This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2107F9C2DF0D11F0BA11AAE1DAE4EC9C.roa
File:                     2107F9C2DF0D11F0BA11AAE1DAE4EC9C.roa (raw, json)
Hash identifier:          58F/190ZdY+IjXWtMGKqN1HkIrce32bA7frny8cMTFo=
Subject key identifier:   13:C8:D8:AF:94:59:8F:4A:4F:DF:44:F2:D5:67:3A:F6:A6:16:3A:6F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AFCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2107F9C2DF0D11F0BA11AAE1DAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 08:06:33 +0000
ROA not before:           Mon 22 Dec 2025 08:06:29 +0000
ROA not after:            Mon 26 Jan 2026 08:06:29 +0000
asID:                     138997
IP address blocks:        154.86.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 08:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110542 (0x1afce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 22 08:06:29 2025 GMT
            Not After : Jan 26 08:06:29 2026 GMT
        Subject: CN=6948fc09-4aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:59:7b:93:57:bd:3b:7b:f2:43:5b:92:cb:
                    ff:95:e6:9c:e2:46:2e:f3:d5:2c:15:d3:63:b4:40:
                    68:cd:e3:f9:32:db:4b:63:35:15:2b:27:1e:82:dc:
                    3e:fe:c3:5d:e0:5a:a5:71:17:0b:29:99:7b:ad:b3:
                    d7:c9:ba:a1:d7:70:28:fc:34:4d:6e:dd:25:ea:f5:
                    5c:5d:ad:82:af:b0:f6:11:98:22:4e:ec:5b:f6:f8:
                    4f:bb:75:46:02:7a:f9:55:5b:a6:cf:10:b1:9b:91:
                    5f:bd:49:88:11:91:89:dd:50:78:54:45:88:e1:9c:
                    61:2b:ab:e3:ae:00:2c:fc:36:4e:c0:2f:8e:13:06:
                    d2:91:51:71:26:c7:02:8b:fe:89:e1:12:db:62:1c:
                    27:bb:20:69:69:3b:61:4b:7f:6d:3a:7d:a4:2f:d9:
                    a6:71:c7:ea:09:e8:a9:49:f2:92:83:f1:2c:28:5f:
                    63:e8:9f:b4:ee:0d:c8:98:57:25:cd:ce:26:15:c0:
                    12:2c:20:25:7f:44:c5:0c:c6:46:a5:02:eb:c8:52:
                    2a:89:bb:35:f5:86:45:e7:55:11:f0:5d:37:58:27:
                    48:e2:86:1c:ea:9b:15:cb:91:0c:6b:4f:25:a4:1e:
                    75:40:b4:58:27:b9:d8:c8:f7:a4:21:e5:0e:2e:45:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C8:D8:AF:94:59:8F:4A:4F:DF:44:F2:D5:67:3A:F6:A6:16:3A:6F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2107F9C2DF0D11F0BA11AAE1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:18:09:ab:9d:dd:4f:86:97:9a:78:e3:1b:f2:71:b0:c2:18:
         7b:81:d8:14:98:f5:c8:8a:ce:07:cb:9f:5f:5b:c9:d1:88:6d:
         12:4f:3c:27:2f:79:99:b2:9d:ae:f1:15:d4:d3:bf:13:9a:f5:
         f8:81:ba:86:06:b5:b6:e7:1d:ed:41:e1:d6:c8:ef:c2:34:32:
         44:59:28:c4:a3:7f:25:ae:79:21:3f:82:d7:a9:f0:16:86:6e:
         72:a1:e5:95:c5:58:f2:76:84:62:3f:b6:a5:1a:e6:f9:ca:0e:
         d1:00:49:4e:61:32:e5:aa:24:d4:17:2e:7c:2b:9e:74:e1:dd:
         42:56:d4:33:5c:47:37:46:b0:c4:6b:b2:0d:56:2e:db:05:a8:
         19:87:ab:bd:00:eb:71:46:95:90:af:b1:c9:79:1a:fa:6f:c6:
         77:e3:aa:d4:c2:b5:3b:a8:5d:05:14:bf:78:cc:37:87:17:b0:
         d0:96:ff:a7:34:8f:b1:9a:6d:e0:ef:76:22:6c:dd:e1:f0:1a:
         69:32:ee:51:0d:cd:5f:99:a5:81:48:ea:8a:62:1a:ea:a0:8c:
         d2:3b:4b:ff:2b:69:eb:bb:60:54:a6:3b:25:f2:8d:14:f7:30:
         82:90:86:c2:33:8c:6a:45:64:8f:cb:df:e0:70:88:34:00:88:
         17:e3:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:38:01 2025 by rpki-client