This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B74362EED72611F0BC2EF9D8DAE4EC9C.roa
File:                     B74362EED72611F0BC2EF9D8DAE4EC9C.roa (raw, json)
Hash identifier:          ad16MeYEZ4cOtP2TQN28VtHR7atkC4X0jKOwuEk0vh0=
Subject key identifier:   C9:1F:B6:D2:06:EA:73:90:66:34:C5:70:1B:AB:EA:5B:EC:2B:5A:36
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ADEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B74362EED72611F0BC2EF9D8DAE4EC9C.roa
Signing time:             Fri 12 Dec 2025 06:49:33 +0000
ROA not before:           Fri 12 Dec 2025 06:49:29 +0000
ROA not after:            Mon 19 Jan 2026 06:49:29 +0000
asID:                     150000
IP address blocks:        154.82.159.0/24 maxlen: 24
                          154.82.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110060 (0x1adec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 12 06:49:29 2025 GMT
            Not After : Jan 19 06:49:29 2026 GMT
        Subject: CN=693bbafd-a6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:c6:28:e1:2c:64:95:3f:83:74:1b:0c:1d:
                    eb:75:d2:80:55:94:44:10:d9:6f:b0:f1:d4:68:43:
                    73:33:7e:8e:fc:d4:8a:3d:f5:99:5a:19:f3:41:a3:
                    b3:39:0f:f4:8c:59:6a:36:10:b6:10:7b:58:45:3f:
                    67:a4:37:3b:74:0b:83:38:7c:ee:e9:09:0c:fd:c7:
                    08:84:a1:e5:b6:51:00:bb:d9:5c:4b:5e:b4:7d:7e:
                    5f:b1:ca:c8:37:15:dd:03:7a:30:62:f8:1e:51:4e:
                    cf:16:b6:5d:58:1d:c8:79:c0:7e:0d:06:ca:73:0a:
                    b9:24:f9:0a:1a:79:80:07:e1:ed:65:85:eb:6a:13:
                    da:36:84:aa:8d:33:60:2d:c1:ab:44:e3:34:1f:a9:
                    ed:7f:47:b7:62:f5:4d:1b:82:16:1e:13:70:48:a7:
                    1b:bc:e7:fb:ce:d3:eb:08:18:3a:76:75:62:b7:54:
                    09:f5:04:15:06:f6:9e:50:7a:66:bc:ca:52:89:2d:
                    7c:76:a7:9f:e3:32:be:b4:82:33:5d:51:e0:95:50:
                    b4:bc:c9:5f:60:b7:29:cc:24:ff:25:43:b5:54:48:
                    2d:e3:80:3b:ad:82:df:46:3d:bc:a8:66:96:28:e6:
                    d7:cd:5d:5c:2a:18:a1:43:61:09:f1:fe:b6:d1:3a:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1F:B6:D2:06:EA:73:90:66:34:C5:70:1B:AB:EA:5B:EC:2B:5A:36
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B74362EED72611F0BC2EF9D8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.159.0-154.82.160.255

    Signature Algorithm: sha256WithRSAEncryption
         26:24:53:e4:f0:b8:2e:6a:a0:1b:48:85:1a:2d:73:31:22:30:
         a1:b3:fd:8e:76:b1:11:0a:64:a6:a8:ba:52:88:82:cd:30:a9:
         21:fa:68:db:ca:3a:0e:cc:56:9c:cf:11:70:a9:02:a5:bf:a6:
         af:ff:82:e0:4c:6a:58:3e:d7:2d:6b:5c:ac:25:5a:3e:fa:40:
         9c:21:b5:fd:5f:1a:3e:55:47:57:95:ab:2c:7a:14:85:aa:54:
         3a:be:af:40:e7:8d:88:dd:03:a3:82:04:b7:36:29:fc:0d:65:
         bd:fa:43:17:28:e8:b6:24:85:1c:75:1e:b1:81:20:ff:ce:a9:
         5d:5a:64:94:06:0d:6b:14:16:42:1b:86:f5:c2:2f:29:58:96:
         2d:5c:28:4e:69:be:4b:74:c2:49:c1:e3:0e:16:f0:f4:0f:4f:
         6b:a2:00:73:9d:5d:b9:31:cd:a2:b0:e4:fc:bb:50:a9:af:4b:
         01:4a:8b:90:12:8a:33:9b:32:b4:61:a8:3d:00:c9:c0:be:60:
         da:01:19:02:c7:95:32:5b:0b:79:9d:e1:4c:5e:8d:2a:7b:3a:
         b0:26:fd:ba:43:4a:e9:cb:73:3f:65:18:9c:50:00:ad:6f:07:
         cd:62:55:4e:18:79:02:50:46:98:b2:d0:f0:78:d1:af:b7:89:
         04:64:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:25:03 2025 by rpki-client