This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A63720CF6B11F096D5A1D6DAE4EC9C.roa
File:                     61A63720CF6B11F096D5A1D6DAE4EC9C.roa (raw, json)
Hash identifier:          M9U8R60NHBnnuu1gDw041gsrJJ0/8H0fXPV6n8/EFEQ=
Subject key identifier:   15:96:BF:21:7D:2D:6D:ED:9C:6B:8D:4B:F6:F8:2E:47:C3:ED:64:F4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB83
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A63720CF6B11F096D5A1D6DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 10:40:56 +0000
ROA not before:           Tue 02 Dec 2025 10:40:49 +0000
ROA not after:            Sat 03 Jan 2026 10:40:49 +0000
asID:                     17497
IP address blocks:        154.196.140.0/24 maxlen: 24
                          154.196.142.0/24 maxlen: 24
                          154.196.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109443 (0x1ab83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  2 10:40:49 2025 GMT
            Not After : Jan  3 10:40:49 2026 GMT
        Subject: CN=692ec238-a11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9e:1b:28:16:2d:ff:14:3c:df:e3:da:bb:20:
                    b6:3e:c8:ad:d3:de:75:11:2a:3a:58:28:08:bb:f0:
                    f1:ae:63:4d:68:04:ff:5d:a6:db:2c:a2:4c:ad:8b:
                    88:b5:5c:7a:45:59:44:d3:e3:18:93:8c:49:70:ba:
                    93:61:e0:9d:75:14:9b:d5:fc:dc:b0:aa:5c:16:f8:
                    22:35:84:8a:48:30:89:eb:ad:5f:0d:8d:f5:f3:0e:
                    ef:61:e1:49:c6:96:08:16:ba:04:4a:db:f2:12:a4:
                    d2:c7:0b:9f:3e:1f:d3:ee:b2:6f:a1:39:a1:13:86:
                    10:74:b2:9e:15:37:a3:2b:da:f9:0e:a3:b3:18:06:
                    23:5c:b3:ff:b3:73:6b:58:62:d9:72:b6:fc:80:9a:
                    7e:d9:f2:58:ba:2c:87:85:cd:25:fb:58:09:b7:1f:
                    7f:b5:29:64:f4:1e:63:1e:19:47:ce:6e:c2:2e:a8:
                    9c:de:0f:f0:a1:1a:44:82:b3:be:5a:aa:dc:eb:20:
                    dd:cc:c4:5e:23:d6:fe:74:8f:f4:93:f1:1f:8e:06:
                    45:e8:04:42:68:ed:ff:22:34:55:6f:1e:58:45:bc:
                    75:af:73:89:9d:c8:64:0d:34:a3:6b:7a:bd:ce:06:
                    88:02:8b:1d:75:2c:86:a3:aa:32:cf:a2:e3:31:91:
                    6b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:96:BF:21:7D:2D:6D:ED:9C:6B:8D:4B:F6:F8:2E:47:C3:ED:64:F4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61A63720CF6B11F096D5A1D6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.140.0/24
                  154.196.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:be:3b:d3:73:73:eb:b0:d4:42:ab:ba:36:ff:93:ec:82:64:
         e9:0e:4f:6a:7f:56:44:ba:f1:37:b4:73:ec:74:6f:0d:fa:55:
         1e:88:14:3a:c1:35:d8:94:fd:09:89:c3:63:01:24:36:9f:d1:
         81:69:da:d4:ff:8c:78:36:a9:92:b0:f5:d8:24:4c:13:c0:66:
         e0:62:9f:2f:15:cb:9f:2f:6f:ad:63:3c:04:48:25:ec:4f:9f:
         76:de:d5:14:26:95:23:b7:15:ea:e5:ae:0c:9c:41:04:b4:62:
         5c:17:c4:fa:80:b8:e0:8b:81:86:cc:42:af:49:a6:40:73:2e:
         1b:f2:de:70:a8:f6:a8:79:b3:f0:ae:39:eb:1f:60:a1:aa:66:
         27:1b:6d:48:99:80:89:d0:53:2b:60:0b:aa:da:2a:16:be:f0:
         22:7a:be:ba:40:13:a8:ff:ae:bc:b2:bf:28:2e:42:e3:a5:88:
         a3:2e:94:9b:ae:6e:c9:fa:d0:27:0a:23:33:c4:b3:eb:09:31:
         b6:b7:b8:f4:c4:15:da:a7:49:6f:54:b7:8a:71:86:ad:82:23:
         72:35:cc:d4:1d:3b:34:43:0b:65:19:d3:13:c0:3f:12:73:f3:
         0d:06:7f:66:a7:fc:f3:72:40:8e:a7:dd:1c:4f:85:ba:c3:31:
         3f:7f:78:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:33 2025 by rpki-client