This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ED98772D5BE11F0AA98FD80DAE4EC9C.roa
File:                     6ED98772D5BE11F0AA98FD80DAE4EC9C.roa (raw, json)
Hash identifier:          R+aKuym2mXCIAb7h+JYT1/1aop/xc9MVG4rgtinEdg8=
Subject key identifier:   A4:9B:97:D4:E6:00:31:B9:F9:F5:75:0A:CC:00:F8:41:4C:1F:43:1D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ADB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ED98772D5BE11F0AA98FD80DAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 11:50:33 +0000
ROA not before:           Wed 10 Dec 2025 11:50:27 +0000
ROA not after:            Fri 19 Dec 2025 11:50:27 +0000
asID:                     63139
IP address blocks:        154.203.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110006 (0x1adb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 10 11:50:27 2025 GMT
            Not After : Dec 19 11:50:27 2025 GMT
        Subject: CN=69395e89-e4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:d8:76:5b:70:e7:06:20:73:ee:42:6d:af:
                    a5:c8:a3:85:fa:71:1d:ac:d6:00:92:ed:15:70:da:
                    f4:ae:20:30:dc:87:ad:51:13:6b:f6:51:15:3f:ae:
                    f1:84:18:4a:21:48:f6:36:e1:d3:90:20:fe:1f:b1:
                    23:c7:ed:74:b9:37:ac:1d:ec:4c:34:f2:6e:13:ec:
                    b4:c7:5d:c3:12:d7:12:37:cd:a7:33:87:46:2c:e8:
                    55:06:bf:23:0e:ee:3d:0d:c2:15:b0:53:01:f5:a1:
                    6f:2b:20:c9:04:72:33:ae:44:ea:99:ee:a2:e1:7f:
                    1d:69:bb:b3:b5:89:37:5d:ca:ea:90:ad:9f:a5:20:
                    e6:45:ba:7e:44:de:8b:49:21:61:99:04:b8:77:04:
                    55:77:2b:2e:23:9c:d0:f1:68:07:c2:f3:a4:25:eb:
                    f4:ed:0e:ad:15:09:9e:32:db:14:c5:cd:00:34:f1:
                    fd:f0:b2:e7:fd:ac:51:7f:02:6f:26:56:8b:d4:e2:
                    fc:ef:be:71:fe:d0:8f:d6:91:cd:35:a9:b7:a4:b0:
                    ca:04:20:cb:70:07:60:ad:37:f8:a9:2a:e6:d5:fa:
                    d3:ee:91:09:b9:5c:aa:53:bb:60:c4:6a:bc:14:83:
                    f2:2d:8f:c4:52:24:c5:23:0b:44:d9:e2:b9:0c:70:
                    b5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9B:97:D4:E6:00:31:B9:F9:F5:75:0A:CC:00:F8:41:4C:1F:43:1D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ED98772D5BE11F0AA98FD80DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:68:34:7a:cc:31:8b:d3:b7:3d:d8:79:c1:ee:ba:d5:9e:89:
         7c:e5:7c:a8:e9:b6:0c:2d:b2:9c:41:42:0c:e0:a0:5a:81:4a:
         54:ce:bb:f6:c9:dc:6d:41:9b:07:b4:cd:0b:78:75:55:c6:9d:
         cd:aa:9b:44:a1:cd:ea:e2:7b:40:0a:a6:8a:c8:96:9c:05:5a:
         a8:8b:10:a0:11:ca:70:58:77:40:fa:90:33:32:f3:dd:d9:23:
         c5:49:23:f7:79:e3:63:7b:1b:b3:57:c8:7d:67:64:11:da:82:
         1b:ab:f8:ec:6f:ad:4f:d9:0e:b8:4c:62:42:4c:f2:6d:de:0d:
         87:41:0c:2f:5b:85:5b:aa:d3:3c:1d:30:d0:6f:b8:1b:7d:5f:
         ec:b0:46:13:e9:39:f7:fe:11:a8:ce:34:e7:d0:e6:5f:48:d2:
         5d:fc:be:85:94:f3:70:92:4f:4d:2e:bf:2a:60:ef:f3:23:51:
         13:ab:16:66:25:93:2b:16:20:ca:08:ce:c7:2e:41:d8:3d:fb:
         36:15:31:08:09:85:be:f5:57:a3:3b:49:55:32:b8:e9:7b:46:
         cf:13:19:f0:27:2c:1a:ee:cc:b0:ab:e7:b4:a4:eb:16:11:81:
         95:52:b9:ce:3d:e0:56:e0:86:00:17:51:86:91:57:83:fa:e6:
         61:9b:38:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:00:46 2025 by rpki-client