This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A536FDF2CB8411F0AD2BB9E6DAE4EC9C.roa
File:                     A536FDF2CB8411F0AD2BB9E6DAE4EC9C.roa (raw, json)
Hash identifier:          FPn34pgCjuP6cAh/SurMOHy9xbj0AlBjoeYkZypc8vQ=
Subject key identifier:   71:7E:40:4E:6E:BC:CA:4C:0E:8D:5B:07:E9:EC:B3:93:CE:17:3E:BF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AAD5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A536FDF2CB8411F0AD2BB9E6DAE4EC9C.roa
Signing time:             Thu 27 Nov 2025 11:31:42 +0000
ROA not before:           Thu 27 Nov 2025 11:31:37 +0000
ROA not after:            Sat 03 Jan 2026 11:31:37 +0000
asID:                     214143
IP address blocks:        154.194.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109269 (0x1aad5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 27 11:31:37 2025 GMT
            Not After : Jan  3 11:31:37 2026 GMT
        Subject: CN=6928369e-9f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:79:24:c2:64:cf:de:8c:bb:4f:c4:ad:dc:
                    7d:d6:68:56:d7:38:b1:c7:e3:b4:d9:2b:97:d6:46:
                    7b:fd:39:4d:7b:68:16:e6:36:f7:04:76:91:c1:db:
                    9c:4d:f4:d8:e4:b3:d6:bc:bc:5b:a1:ee:48:19:2f:
                    12:25:01:b4:47:b5:77:7d:dc:08:82:40:31:98:16:
                    00:96:a7:78:58:7e:9d:ea:5a:e7:39:4b:4a:5a:52:
                    25:5a:a7:fc:25:18:72:18:f7:24:64:8e:2d:00:1e:
                    37:f2:27:06:1a:47:15:3a:eb:e0:c6:01:92:22:29:
                    c8:ef:14:24:85:2d:d7:59:d1:f6:f0:bf:3d:ba:04:
                    7a:99:d4:6d:b9:1d:a0:06:ab:33:39:19:60:1f:03:
                    31:5d:1f:f2:75:85:a6:b7:d8:c6:6f:74:8d:a0:ad:
                    64:66:0f:aa:91:1d:4d:7d:0b:df:7d:4b:6a:3a:0b:
                    e8:a0:4a:f3:7c:17:51:c1:48:0d:a7:e7:3b:81:76:
                    8b:03:67:d4:09:a2:5b:42:2a:86:b3:99:bf:6e:05:
                    dd:a0:61:28:10:de:48:3e:d8:73:f0:ce:73:5b:f8:
                    54:38:48:1f:51:14:dd:39:83:a9:fc:98:85:9d:4f:
                    89:b2:a6:de:07:b1:ba:45:79:e0:4b:12:08:21:bb:
                    b5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7E:40:4E:6E:BC:CA:4C:0E:8D:5B:07:E9:EC:B3:93:CE:17:3E:BF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A536FDF2CB8411F0AD2BB9E6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:21:53:ac:e8:4d:21:34:e0:60:28:73:bf:bb:f6:9d:0f:6e:
         18:87:09:8a:5d:9c:69:19:7e:73:f2:7b:6e:38:2d:e7:5d:63:
         ba:83:c3:3c:c8:eb:19:74:cd:7c:3a:ec:9c:5f:75:3e:ba:b9:
         b9:b5:d4:39:b9:1c:b7:e5:40:91:35:71:af:dc:c3:e7:cb:68:
         11:40:45:01:1e:03:97:e5:c2:ee:a0:5e:ed:54:a0:32:67:64:
         27:30:d9:11:d7:14:ff:da:02:9e:cd:bc:b4:c0:7c:ca:60:67:
         04:98:83:da:5d:20:1a:7d:b5:b0:8d:b9:18:62:78:ff:58:86:
         5f:e6:ef:6b:aa:1e:29:cb:88:b6:49:6b:18:dc:8d:23:bf:7d:
         ce:6a:52:bc:87:eb:c4:89:92:eb:75:f2:97:c9:35:7c:bd:c7:
         0c:c4:30:20:0a:fe:57:92:23:28:ca:84:94:f5:df:98:20:46:
         ed:22:76:1b:b5:c4:4f:12:c6:ea:81:8c:f9:06:90:78:6a:87:
         33:bd:d1:4d:45:7c:19:e9:a9:f1:f2:2a:20:12:6e:05:9e:94:
         01:6b:a2:86:b3:28:e9:47:f7:9d:ab:4c:7c:12:af:ee:62:78:
         16:0a:b6:d3:d4:59:ea:bd:4a:8a:ad:a7:d9:6a:3b:43:e6:39:
         4f:f5:cf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:13 2025 by rpki-client