This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D4F03FAD01611F093769E90DAE4EC9C.roa
File:                     4D4F03FAD01611F093769E90DAE4EC9C.roa (raw, json)
Hash identifier:          eRATaLRHjOBfVwUUN0LbWBCVqqvicuvDz/lhKYb3hg8=
Subject key identifier:   D9:6E:40:FB:A4:B0:33:B9:D3:92:20:BC:FE:A6:EE:CD:48:F1:90:2F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ABFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D4F03FAD01611F093769E90DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 07:04:29 +0000
ROA not before:           Wed 03 Dec 2025 07:04:16 +0000
ROA not after:            Fri 02 Jan 2026 07:04:16 +0000
asID:                     984
IP address blocks:        154.82.132.0/24 maxlen: 24
                          154.82.135.0/24 maxlen: 24
                          154.90.133.0/24 maxlen: 24
                          154.95.2.0/24 maxlen: 24
                          154.95.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109564 (0x1abfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  3 07:04:16 2025 GMT
            Not After : Jan  2 07:04:16 2026 GMT
        Subject: CN=692fe0fd-41fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5b:b5:29:3f:e7:f5:03:26:99:91:c6:f3:fb:
                    6d:0b:3b:7a:09:68:9b:67:04:2d:c6:b3:06:b7:35:
                    6a:f0:d3:7d:a0:8e:0f:91:e9:2f:cd:35:34:a9:cd:
                    d3:cd:e7:96:50:c5:e1:55:77:b6:96:73:2a:bf:a6:
                    40:9c:6e:10:34:cd:ee:fb:71:c8:d7:5b:5c:07:0e:
                    82:04:0d:a4:b9:9e:62:d3:72:04:a6:ad:fa:42:51:
                    53:11:b6:1b:63:d5:4e:70:e2:23:86:b4:cb:dc:f6:
                    25:1e:6a:9c:6e:a1:46:62:e4:85:78:d1:e9:40:80:
                    8c:5e:eb:a6:9e:ca:5a:74:82:fa:bf:44:37:f3:d4:
                    d1:ea:38:0c:ee:31:0b:ea:9c:3e:62:0c:d2:71:90:
                    d3:75:69:80:c3:f3:bd:88:fb:df:79:a4:18:db:82:
                    af:0f:a6:1c:91:8e:bc:db:e3:02:3c:f4:cb:7e:b0:
                    53:d6:e7:18:06:50:51:f4:cd:2e:f6:30:26:14:b2:
                    b9:f9:a0:5c:c6:39:98:76:6d:af:bf:ea:88:fe:6b:
                    ff:6b:b2:f2:d2:10:a5:a0:74:00:f4:d2:b5:be:ce:
                    de:f6:da:44:4e:9a:3e:ab:33:ee:70:a9:96:6c:68:
                    a9:ca:f3:ec:20:67:e9:f0:45:e8:79:af:2b:f7:e4:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6E:40:FB:A4:B0:33:B9:D3:92:20:BC:FE:A6:EE:CD:48:F1:90:2F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D4F03FAD01611F093769E90DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.132.0/24
                  154.82.135.0/24
                  154.90.133.0/24
                  154.95.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:61:03:12:61:82:1c:a4:da:3e:34:d6:8f:ae:60:15:a5:b5:
         67:8f:f8:a8:dd:90:72:46:66:46:6b:75:86:d7:63:3e:13:a6:
         76:db:71:a7:df:55:21:7a:4f:d3:d8:21:e8:06:39:14:e3:56:
         a2:41:d1:98:14:5d:4f:ef:7d:b0:94:94:fa:cb:dd:9d:27:b0:
         e8:23:12:aa:61:5f:0a:0f:63:5b:b8:b8:c1:46:05:c5:66:21:
         5e:2c:ad:d2:e9:32:27:28:33:c2:3e:4b:7a:f7:c1:7a:a0:e2:
         b4:b5:82:1a:77:2f:6e:01:dc:83:36:27:8d:2e:c6:60:4e:0d:
         7a:5d:04:7b:11:e7:12:ab:3b:c5:f4:6d:fc:71:c0:07:8f:13:
         59:cd:23:8b:8d:0e:c5:96:7f:40:23:e9:d5:83:17:ca:5d:28:
         75:e9:0c:6e:aa:91:c6:88:04:3b:85:aa:8d:5b:dd:db:01:af:
         d9:5a:54:1d:17:b2:0b:65:fa:18:43:1f:bd:90:aa:9c:a6:9f:
         ae:6e:57:8f:32:e6:a7:68:af:8d:ff:22:25:af:0e:d4:6f:d9:
         8c:76:20:54:4c:a6:55:79:e2:3e:28:32:54:a1:fa:a2:07:2c:
         ba:e7:70:16:61:e6:c1:0e:e7:1f:ce:85:e6:c9:4c:78:63:68:
         f9:51:64:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:14 2025 by rpki-client