This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DCECA44BF2F11F0A494CDA5DAE4EC9C.roa
File:                     7DCECA44BF2F11F0A494CDA5DAE4EC9C.roa (raw, json)
Hash identifier:          7Qy5GlOeUrAaIRECnYys42tu4MQTwaZcyGVuwCBdDwA=
Subject key identifier:   67:AE:03:50:C6:05:F8:20:7F:70:5A:12:8F:5C:F7:9D:FD:D8:1A:D2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A87F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DCECA44BF2F11F0A494CDA5DAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 18:51:55 +0000
ROA not before:           Tue 11 Nov 2025 18:51:46 +0000
ROA not after:            Fri 06 Mar 2026 18:51:46 +0000
asID:                     136744
IP address blocks:        154.211.181.0/24 maxlen: 24
                          154.211.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108671 (0x1a87f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 11 18:51:46 2025 GMT
            Not After : Mar  6 18:51:46 2026 GMT
        Subject: CN=691385cb-c7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:dc:75:6d:80:e0:ff:fd:1c:ff:2a:ac:47:
                    a8:fb:08:a7:67:0a:fc:24:73:99:b5:a2:2e:66:ba:
                    0f:67:79:e8:2a:0b:93:ae:ba:a9:76:18:c2:47:d9:
                    4c:f6:ca:62:2b:65:05:75:2f:4a:40:17:30:ad:6a:
                    4f:2e:69:8a:99:b9:e3:cc:99:78:24:7e:b8:85:c6:
                    0f:17:73:72:bd:c5:5f:ef:dd:f4:80:ee:3d:8d:a2:
                    99:c4:f4:02:a9:5d:01:5f:ba:42:12:2d:8d:12:53:
                    ce:37:f5:26:f7:dc:1f:ce:31:58:d9:4c:1e:03:91:
                    52:f1:ba:49:0b:79:6e:4b:e4:32:8e:67:cb:89:e7:
                    9f:b6:77:f8:a7:df:d3:c9:98:10:1c:13:71:22:0e:
                    d1:96:6f:79:39:69:ce:64:95:99:c1:b1:21:4a:53:
                    85:1d:95:98:4c:50:36:4b:7a:e3:d1:21:5c:78:03:
                    be:65:85:e2:c1:b5:a5:2a:e6:57:7b:35:7b:08:cc:
                    37:f7:c2:a3:39:1d:fc:56:e6:1f:c1:91:76:7d:9b:
                    d5:83:07:9c:0a:10:e3:78:c0:10:93:2e:42:f3:a5:
                    e6:11:e0:6f:3c:76:f1:a2:71:51:19:3a:dd:92:9f:
                    9d:56:6e:7c:58:ba:13:a5:94:34:05:2b:e2:1b:8e:
                    c5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AE:03:50:C6:05:F8:20:7F:70:5A:12:8F:5C:F7:9D:FD:D8:1A:D2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DCECA44BF2F11F0A494CDA5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.181.0/24
                  154.211.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:1d:3f:5c:43:07:41:7f:e5:c3:9b:1a:82:11:3f:ac:50:3a:
         0d:b6:56:bf:84:65:aa:d6:d7:41:9c:bd:94:f7:4d:bf:f0:86:
         d7:0c:97:cb:b6:ea:07:58:8b:79:38:4a:45:0c:48:df:17:65:
         2d:5e:c8:c4:9f:22:05:2d:2a:a7:5c:33:31:bc:1c:f9:fa:4b:
         d1:a9:2b:f8:17:bf:84:6b:89:9a:a2:a3:8d:bf:3c:83:e4:71:
         98:5a:5e:72:a9:3f:f0:9d:fa:29:dc:91:e5:97:da:4e:69:30:
         28:42:19:c2:db:d3:ea:05:1b:29:9c:8e:c2:fc:c7:8d:6a:50:
         52:dc:20:03:0a:26:58:d2:12:e0:3c:5c:48:2d:63:b8:4c:35:
         99:b7:a9:93:d3:2e:80:a8:36:55:ce:09:2a:d2:82:32:8d:ce:
         4e:72:64:2f:49:e5:ea:4d:e5:f1:1f:12:fa:48:49:49:05:ee:
         54:92:f8:7d:e0:90:35:94:0e:2c:a6:8c:32:8e:72:e0:f2:1d:
         77:5e:0d:aa:cc:14:3a:d3:44:77:11:6f:81:19:0d:58:08:63:
         23:27:da:0d:3b:d8:22:ad:76:6b:ff:9d:dc:d7:d8:30:83:0c:
         ea:24:4c:95:3e:2a:e4:c1:47:45:55:37:8c:13:42:dc:ba:8c:
         ac:19:fa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:24:51 2025 by rpki-client