This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D9B70F6CF9311F0BC4C1BCCDAE4EC9C.roa
File:                     4D9B70F6CF9311F0BC4C1BCCDAE4EC9C.roa (raw, json)
Hash identifier:          xoAE9z7iPk3fnNEhnljvfKXakJpzHbwJY1CHkKRefcw=
Subject key identifier:   7E:70:35:33:9F:BF:E7:C1:3B:68:D3:2B:4E:22:C2:A4:08:2F:60:00
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D9B70F6CF9311F0BC4C1BCCDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 15:26:42 +0000
ROA not before:           Tue 02 Dec 2025 15:26:37 +0000
ROA not after:            Mon 05 Jan 2026 15:26:37 +0000
asID:                     271988
IP address blocks:        154.88.160.0/20 maxlen: 24
                          154.88.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109469 (0x1ab9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  2 15:26:37 2025 GMT
            Not After : Jan  5 15:26:37 2026 GMT
        Subject: CN=692f0532-873d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:d0:94:8b:1d:88:7c:7d:da:5b:fe:12:01:
                    26:ef:89:a5:a2:5c:37:18:36:84:68:38:f4:4e:9e:
                    ba:ce:ec:34:b8:a0:25:da:2b:22:88:cb:2c:fa:d0:
                    94:1e:88:21:78:f9:c7:4e:de:95:9c:27:6f:36:c2:
                    5d:44:4b:b5:8a:57:e5:1a:d8:2c:16:d4:7c:3f:22:
                    13:b0:b1:fa:a6:c7:97:b5:40:9e:5e:9b:7a:a1:19:
                    82:31:82:ad:5e:84:8f:54:91:da:c8:b8:9f:00:6d:
                    f6:eb:f2:65:7c:cc:de:25:7e:fe:ed:de:43:78:a9:
                    85:30:9c:40:04:89:52:50:67:8a:23:22:45:ff:7a:
                    6c:31:83:69:ea:f0:95:3c:cb:40:33:54:a3:72:46:
                    c9:4b:fc:f1:7a:57:51:7a:78:50:7e:d6:ed:eb:d2:
                    ec:bd:72:4c:5d:0d:36:5d:4a:70:ba:94:72:ac:b4:
                    10:7d:25:97:36:05:25:e4:1d:22:10:86:aa:65:7b:
                    ab:bc:6f:8b:59:72:dd:68:93:9b:3a:1b:b2:77:9f:
                    d8:18:e7:76:09:71:c3:16:60:c3:c9:65:72:32:1c:
                    cc:20:b0:65:cb:f7:59:c7:78:dd:b7:93:f5:3d:90:
                    5b:90:01:bd:05:bb:87:ed:b4:c8:83:3e:c9:4b:4b:
                    b2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:70:35:33:9F:BF:E7:C1:3B:68:D3:2B:4E:22:C2:A4:08:2F:60:00
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D9B70F6CF9311F0BC4C1BCCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.160.0-154.88.179.255

    Signature Algorithm: sha256WithRSAEncryption
         af:d5:41:ad:af:63:e8:4b:be:e7:8c:9d:43:76:32:59:f2:bb:
         3c:8f:73:56:e0:ce:6e:bb:83:02:31:be:08:98:10:ef:58:06:
         98:14:e2:bf:87:fc:55:84:d1:18:a8:26:a7:35:3c:26:05:46:
         13:9f:b8:d0:6b:17:4d:bf:0d:f4:f4:9a:4d:47:7b:bc:5f:0d:
         c1:79:8b:5a:b9:f5:cb:ba:33:dc:fa:03:bb:37:57:56:ef:7e:
         b6:ef:58:6e:42:83:98:9f:f7:aa:ee:32:5e:e7:02:98:b6:bb:
         6c:2b:7c:83:bf:0f:ff:4d:7f:2e:0d:53:26:02:7b:6d:74:49:
         bc:87:09:9c:e1:ff:ca:5c:b8:04:78:30:ba:c8:01:13:87:c7:
         72:22:53:76:9c:d6:b3:85:e4:66:58:d5:07:ab:11:c0:d6:fb:
         b7:5f:9c:b9:89:db:fe:de:0e:3b:f6:83:a8:b2:d1:79:fc:61:
         f8:22:03:4f:fa:5b:44:35:d8:c6:98:ca:87:97:dc:85:a7:44:
         de:fc:b4:97:cf:b7:d2:ab:f3:1a:d8:b2:43:ee:12:f2:6f:c6:
         94:da:d2:3d:86:b0:22:9a:58:68:bc:c9:7f:56:9e:f3:67:87:
         7a:02:9a:04:d7:56:ef:a4:81:fa:c2:60:bf:1d:3c:36:0c:a4:
         94:1d:01:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:05 2025 by rpki-client