This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9241FF6DB7611F08ED28ADBDAE4EC9C.roa
File:                     F9241FF6DB7611F08ED28ADBDAE4EC9C.roa (raw, json)
Hash identifier:          MbA85CHkF+Z8hqymb3Yolvcxv485Cih1kq4orkx6+4U=
Subject key identifier:   2F:BD:78:45:7D:36:5F:AF:F9:D9:D5:34:F9:6C:37:C4:90:EA:F8:FD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9241FF6DB7611F08ED28ADBDAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 18:34:08 +0000
ROA not before:           Wed 17 Dec 2025 18:34:03 +0000
ROA not after:            Sat 27 Dec 2025 18:34:03 +0000
asID:                     140224
IP address blocks:        154.205.222.0/24 maxlen: 24
                          154.205.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110377 (0x1af29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 18:34:03 2025 GMT
            Not After : Dec 27 18:34:03 2025 GMT
        Subject: CN=6942f7a0-e8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:3c:dc:43:0e:19:88:17:b3:62:dc:4d:8d:33:
                    f4:2d:bf:d9:65:32:1d:d5:b7:be:cb:53:a4:63:7a:
                    ff:8b:d1:11:1b:6e:f4:c7:0d:f5:7b:05:48:79:ff:
                    c6:5b:31:4c:86:2a:39:dd:a9:4b:b2:f4:ef:0c:c4:
                    ea:2c:6e:d1:db:ce:7f:54:c6:ad:09:32:bc:bb:28:
                    44:ba:df:52:f4:03:89:be:a1:0f:b9:f2:e2:03:a3:
                    da:2a:6d:d5:32:ca:eb:37:5e:0d:b1:9d:23:30:10:
                    89:a0:b0:84:0f:52:e6:ae:ec:6c:00:59:42:50:a3:
                    84:c8:96:94:e8:5a:49:86:13:59:d9:5e:b8:39:63:
                    26:0c:6f:c4:a8:4a:88:ad:e6:65:0b:a0:c5:10:52:
                    bc:8c:d4:15:97:01:71:ed:f6:c4:52:ed:57:2f:9e:
                    f6:0e:a5:2d:35:8d:60:ab:80:7e:ff:bf:fd:0c:fc:
                    06:07:44:5e:7c:a5:3b:ea:a2:be:79:90:d0:93:2c:
                    3d:f2:76:41:fd:5c:66:a0:2b:8c:ba:ef:b3:2e:1e:
                    e4:81:71:fa:c4:8d:ca:fc:2d:1f:ec:6d:02:84:fa:
                    7d:7f:ad:42:1b:96:3a:7d:e5:27:85:c7:dc:ca:a7:
                    e3:8c:6a:7e:02:ac:8d:9e:76:0f:5b:f1:3a:2b:26:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BD:78:45:7D:36:5F:AF:F9:D9:D5:34:F9:6C:37:C4:90:EA:F8:FD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9241FF6DB7611F08ED28ADBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:03:66:d0:7a:4c:04:87:48:cb:70:09:0e:d4:75:a9:df:32:
         bf:66:d3:19:6b:b3:3e:72:c8:4d:2a:40:5f:b8:87:6a:f8:ae:
         3f:55:83:c5:50:6d:81:f3:d8:7f:ad:d6:4f:5b:52:d8:74:3b:
         d8:e5:1e:25:c0:9b:b6:a8:1e:38:4d:97:a5:bc:e1:fc:5e:0a:
         3a:9a:45:27:d7:6f:f8:9f:68:c9:18:7a:94:6c:3f:51:b5:9f:
         a9:3f:6b:d5:22:51:94:a4:d7:42:6d:b5:2c:5a:63:13:b9:ab:
         68:76:24:64:c2:e4:41:15:b2:97:99:e7:32:3a:5d:6b:f7:18:
         00:29:45:87:c8:48:6e:21:78:ed:58:10:cc:53:01:43:37:be:
         9c:53:ac:c3:40:42:9d:0e:93:1d:44:e8:cd:ec:1b:b2:c6:05:
         6b:91:45:e6:51:59:e7:e8:74:cb:df:2d:c7:84:9f:58:73:73:
         cb:b4:72:2d:ce:90:a6:9e:a2:14:2c:1c:2a:17:79:72:f7:e9:
         22:80:d5:b6:cd:b7:69:56:2e:3b:e2:bb:09:4d:99:99:d4:3e:
         27:34:80:e6:08:bc:7a:7c:5d:fa:7d:ec:8e:7f:00:a2:00:86:
         f3:9c:3f:b7:f7:d3:2a:47:4f:6c:74:a4:4e:41:06:5d:f0:00:
         74:e2:41:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAa8pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjE3MTgzNDAzWhcNMjUxMjI3MTgzNDAzWjAYMRYw
FAYDVQQDEw02OTQyZjdhMC1lOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+TzcQw4ZiBezYtxNjTP0Lb/ZZTId1be+y1OkY3r/i9ERG270xw31ewVI
ef/GWzFMhio53alLsvTvDMTqLG7R285/VMatCTK8uyhEut9S9AOJvqEPufLiA6Pa
Km3VMsrrN14NsZ0jMBCJoLCED1LmruxsAFlCUKOEyJaU6FpJhhNZ2V64OWMmDG/E
qEqIreZlC6DFEFK8jNQVlwFx7fbEUu1XL572DqUtNY1gq4B+/7/9DPwGB0RefKU7
6qK+eZDQkyw98nZB/VxmoCuMuu+zLh7kgXH6xI3K/C0f7G0ChPp9f61CG5Y6feUn
hcfcyqfjjGp+AqyNnnYPW/E6KyYrFQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC+9
eEV9Nl+v+dnVNPlsN8SQ6vj9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOTI0MUZGNkRCNzYxMUYwOEVEMjhBREJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms3eMA0GCSqGSIb3DQEB
CwUAA4IBAQDEA2bQekwEh0jLcAkO1HWp3zK/ZtMZa7M+cshNKkBfuIdq+K4/VYPF
UG2B89h/rdZPW1LYdDvY5R4lwJu2qB44TZelvOH8Xgo6mkUn12/4n2jJGHqUbD9R
tZ+pP2vVIlGUpNdCbbUsWmMTuatodiRkwuRBFbKXmecyOl1r9xgAKUWHyEhuIXjt
WBDMUwFDN76cU6zDQEKdDpMdROjN7BuyxgVrkUXmUVnn6HTL3y3HhJ9Yc3PLtHIt
zpCmnqIULBwqF3ly9+kigNW2zbdpVi474rsJTZmZ1D4nNIDmCLx6fF36feyOfwCi
AIbznD+399MqR09sdKROQQZd8AB04kE/
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:16 2025 by rpki-client