This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE840C48DB8F11F084373FF1DAE4EC9C.roa
File:                     CE840C48DB8F11F084373FF1DAE4EC9C.roa (raw, json)
Hash identifier:          XFUV3qFXd55yZ90DDIAqNuGJTE3iF1bhMRzY3psokHY=
Subject key identifier:   E8:4E:5B:F8:E1:11:D3:C3:38:B6:21:4F:34:25:9E:74:42:8F:EE:FE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE840C48DB8F11F084373FF1DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 21:31:54 +0000
ROA not before:           Wed 17 Dec 2025 21:31:49 +0000
ROA not after:            Wed 24 Dec 2025 21:31:49 +0000
asID:                     395793
IP address blocks:        154.92.205.0/24 maxlen: 24
                          154.92.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110399 (0x1af3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 21:31:49 2025 GMT
            Not After : Dec 24 21:31:49 2025 GMT
        Subject: CN=6943214a-c56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:97:8d:9c:f5:e8:17:32:93:62:87:e7:40:
                    a2:87:3b:9d:83:3d:66:f0:3b:71:c8:02:aa:28:64:
                    b7:81:cd:eb:f4:e3:f4:b4:4c:c9:85:b0:c3:02:dc:
                    3a:80:e9:f7:ee:86:21:16:bf:54:6b:dc:74:b7:bf:
                    23:4f:09:39:db:72:a9:c7:9c:92:e5:44:ab:2f:df:
                    8a:4f:3d:35:35:7d:eb:5e:8a:75:62:f1:ab:29:e3:
                    c9:16:b5:02:05:72:b4:da:7b:95:ee:26:21:29:4b:
                    cc:c1:c2:35:ee:c3:b3:9a:2d:71:51:7a:63:70:21:
                    6f:6b:8e:24:2e:7f:60:71:c2:a9:a4:67:b6:bc:f6:
                    c2:de:5c:9c:3d:ab:7d:1c:10:b9:40:6c:47:51:ec:
                    e2:8b:b7:ad:e6:b6:3d:b0:a7:84:bb:bb:1a:b0:88:
                    69:c4:0a:95:bd:68:40:21:db:bd:11:1f:29:71:91:
                    52:98:1a:da:10:26:22:6b:9c:bc:fd:02:40:49:59:
                    95:68:93:a4:72:fc:09:18:0b:26:07:5c:f3:61:ed:
                    50:63:a7:97:75:77:49:ae:89:39:6f:ac:43:6d:84:
                    72:9f:fe:10:d3:72:aa:95:be:b5:a3:56:fa:c9:00:
                    f6:41:34:9d:9e:52:e6:f8:b4:66:a5:9e:36:74:60:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4E:5B:F8:E1:11:D3:C3:38:B6:21:4F:34:25:9E:74:42:8F:EE:FE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE840C48DB8F11F084373FF1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.205.0/24
                  154.92.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ec:47:b4:fd:fd:37:c4:91:4b:9f:99:6f:5f:d6:83:d2:a8:
         3b:39:1e:9a:6b:ad:c3:e8:1d:51:71:21:ca:a4:25:ca:43:12:
         bb:47:6c:f9:28:2f:6f:07:a9:b5:ff:ca:25:01:54:f2:f8:5d:
         fb:45:14:c3:cd:30:3e:ab:fd:20:ea:d6:49:33:5a:16:60:a2:
         1f:de:76:b3:9d:2b:9d:5c:72:92:0d:9e:bc:28:fd:b1:56:69:
         c0:57:ba:d7:a4:85:cf:6b:7e:e4:da:8a:1e:29:50:0e:74:d3:
         2a:a6:45:44:67:a6:2c:b6:71:cb:ab:d7:34:34:86:4e:f2:07:
         12:60:a3:fa:8b:8c:2a:56:78:08:36:d5:ed:f0:3a:6a:18:17:
         40:cf:9f:48:2d:76:b3:9a:9d:88:c9:55:d9:ad:a3:a3:ff:05:
         7b:9d:31:52:35:9f:4b:59:6d:1b:9c:96:43:e6:52:72:e6:5f:
         b9:49:71:af:85:43:5d:56:af:0c:cd:85:f2:9a:e7:ee:be:df:
         9f:50:b8:52:12:7a:60:5e:42:b1:68:92:a9:6c:97:66:1f:84:
         29:b7:62:37:81:92:1b:e8:91:42:8e:fc:bb:15:ad:fe:e2:8e:
         5c:05:1f:12:42:8f:60:61:ad:95:98:e3:fd:5d:77:7e:01:3e:
         6c:b3:eb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:02:16 2025 by rpki-client