This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4E662B8BF0511F09CAA7EA2DAE4EC9C.roa
File:                     C4E662B8BF0511F09CAA7EA2DAE4EC9C.roa (raw, json)
Hash identifier:          Q2SyMJEWUmjCgwWGkruKFD3Cq75tra9rCUYVK6xmjho=
Subject key identifier:   57:33:C4:B7:77:45:92:4A:7D:D9:9F:CC:D6:0F:A4:C1:50:6F:BF:89
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A854
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4E662B8BF0511F09CAA7EA2DAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 13:53:15 +0000
ROA not before:           Tue 11 Nov 2025 13:53:09 +0000
ROA not after:            Sun 14 Dec 2025 13:53:09 +0000
asID:                     17561
IP address blocks:        154.200.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108628 (0x1a854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 11 13:53:09 2025 GMT
            Not After : Dec 14 13:53:09 2025 GMT
        Subject: CN=69133fcb-df9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:82:19:96:80:21:2d:9e:7b:14:30:5e:8e:
                    bd:b0:1f:da:e5:71:85:e5:b8:41:ad:2e:dd:6c:bf:
                    f6:c2:a7:38:e6:a2:de:79:1b:9f:13:d9:41:59:42:
                    58:5b:20:1f:8b:40:2c:ae:3c:d0:83:2c:b3:a9:a6:
                    8f:05:42:e1:3b:ce:40:05:fb:92:ff:e9:9a:b6:50:
                    db:07:15:73:28:a1:35:a3:fc:40:ab:cd:2a:a2:91:
                    4d:8d:67:3a:b3:69:73:26:09:80:13:ca:6a:ef:de:
                    90:af:ae:6e:6d:89:1b:f8:0f:6b:c3:fb:55:e3:11:
                    67:23:c4:5e:2f:10:6e:40:84:ae:47:83:03:ff:48:
                    7c:0d:42:01:26:e0:b8:b3:0e:14:d2:11:96:58:c8:
                    d0:c9:ad:b1:0b:f2:73:37:7a:22:6e:2b:80:13:4a:
                    27:f9:66:ba:bb:79:f9:c1:9b:1c:63:32:d6:fa:3b:
                    a3:34:78:1a:1f:2f:9b:1e:79:37:5d:02:c1:94:b6:
                    24:89:9b:55:2d:19:8a:c5:8c:7f:1c:2d:da:29:58:
                    f1:59:75:a6:2d:06:f4:f1:a6:56:99:18:89:80:9b:
                    54:8e:32:24:6e:cc:a2:f9:8c:e7:2e:0c:63:67:f8:
                    de:49:b2:ba:ce:1f:cf:cd:52:bb:b8:b8:a8:3e:d8:
                    ed:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:33:C4:B7:77:45:92:4A:7D:D9:9F:CC:D6:0F:A4:C1:50:6F:BF:89
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4E662B8BF0511F09CAA7EA2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:f0:60:d7:12:71:4c:eb:43:bf:ce:fb:6c:d5:bb:bd:4f:c6:
         b9:f8:66:a9:fd:be:73:7b:6d:6f:36:03:5b:72:db:62:d9:cd:
         89:61:0c:4c:a2:3a:1e:f4:ae:98:d5:1d:eb:c1:31:a1:8a:3e:
         7b:0a:53:a8:a4:e1:ee:0a:9d:d4:45:27:00:59:4d:81:a7:dd:
         0f:0f:06:47:57:61:68:12:d7:78:39:69:3a:7b:8f:4d:7c:ca:
         6a:fb:f8:94:2d:f4:c6:9c:ed:dd:c5:b6:db:6b:66:0d:d5:e9:
         b2:73:0a:e3:d1:a3:c3:5d:d7:f0:7e:82:95:a0:3a:0e:b5:ea:
         6f:1d:86:33:ae:0d:02:95:ca:b2:4f:2f:3c:94:cd:8e:fa:34:
         e8:66:71:0a:ef:f9:39:42:c6:9e:96:e0:91:18:78:15:cd:9b:
         f4:9a:01:04:22:0a:6e:a4:7a:15:03:14:70:a7:bd:c3:0d:4e:
         cd:67:46:f2:c7:dd:b3:41:d3:2f:be:6a:58:e2:d4:05:79:4c:
         5d:f7:59:05:a5:8f:71:ec:03:ad:62:0f:c8:06:fd:fe:2e:04:
         a8:86:da:2a:0b:9a:b3:7f:5d:c1:4e:0f:da:e1:c1:57:1e:81:
         fc:68:ea:10:ab:6d:cc:a9:6d:b6:0c:28:f0:f5:da:e4:f3:b4:
         1b:a0:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:24:58 2025 by rpki-client