This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9046111CDF1111F0800E837FDAE4EC9C.roa
File:                     9046111CDF1111F0800E837FDAE4EC9C.roa (raw, json)
Hash identifier:          p0Lpsf8oJlqN+HewtFsXgljuAp/ovhvct994SPK7gNU=
Subject key identifier:   DC:6B:DE:9D:6F:67:F2:8B:6F:98:8C:C8:F2:45:67:03:DD:66:B2:50
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AFDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9046111CDF1111F0800E837FDAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 08:38:18 +0000
ROA not before:           Mon 22 Dec 2025 08:38:13 +0000
ROA not after:            Sat 27 Jun 2026 08:38:13 +0000
asID:                     395886
IP address blocks:        154.84.32.0/21 maxlen: 24
                          154.84.40.0/21 maxlen: 24
                          154.84.48.0/21 maxlen: 24
                          154.84.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110556 (0x1afdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 22 08:38:13 2025 GMT
            Not After : Jun 27 08:38:13 2026 GMT
        Subject: CN=6949037a-0030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8f:94:3a:db:77:8e:6c:8a:b4:16:a8:19:c5:
                    74:32:2e:4d:fd:c1:76:a5:32:96:4e:99:5d:ee:8a:
                    f2:ca:2b:d8:91:3e:8a:02:af:a4:bb:af:f4:c1:bc:
                    51:32:30:69:0f:24:f8:63:4e:48:96:cf:e3:be:b3:
                    91:7a:fb:62:36:fd:e6:7f:a7:07:b2:f4:6b:aa:52:
                    88:db:2d:54:b9:16:72:36:e0:70:52:18:12:91:02:
                    5e:09:af:a1:ad:d5:c1:16:ca:c3:ee:a4:ef:da:f9:
                    3b:8c:87:d1:32:b8:1a:fe:be:cd:21:d3:e6:2f:0e:
                    47:41:4a:9e:40:d0:cc:23:99:ea:d4:0f:42:d4:5e:
                    49:50:43:63:46:05:18:27:d6:07:03:13:0e:5a:2a:
                    83:07:9c:bf:b0:0e:74:8a:af:e9:30:33:23:f1:5a:
                    69:7b:d7:c7:f2:58:d4:b6:bb:9b:53:3c:7f:17:f3:
                    42:50:dd:73:76:7a:b7:f3:8b:c8:3e:ba:44:25:59:
                    3e:a1:d0:fe:5f:c0:96:be:41:de:4b:dd:29:00:d5:
                    e8:77:a1:34:bb:78:89:63:65:1b:97:97:83:f0:27:
                    65:f8:5f:79:b4:48:61:e6:b0:c9:d5:e4:e1:b3:86:
                    de:db:75:dd:5b:65:89:85:a5:b4:5e:d2:77:c2:1d:
                    13:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6B:DE:9D:6F:67:F2:8B:6F:98:8C:C8:F2:45:67:03:DD:66:B2:50
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9046111CDF1111F0800E837FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c5:e7:76:97:a0:dc:5d:91:7b:e8:28:ef:51:44:e0:5e:ab:6b:
         82:36:c6:38:f1:8d:95:2c:85:d4:22:24:43:e8:83:72:ac:6d:
         8b:37:40:02:13:84:de:f0:d9:aa:9f:56:45:5b:46:a3:8d:28:
         46:0f:ae:0c:8f:80:32:09:26:0b:11:72:f5:f9:87:63:a6:fe:
         f6:83:c2:1f:47:35:ce:ab:ca:53:93:61:40:be:c6:34:b1:63:
         d7:3d:08:a4:1c:65:c6:2a:8c:7a:29:56:6a:78:41:e2:0f:9e:
         aa:2d:e0:26:9a:17:e0:c9:e2:d9:58:6d:69:76:33:97:30:67:
         cb:10:9e:80:e2:ce:fa:43:c8:ee:3d:d6:b2:d0:f4:0e:c0:4b:
         d0:fe:0c:78:9b:c7:76:08:ae:61:37:3f:7c:4c:95:8b:2d:bf:
         c2:cc:1b:6f:10:eb:7c:ca:30:d1:22:4f:22:00:93:b2:79:c1:
         ad:02:2d:0c:20:96:64:c3:4c:3d:52:77:fb:65:bf:79:2c:62:
         da:4f:14:b5:d8:e9:52:ec:56:2a:0d:4e:c7:ad:77:7b:d2:5a:
         c9:97:4a:e5:81:56:b2:a8:5c:23:a3:e1:f1:c4:c2:e5:f0:19:
         e3:5f:44:b8:a6:d0:84:48:5e:6d:e1:eb:38:d2:89:61:bd:71:
         a7:0f:1b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:38:05 2025 by rpki-client