This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDC91002DB8F11F09EAB0DF3DAE4EC9C.roa
File:                     FDC91002DB8F11F09EAB0DF3DAE4EC9C.roa (raw, json)
Hash identifier:          oVptqx+dH8B+vdQPRsUT5OsfsBW21egFybBaC6G8OvY=
Subject key identifier:   4C:D4:26:FC:8A:9A:FE:22:06:F7:A0:B9:62:D3:FD:24:6D:D8:65:05
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AF41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDC91002DB8F11F09EAB0DF3DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 21:33:14 +0000
ROA not before:           Wed 17 Dec 2025 21:33:09 +0000
ROA not after:            Wed 24 Dec 2025 21:33:09 +0000
asID:                     401783
IP address blocks:        154.92.210.0/24 maxlen: 24
                          154.92.211.0/24 maxlen: 24
                          154.92.212.0/24 maxlen: 24
                          154.92.213.0/24 maxlen: 24
                          154.92.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110401 (0x1af41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 21:33:09 2025 GMT
            Not After : Dec 24 21:33:09 2025 GMT
        Subject: CN=69432199-55d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:a8:9f:10:38:19:ae:a8:41:68:be:11:8c:
                    b8:6d:98:8f:50:89:ec:ab:9e:fc:34:80:53:93:9b:
                    23:0c:36:d7:ec:9f:41:33:b6:a9:cb:44:21:5e:10:
                    13:e3:08:ba:19:dc:59:26:ec:3b:a3:d3:12:27:9c:
                    dd:1b:56:e3:3d:59:89:64:9d:91:ed:ee:0a:64:2c:
                    94:fe:00:44:c5:12:41:c2:ce:58:9a:fe:75:49:07:
                    c3:52:6e:0e:19:8d:f7:b9:9f:f1:40:f4:3b:76:f9:
                    51:2b:44:af:81:0e:bb:19:5c:c6:aa:f3:2d:9e:a4:
                    0e:45:cb:28:48:96:21:e6:53:1b:92:f4:c1:e5:89:
                    fd:96:c6:ee:29:32:42:cc:a9:61:d5:e3:86:39:5f:
                    22:ca:1f:57:b1:7a:a1:f8:50:ff:85:ff:94:aa:69:
                    96:8d:64:d5:54:5c:7f:a6:8f:6a:e6:d5:80:1b:68:
                    e4:9f:f3:ae:db:69:6d:27:e1:a2:fd:9a:70:d7:52:
                    e3:0f:79:95:bd:47:89:ac:94:be:23:a1:c2:5a:e3:
                    08:cc:51:5a:94:fd:2c:be:76:ea:95:ec:48:93:1b:
                    36:e8:71:3b:66:5b:91:0f:cd:89:57:78:26:b6:2a:
                    5c:59:17:23:2d:47:57:19:0e:90:d6:58:df:de:1a:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D4:26:FC:8A:9A:FE:22:06:F7:A0:B9:62:D3:FD:24:6D:D8:65:05
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDC91002DB8F11F09EAB0DF3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.210.0-154.92.214.255

    Signature Algorithm: sha256WithRSAEncryption
         cf:72:8f:03:af:7c:c1:ac:40:55:f4:59:dc:58:a6:de:92:cf:
         3f:39:48:74:46:df:21:44:78:8f:7e:3c:b7:1a:95:70:66:1d:
         6d:62:d3:c9:e9:c9:f7:94:6a:41:d4:1d:d5:fa:3c:5c:86:ab:
         6f:61:ef:c5:f2:a5:85:4a:5d:52:30:dc:f3:7b:b4:7c:d8:76:
         46:d2:38:95:84:f1:28:93:c4:0d:51:52:8c:11:98:2e:ea:35:
         98:cd:9e:d6:5e:ac:e3:f2:ee:7b:5e:c0:9e:b2:6c:c0:92:fc:
         8b:be:e6:d0:b4:32:d1:95:7d:7c:88:50:6d:34:50:9c:c3:55:
         e3:12:ff:c4:1f:be:c0:98:1b:ce:b6:61:1a:8d:d5:7b:2a:fa:
         d8:47:89:5f:29:d3:0a:ba:6b:fd:19:d9:3d:c1:8c:97:97:4f:
         0b:e6:d3:ed:da:75:30:d4:71:6b:8e:c9:e2:70:fc:cd:8d:fd:
         5b:dc:b2:80:45:fd:a5:b5:78:4d:38:dc:8e:78:88:b0:ab:1c:
         c6:d7:2b:4a:4a:38:da:b7:16:19:77:72:cf:3f:ee:06:c8:d2:
         37:68:28:a1:b5:a3:39:85:2d:f7:87:ee:04:4d:e5:ad:1f:2a:
         a3:0d:08:9a:94:7b:75:f4:77:0f:91:e3:67:0f:1d:fc:eb:a7:
         a3:33:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:02:32 2025 by rpki-client