This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DC13412CC5211F09E19C0F0DAE4EC9C.roa
File:                     7DC13412CC5211F09E19C0F0DAE4EC9C.roa (raw, json)
Hash identifier:          7m7asvbLtlg/ItOGSTauu2u9t/PKlnufHQDAkqVx+qk=
Subject key identifier:   5D:0A:E6:E7:9D:CC:59:9B:7E:45:BB:72:27:CD:97:D4:44:B4:24:9D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DC13412CC5211F09E19C0F0DAE4EC9C.roa
Signing time:             Fri 28 Nov 2025 12:05:12 +0000
ROA not before:           Fri 28 Nov 2025 12:05:05 +0000
ROA not after:            Thu 18 Dec 2025 12:05:05 +0000
asID:                     399077
IP address blocks:        154.91.64.0/24 maxlen: 24
                          154.91.65.0/24 maxlen: 24
                          154.91.66.0/24 maxlen: 24
                          154.91.67.0/24 maxlen: 24
                          154.91.68.0/24 maxlen: 24
                          154.91.69.0/24 maxlen: 24
                          154.91.70.0/24 maxlen: 24
                          154.91.71.0/24 maxlen: 24
                          154.91.72.0/24 maxlen: 24
                          154.91.73.0/24 maxlen: 24
                          154.91.74.0/24 maxlen: 24
                          154.91.75.0/24 maxlen: 24
                          154.91.76.0/24 maxlen: 24
                          154.91.77.0/24 maxlen: 24
                          154.91.78.0/24 maxlen: 24
                          154.91.79.0/24 maxlen: 24
                          154.91.80.0/24 maxlen: 24
                          154.91.81.0/24 maxlen: 24
                          154.91.82.0/24 maxlen: 24
                          154.91.83.0/24 maxlen: 24
                          154.91.84.0/24 maxlen: 24
                          154.91.85.0/24 maxlen: 24
                          154.91.86.0/24 maxlen: 24
                          154.91.87.0/24 maxlen: 24
                          154.91.88.0/24 maxlen: 24
                          154.91.89.0/24 maxlen: 24
                          154.91.90.0/24 maxlen: 24
                          154.91.91.0/24 maxlen: 24
                          154.91.92.0/24 maxlen: 24
                          154.91.93.0/24 maxlen: 24
                          154.91.94.0/24 maxlen: 24
                          154.91.95.0/24 maxlen: 24
                          154.91.96.0/24 maxlen: 24
                          154.91.97.0/24 maxlen: 24
                          154.91.98.0/24 maxlen: 24
                          154.91.99.0/24 maxlen: 24
                          154.91.100.0/24 maxlen: 24
                          154.91.101.0/24 maxlen: 24
                          154.91.102.0/24 maxlen: 24
                          154.91.103.0/24 maxlen: 24
                          154.91.104.0/24 maxlen: 24
                          154.91.105.0/24 maxlen: 24
                          154.91.106.0/24 maxlen: 24
                          154.91.107.0/24 maxlen: 24
                          154.91.108.0/24 maxlen: 24
                          154.91.109.0/24 maxlen: 24
                          154.91.110.0/24 maxlen: 24
                          154.91.111.0/24 maxlen: 24
                          154.91.112.0/24 maxlen: 24
                          154.91.113.0/24 maxlen: 24
                          154.91.114.0/24 maxlen: 24
                          154.91.115.0/24 maxlen: 24
                          154.91.116.0/24 maxlen: 24
                          154.91.117.0/24 maxlen: 24
                          154.91.118.0/24 maxlen: 24
                          154.91.119.0/24 maxlen: 24
                          154.91.120.0/24 maxlen: 24
                          154.91.121.0/24 maxlen: 24
                          154.91.122.0/24 maxlen: 24
                          154.91.123.0/24 maxlen: 24
                          154.91.124.0/24 maxlen: 24
                          154.91.125.0/24 maxlen: 24
                          154.91.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109326 (0x1ab0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 28 12:05:05 2025 GMT
            Not After : Dec 18 12:05:05 2025 GMT
        Subject: CN=69298ff8-6ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:70:8c:53:26:95:47:6a:20:a1:b9:40:fd:
                    80:00:41:23:14:6a:ef:13:28:b0:bd:54:84:89:c6:
                    87:65:6e:d2:38:30:64:bc:23:08:28:f7:95:07:68:
                    be:ff:91:6f:d8:bf:64:da:85:21:a3:f9:f8:f2:c5:
                    d9:3c:07:9b:22:ae:ae:6b:ba:a6:b8:15:32:ab:28:
                    66:20:28:33:00:20:b1:35:9a:c0:bf:8f:67:7d:83:
                    0b:47:db:1d:20:13:34:4d:22:0c:93:b0:72:42:80:
                    df:97:61:e2:23:9a:fc:96:51:0e:1b:33:76:20:0d:
                    8d:13:f4:a9:97:30:44:04:26:94:a9:11:6c:3b:87:
                    c8:18:be:02:e4:aa:9a:b5:31:0a:3c:ab:a3:93:5d:
                    09:2e:87:0c:d7:7a:46:e0:c5:50:77:56:41:6b:2c:
                    80:9f:44:f7:59:34:06:94:14:45:91:39:42:a8:4e:
                    59:4c:56:4b:6b:c7:32:04:d6:d3:af:a2:fa:85:73:
                    50:bf:6b:91:07:b1:2b:0b:94:d0:e2:1c:62:39:5d:
                    3c:10:9f:d5:7f:4f:89:3d:f2:72:16:3e:55:4b:34:
                    6d:95:27:8a:80:c3:be:85:b5:4e:82:2d:6a:04:ec:
                    44:8f:a0:e5:d3:cb:46:5f:ab:c3:d6:56:fd:e7:d1:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0A:E6:E7:9D:CC:59:9B:7E:45:BB:72:27:CD:97:D4:44:B4:24:9D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DC13412CC5211F09E19C0F0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.64.0-154.91.126.255

    Signature Algorithm: sha256WithRSAEncryption
         9d:5e:c6:ae:6d:4c:72:8c:4e:06:fd:99:05:69:ac:99:74:7d:
         93:80:eb:0a:93:ba:9c:f4:89:52:ae:d3:83:45:c5:4b:e0:46:
         db:98:30:46:73:4e:0b:a0:6e:44:54:99:c5:0a:62:ca:7d:6e:
         a4:da:9d:a4:f4:7e:70:c9:c2:29:8d:0f:87:9b:83:8a:3b:c2:
         47:d2:33:f2:be:e8:d2:b9:de:30:d4:91:56:e5:fa:88:20:24:
         79:1f:b4:3f:d5:3a:33:b9:55:cb:7e:a4:ba:9a:77:54:e8:70:
         dd:5e:67:b4:bf:2e:dc:1a:1e:b7:8b:5c:6e:c2:70:ce:36:51:
         e2:62:a7:2d:0e:4f:c7:2e:6b:55:24:aa:5e:30:74:0d:55:31:
         bb:f6:88:a6:ca:22:51:d5:c0:01:2c:61:75:80:3c:51:f4:73:
         68:8d:7a:f6:a7:84:e6:3f:fa:27:52:5d:67:92:50:51:62:6a:
         0e:1c:56:3a:68:cd:16:a9:b1:37:f7:35:da:07:9e:6c:f8:b9:
         62:b3:2b:ad:78:0d:2b:04:f6:ee:84:36:51:9c:97:55:73:e5:
         e4:49:de:e9:63:d0:5c:87:87:f7:4f:11:c8:bc:3f:6a:bf:d0:
         8c:c7:c8:12:6a:39:7d:2f:38:1d:4a:e8:5c:07:9f:d4:6c:c8:
         66:92:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:24:46 2025 by rpki-client