This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E019A18D05611F0989CE897DAE4EC9C.roa
File:                     2E019A18D05611F0989CE897DAE4EC9C.roa (raw, json)
Hash identifier:          KjlaC7DF2NFOOm9BSr4bWbcvsbX/GV2iHFsE+f/rZrs=
Subject key identifier:   3A:AF:3D:C8:CE:5F:15:39:50:FB:78:EA:38:E6:D1:29:37:A1:C4:47
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AC88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E019A18D05611F0989CE897DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 14:41:41 +0000
ROA not before:           Wed 03 Dec 2025 14:41:32 +0000
ROA not after:            Mon 05 Jan 2026 14:41:32 +0000
asID:                     48031
IP address blocks:        154.213.6.0/24 maxlen: 24
                          154.213.7.0/24 maxlen: 24
                          154.222.248.0/24 maxlen: 24
                          154.222.249.0/24 maxlen: 24
                          154.222.250.0/24 maxlen: 24
                          154.222.251.0/24 maxlen: 24
                          154.222.253.0/24 maxlen: 24
                          154.222.254.0/24 maxlen: 24
                          154.222.255.0/24 maxlen: 24
                          154.223.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 11:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109704 (0x1ac88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  3 14:41:32 2025 GMT
            Not After : Jan  5 14:41:32 2026 GMT
        Subject: CN=69304c25-1b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:ce:c9:d2:fc:4d:07:32:eb:a0:a1:54:55:
                    d7:b4:e4:68:00:1f:8d:18:87:63:24:d0:8f:39:1a:
                    70:30:e3:51:d6:41:1b:ee:fc:19:8c:e6:59:c8:7d:
                    e1:b4:62:95:9b:fc:5a:ac:93:c4:44:a8:5b:5c:a7:
                    37:e3:f8:d8:d5:c9:24:4e:e2:36:e5:0e:13:4c:7c:
                    9c:80:c9:ef:e1:f1:fc:7e:97:43:7d:3c:0e:f7:95:
                    0c:5f:02:08:ba:46:cb:c2:77:2a:d3:12:e8:21:e3:
                    c0:a3:b9:cb:6c:a1:11:1c:ef:7a:87:44:fb:e8:01:
                    66:79:03:c3:f4:3e:0d:cc:5d:48:40:11:82:bc:76:
                    e7:4d:9c:c6:03:c2:09:23:72:d8:d2:97:20:17:94:
                    ba:57:de:97:fc:8c:e3:1f:d9:fd:88:04:13:87:20:
                    0b:13:20:85:f8:33:47:b5:c2:26:5f:82:53:e1:74:
                    36:da:55:f8:b9:ac:cf:f4:b4:93:5d:42:73:d5:d1:
                    23:cd:5c:a6:a9:be:2d:b6:59:e4:81:81:75:c9:41:
                    49:f7:0e:13:c4:24:91:ce:81:58:c4:c3:d4:4c:72:
                    44:08:6d:2d:fd:de:f1:33:fc:af:b2:40:b0:67:59:
                    b6:76:29:20:c6:16:f7:fd:4e:11:68:41:4c:94:4f:
                    0b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AF:3D:C8:CE:5F:15:39:50:FB:78:EA:38:E6:D1:29:37:A1:C4:47
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E019A18D05611F0989CE897DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.6.0/23
                  154.222.248.0/22
                  154.222.253.0-154.222.255.255
                  154.223.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:9e:ba:96:59:30:76:75:da:ef:d7:2c:52:86:09:46:e4:bf:
         aa:0f:ae:b4:70:43:8f:8d:48:53:af:cb:d7:fe:74:7f:61:ec:
         7b:b2:4b:8a:4f:0c:2f:e7:1b:40:d0:94:38:76:f3:e0:c2:e8:
         9c:f6:e4:0c:f6:df:9b:15:f1:46:68:49:9b:a5:74:ba:55:36:
         ba:14:48:a2:f5:63:2c:32:e4:2d:f3:f6:41:99:87:ae:e1:fc:
         4e:9b:09:c3:54:a9:6c:1b:10:61:05:9b:88:ac:b3:0e:98:1a:
         38:c5:d5:a5:00:12:12:d4:9f:f5:dd:22:9f:d7:b8:80:d9:ec:
         e3:fb:f0:08:71:7c:b3:15:2e:46:46:47:42:78:d5:91:9b:98:
         ed:e3:d5:c8:a1:eb:2c:9a:0e:05:61:4c:d4:11:6b:df:2a:dd:
         ae:6c:b0:14:a1:22:f4:dc:5b:f3:85:3c:4a:ff:50:39:ee:60:
         2c:79:45:ea:7f:18:34:93:a7:7a:07:9e:ce:83:13:65:4e:e5:
         c6:33:49:46:92:32:52:b7:4e:31:26:0b:ae:f6:56:50:be:39:
         0f:72:89:70:40:3c:3c:01:88:48:db:bc:08:cd:ee:85:23:fe:
         41:ee:4b:34:3b:77:35:b9:a2:c2:bc:bc:77:47:7d:89:0e:34:
         c8:67:81:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 15:01:24 2025 by rpki-client