This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BBBDC06BB0211F0A1AF62CEDAE4EC9C.roa
File:                     6BBBDC06BB0211F0A1AF62CEDAE4EC9C.roa (raw, json)
Hash identifier:          xycKvHwcS7Aw23WAK+aCADmpJRI8jwZupy90o81prDU=
Subject key identifier:   A9:00:6A:BC:7A:36:C8:FB:A8:42:14:0D:40:D4:7F:A9:BC:84:D1:B5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A7AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BBBDC06BB0211F0A1AF62CEDAE4EC9C.roa
Signing time:             Thu 06 Nov 2025 11:19:12 +0000
ROA not before:           Thu 06 Nov 2025 11:19:08 +0000
ROA not after:            Sat 10 Oct 2026 11:19:08 +0000
asID:                     38264
IP address blocks:        154.198.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108462 (0x1a7ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  6 11:19:08 2025 GMT
            Not After : Oct 10 11:19:08 2026 GMT
        Subject: CN=690c8430-c41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:54:ca:e1:9d:aa:a6:f8:f2:51:ec:20:a1:
                    c8:8b:b6:c7:53:14:07:69:fe:c5:b9:95:12:bf:a8:
                    12:d0:bc:f1:4f:fa:5c:2d:4d:98:ca:7f:0a:01:d1:
                    86:b8:f6:24:43:86:4e:84:fa:9c:95:0d:90:eb:48:
                    0f:77:c8:58:bb:dd:19:f8:cc:3d:aa:1d:2b:33:b4:
                    4f:b5:9c:96:85:3a:b4:54:5e:4f:af:5d:a6:01:c9:
                    57:f1:6f:80:4c:f2:0f:db:b7:50:de:a0:39:be:be:
                    3f:f8:15:d3:b6:34:21:e4:66:f7:e2:a8:50:07:e1:
                    a4:c4:70:a1:3b:41:f4:fe:fd:e9:e2:41:ad:65:f8:
                    f6:ca:d5:e8:a2:72:27:8e:ec:5d:f3:73:9f:f5:0b:
                    fd:f1:e1:8f:86:4a:4c:26:f4:41:32:2a:e5:42:82:
                    74:15:1f:77:eb:8e:27:0e:5b:dc:ac:ad:16:da:e6:
                    85:b7:21:b8:ce:aa:bf:b6:62:e0:33:12:0f:36:15:
                    ed:9e:71:43:c3:a4:26:25:b7:b0:54:bc:c8:e4:59:
                    f4:3c:c3:2e:b6:1b:5b:ef:28:18:50:3e:4c:85:74:
                    13:ba:8b:ed:fa:a3:95:b3:48:79:2e:f9:59:85:86:
                    23:5e:34:67:18:bd:1a:ff:4c:71:42:f2:b3:7d:bf:
                    61:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:00:6A:BC:7A:36:C8:FB:A8:42:14:0D:40:D4:7F:A9:BC:84:D1:B5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BBBDC06BB0211F0A1AF62CEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:ab:b9:37:4e:3d:1b:13:3e:cc:e9:dd:7b:02:80:b6:62:4f:
         20:0a:81:94:25:7b:c5:77:17:6c:5a:fc:cc:be:a2:23:f8:9f:
         39:01:7f:15:57:35:b4:16:64:7e:82:b8:49:42:46:a9:16:8b:
         c2:42:6f:64:cc:8f:52:44:2f:ea:25:20:41:10:5a:26:d9:96:
         3f:5b:50:31:22:cf:28:5f:f8:f4:d8:fa:73:fe:a0:84:4a:1b:
         d1:6f:6b:a3:53:6d:c5:6b:d1:d6:a5:e0:16:3a:9f:c9:75:28:
         ed:2f:72:bd:a8:01:34:aa:54:73:57:82:02:70:15:ac:cd:84:
         f7:7f:90:5e:b3:0a:38:48:82:05:50:39:2f:2d:1c:9c:4f:5b:
         05:64:70:54:0c:4e:9d:17:2a:69:f5:4b:af:aa:6a:41:b7:80:
         7a:8a:08:9e:fa:2c:16:42:23:cf:c1:d5:85:0c:99:1f:96:a5:
         c6:92:e2:66:aa:c0:c9:85:ac:66:ea:6e:08:46:9b:e6:d7:e3:
         74:39:ff:bb:a1:69:5b:76:f6:5d:9a:90:60:1a:12:95:43:2f:
         90:02:b8:2c:b2:10:1c:7e:0a:7d:52:bb:f4:9a:4e:4b:7d:e8:
         ac:0d:3c:7f:26:99:d2:9c:96:8a:64:4b:fb:e1:05:e7:18:a9:
         dc:aa:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:07:13 2025 by rpki-client