This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C1860C4E0D611F081AD1197DAE4EC9C.roa
File:                     3C1860C4E0D611F081AD1197DAE4EC9C.roa (raw, json)
Hash identifier:          2QHFJCnUySsGzZuBpzvFbBCYQ2sjMUkmMQATeLyZrQY=
Subject key identifier:   E6:2F:88:ED:F0:15:C0:F1:CE:DC:54:33:AA:9E:A7:9E:DF:48:69:34
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B0E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C1860C4E0D611F081AD1197DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 14:38:39 +0000
ROA not before:           Wed 24 Dec 2025 14:38:34 +0000
ROA not after:            Sat 31 Jan 2026 14:38:34 +0000
asID:                     62240
IP address blocks:        154.195.141.0/24 maxlen: 24
                          154.195.142.0/24 maxlen: 24
                          154.196.68.0/24 maxlen: 24
                          154.196.70.0/24 maxlen: 24
                          154.196.76.0/24 maxlen: 24
                          154.196.77.0/24 maxlen: 24
                          154.196.78.0/24 maxlen: 24
                          154.196.79.0/24 maxlen: 24
                          154.196.80.0/24 maxlen: 24
                          154.196.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110823 (0x1b0e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 24 14:38:34 2025 GMT
            Not After : Jan 31 14:38:34 2026 GMT
        Subject: CN=694bfaef-c370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:43:66:93:41:ca:d3:ba:78:8c:96:65:d6:
                    39:c9:27:75:8d:c8:ea:73:00:74:22:0d:39:9b:3d:
                    7c:00:cc:bd:2d:6d:66:66:ff:5c:4a:73:56:87:97:
                    58:36:5e:64:8b:4b:3c:46:cd:a7:5c:0e:15:b2:92:
                    03:c8:95:af:be:2f:f1:b0:e8:66:e7:9a:a0:7c:9c:
                    8b:38:b3:df:b0:20:6d:43:e2:35:7e:29:00:19:c3:
                    c8:e7:bc:0b:fe:ab:d2:0c:f0:86:31:9f:de:9f:41:
                    7b:64:c5:1c:c8:b5:0b:02:63:f9:08:01:f5:bf:09:
                    6a:01:8b:00:1d:8e:54:de:f7:ee:e7:c6:e1:be:99:
                    6e:94:03:24:17:3a:5b:2b:7f:1b:3a:f3:2b:d9:ec:
                    cd:21:b2:a0:e1:e8:cf:c1:8d:d9:9a:70:d1:b0:92:
                    bd:3c:9d:44:f0:8f:25:1b:15:c3:1f:6d:1e:14:e4:
                    cc:20:bb:2a:a9:17:e6:2e:d9:42:f7:80:50:e1:e9:
                    8f:d6:c9:63:22:5e:c9:0c:93:c6:f2:85:da:1c:dd:
                    c9:a9:6a:9f:e7:04:1d:79:ac:e3:15:1b:d2:43:53:
                    91:bf:af:63:f4:c8:8f:07:ed:8a:49:f1:f7:95:20:
                    ff:7f:ef:93:9d:a9:a4:72:bd:fa:9e:be:0f:5c:3d:
                    a6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2F:88:ED:F0:15:C0:F1:CE:DC:54:33:AA:9E:A7:9E:DF:48:69:34
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C1860C4E0D611F081AD1197DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.141.0-154.195.142.255
                  154.196.68.0/24
                  154.196.70.0/24
                  154.196.76.0-154.196.80.255
                  154.196.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:4a:ea:c9:cb:89:8f:57:c8:6f:cc:b7:6b:d6:c1:e3:9d:cd:
         06:d7:1e:85:e6:94:86:7f:21:05:a2:9a:aa:b4:85:11:86:91:
         c9:96:69:2e:8e:6d:fe:b5:22:f5:ca:d9:0e:e7:3c:0b:01:10:
         6b:ae:43:46:44:2e:a4:80:f3:34:74:72:24:34:8d:12:97:2b:
         06:75:6b:6b:b7:ed:5c:07:77:00:01:d2:ce:0b:a7:0c:c1:61:
         81:b7:41:c5:35:71:b2:84:fa:7e:6c:88:79:c4:2a:1b:da:e1:
         39:dc:1c:26:ee:b2:c0:7f:47:b5:15:06:ec:ab:06:ae:0a:37:
         03:e3:53:4b:73:d7:70:f5:a2:55:72:43:25:97:35:5c:09:85:
         4d:b7:2f:7b:be:72:f1:92:17:ef:58:6a:62:80:86:50:e6:42:
         a7:1b:a7:80:66:d4:80:f7:a2:bf:68:80:71:fb:7a:05:dc:9d:
         c2:f0:f1:a5:c6:5a:46:a1:2d:12:9e:e2:a7:70:ef:a9:10:6a:
         ce:a3:88:0f:83:64:29:e4:55:5e:4e:f3:7a:60:fd:57:ac:7e:
         30:71:ca:cc:17:ff:16:57:71:2a:9b:22:d7:c9:41:97:7a:6f:
         bb:c1:2e:68:09:c6:95:46:2a:33:e5:b9:af:14:4e:22:8d:c1:
         8f:cd:55:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:48:46 2025 by rpki-client