : Dec 26 14:27:42 2025 GMT
        Subject: CN=6942bde3-332e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:54:c8:2d:00:d5:d6:c1:38:ce:fd:ec:60:
                    f9:b1:87:80:a1:56:c4:16:ba:0b:9b:a5:c9:f2:c9:
                    2a:3e:d4:d7:d9:70:50:7e:93:4d:53:05:95:b8:15:
                    d5:6f:c0:2a:66:31:53:c4:0a:f0:d2:bd:13:e2:12:
                    e3:57:95:33:de:9f:ec:ec:fb:0a:d9:ac:ee:23:d1:
                    03:9e:1f:24:c2:e3:d7:82:26:a0:36:cd:f7:c8:25:
                    1b:6e:c8:2e:57:fe:19:65:48:ea:ee:f9:0a:8a:51:
                    fc:ec:a9:46:72:05:56:0f:74:d0:2a:ae:ea:95:93:
                    56:4f:53:2a:2a:cc:85:3d:e8:e2:b1:20:81:98:1b:
                    77:b6:ff:0d:27:e4:95:ae:a3:ba:b0:22:7f:24:76:
                    ed:0f:17:04:33:43:cb:a3:d0:3e:eb:84:0a:97:1f:
                    55:44:7f:f6:b8:6b:87:38:8c:1d:0e:12:99:90:13:
                    0a:89:55:a4:97:39:09:3c:5c:b1:d9:33:16:46:bb:
                    e0:75:12:44:5f:22:c2:ee:2b:18:14:59:5b:7b:b4:
                    c1:cb:4a:7b:f7:d8:66:5b:ab:98:4a:75:ba:12:fc:
                    45:4b:2f:b6:ee:85:8c:74:be:ce:c2:b4:63:ff:1f:
                    be:65:06:e4:8a:bd:86:32:a5:34:50:6d:79:37:2b:
                    29:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:14:B8:F6:42:32:F4:0E:5F:A1:0F:04:A0:B9:1B:2F:E7:79:B1:36
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E9D1812DB5411F0B57B8989DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.62.0-154.223.79.255

    Signature Algorithm: sha256WithRSAEncryption
         d0:03:82:48:3b:23:c9:96:16:33:4c:70:47:67:ca:57:a8:a8:
         c1:cc:60:d7:a0:7c:50:45:79:bb:b4:3f:86:06:7f:53:90:09:
         7e:7c:78:e8:3e:44:06:05:c3:64:af:65:6e:f5:f3:aa:0f:f2:
         7a:23:aa:bd:79:29:ec:7f:af:24:fc:d0:3b:d9:b1:9e:23:e0:
         2b:16:bd:51:33:bf:bb:92:60:26:f6:95:86:3d:cd:6d:22:da:
         30:7e:c3:51:68:6e:f8:e3:4d:c5:5f:94:52:d5:9e:48:89:35:
         67:0d:7d:ee:78:01:39:90:3b:fc:fd:71:a6:e9:3f:1d:67:95:
         ec:85:90:21:ee:d1:62:8a:ce:9b:e8:fc:20:2d:ff:21:da:4d:
         46:05:14:e9:de:76:10:27:93:fb:30:78:23:27:5c:ba:cc:d3:
         f6:11:76:0e:ad:c7:27:16:7a:f0:16:f8:18:38:f5:de:4a:e0:
         08:cf:47:46:f0:4a:0e:63:f3:a2:d3:e4:69:cf:60:7f:4d:7c:
         ee:92:f4:44:1d:d9:67:99:5a:e1:33:3a:ed:56:df:e5:f6:2d:
         aa:d2:90:53:1b:f7:dc:fb:8c:a2:85:3b:82:c9:db:71:8a:42:
         f5:28:ed:81:31:50:b6:ce:d9:b7:57:b7:8c:ed:71:c0:48:b2:
         54:96:cd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:11:38 2025 by rpki-client