This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F61B732D73811F0B61BF7C6DAE4EC9C.roa
File:                     8F61B732D73811F0B61BF7C6DAE4EC9C.roa (raw, json)
Hash identifier:          R6A1psSMaIpIbrU64rQQsamL1/y5u193xiBenrMlVUY=
Subject key identifier:   74:F2:39:69:28:89:27:D2:3B:65:27:C5:B2:C9:56:DC:A9:62:4C:A1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ADF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F61B732D73811F0B61BF7C6DAE4EC9C.roa
Signing time:             Fri 12 Dec 2025 08:57:17 +0000
ROA not before:           Fri 12 Dec 2025 08:57:13 +0000
ROA not after:            Wed 21 Jan 2026 08:57:13 +0000
asID:                     18779
IP address blocks:        154.205.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110072 (0x1adf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 12 08:57:13 2025 GMT
            Not After : Jan 21 08:57:13 2026 GMT
        Subject: CN=693bd8ed-c094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:44:70:a6:c6:56:0a:03:4a:dd:23:e9:72:
                    cb:47:da:4b:b4:48:44:94:77:4b:27:c9:6a:ae:0a:
                    77:8b:e0:8a:e3:3d:d7:b7:38:6e:99:29:38:75:0e:
                    d8:2b:0d:fe:73:51:0b:ce:48:cc:1e:8b:22:c5:df:
                    37:7e:51:87:24:53:dd:22:82:36:8f:3e:14:00:c0:
                    1d:29:20:d6:7d:b5:40:19:a7:2d:ad:72:fb:53:ba:
                    61:11:e5:cc:a5:cc:d8:a7:d9:1b:2a:a7:60:80:80:
                    c4:92:c7:15:b2:36:ec:85:64:c3:12:47:5f:92:44:
                    77:82:e9:5a:f1:31:c7:bf:8e:51:82:49:05:1c:0b:
                    f6:fb:87:2a:98:41:58:ea:0b:3e:dd:ad:29:e6:77:
                    f2:a3:fd:e2:c8:23:14:56:9e:22:b9:36:d7:d5:72:
                    4f:09:94:f1:db:1f:b8:6c:00:b8:e8:c5:26:8f:52:
                    df:2b:a8:02:d6:31:7c:ce:7d:2f:e0:f9:60:02:4f:
                    0f:77:a0:65:1b:a8:b0:cc:e7:a1:b6:92:60:c3:46:
                    6e:58:ac:88:0d:28:69:41:45:98:43:70:0f:53:55:
                    7a:dc:2f:95:a7:b1:53:1e:3e:bd:c5:13:8a:02:45:
                    69:16:80:76:99:92:22:b1:f6:85:59:dc:e9:3c:38:
                    ec:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F2:39:69:28:89:27:D2:3B:65:27:C5:B2:C9:56:DC:A9:62:4C:A1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F61B732D73811F0B61BF7C6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:5b:39:c3:ba:88:b2:69:a8:1a:0d:a2:c2:d1:89:ae:de:6d:
         0d:38:9f:0e:17:4b:e1:ba:ed:00:43:14:2b:16:49:34:3b:68:
         71:60:df:35:ee:93:11:fe:20:a7:18:df:ac:1e:b7:58:b6:2e:
         0a:1a:c9:63:6e:4b:5b:19:a0:24:88:fa:95:11:d2:91:89:66:
         ca:f4:84:d2:62:5d:23:35:74:88:31:ce:0a:e4:bf:c5:0c:a8:
         f2:6b:f2:1f:ae:ca:af:15:c4:04:f6:e8:bf:ac:9f:ba:5e:94:
         a7:7c:87:5d:07:6b:d3:ac:62:b6:8f:1a:88:47:c2:07:92:19:
         36:06:08:0e:6b:06:b6:3a:bc:e7:06:d8:a7:e0:82:03:ed:76:
         e3:e2:fe:09:a2:51:9e:2b:9c:15:9f:fa:b3:ef:19:6d:09:c4:
         a0:af:4c:ba:86:b2:06:e3:4c:f3:96:ef:a9:74:34:9c:f1:a3:
         06:ba:2d:5f:22:51:6e:e2:c8:5a:7a:c0:7e:c3:0a:47:8a:85:
         4d:ef:6b:1c:b2:de:d7:60:0b:ab:4c:fa:3c:26:f4:09:8f:a4:
         33:b8:d7:16:96:1d:f1:38:de:70:ef:03:24:01:e4:d5:ad:ad:
         99:e7:88:3e:ad:5e:bb:84:ab:de:cb:fe:83:f7:c1:3a:64:ba:
         1c:33:e0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:17:18 2025 by rpki-client