This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6211308BF2C11F0879BF393DAE4EC9C.roa
File:                     D6211308BF2C11F0879BF393DAE4EC9C.roa (raw, json)
Hash identifier:          vholsVpDem86y07cBhGHq+n8DBoS7KK6Yoa+tRZoQRA=
Subject key identifier:   2B:38:BF:3B:AE:AC:01:B7:A4:45:E5:6C:E1:D6:2F:D7:1A:D2:3C:BA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A879
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6211308BF2C11F0879BF393DAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 18:32:58 +0000
ROA not before:           Tue 11 Nov 2025 18:32:47 +0000
ROA not after:            Tue 23 Dec 2025 18:32:47 +0000
asID:                     63969
IP address blocks:        154.89.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108665 (0x1a879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 11 18:32:47 2025 GMT
            Not After : Dec 23 18:32:47 2025 GMT
        Subject: CN=6913815a-3569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:ea:be:24:76:b4:2c:28:c0:12:ed:73:be:
                    3a:aa:96:5b:7f:5c:e5:3c:5a:5a:e6:63:e2:98:0d:
                    f7:ce:8f:bf:3f:95:91:75:05:33:fb:0d:65:13:10:
                    b2:76:87:5e:87:66:63:32:10:2a:53:46:ea:af:37:
                    c2:6f:08:c1:a2:60:a9:97:65:21:aa:2a:b2:04:2e:
                    15:e7:4e:e1:4e:3d:36:ee:06:b3:db:ed:64:a2:29:
                    3b:ee:92:98:7d:3e:65:61:f3:c5:3a:9c:5c:ed:57:
                    fb:90:b9:3c:69:f5:f9:01:2a:7f:a2:f5:84:5a:72:
                    68:6a:26:71:d8:27:eb:b1:e1:d3:a8:0c:2d:c4:0f:
                    b3:b5:f9:7d:20:50:1e:cb:67:77:86:22:9a:f5:4a:
                    1f:3d:b2:26:6c:41:14:b6:92:b2:84:78:57:ff:62:
                    a9:72:06:cc:4c:ed:bb:92:6d:ba:21:dc:b3:eb:20:
                    a8:82:c4:89:a5:33:28:8a:be:99:3b:92:b4:68:cd:
                    5a:b7:9d:ca:c1:76:16:da:41:ad:2d:d8:90:e4:89:
                    3d:c9:6c:be:95:b4:c1:ac:aa:3d:de:7c:60:00:db:
                    e5:ee:19:d3:b0:a1:0c:00:c1:66:20:4e:9d:9a:0f:
                    63:0c:b2:dd:39:53:a0:5e:d2:3c:cc:67:64:e1:1e:
                    61:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:38:BF:3B:AE:AC:01:B7:A4:45:E5:6C:E1:D6:2F:D7:1A:D2:3C:BA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6211308BF2C11F0879BF393DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:2e:f5:e3:72:ef:f8:d1:91:0b:34:9a:51:a9:62:8c:88:90:
         93:ab:16:4d:f0:99:a2:7d:65:f1:c7:c9:f2:6e:a0:9f:ee:a6:
         80:b9:a1:c0:9d:10:a9:3e:aa:c2:e5:c2:59:5b:dc:11:96:b9:
         15:03:06:0a:5e:1b:ec:ca:ce:75:2c:8a:1a:40:db:32:f2:79:
         3c:d4:91:75:e1:de:1d:f5:10:00:9e:16:f0:1d:a3:b7:97:b9:
         ce:3d:6a:35:e6:42:4b:6b:a1:4a:1d:3f:79:39:ea:0c:8d:81:
         a7:22:9f:e4:62:7c:86:2d:fa:d2:6a:1f:2a:8c:3b:5c:d5:4c:
         d9:90:27:42:eb:78:3d:cc:ba:ce:28:ed:7c:1d:f4:c2:af:52:
         e0:55:36:7a:36:29:68:d3:1f:92:a8:f2:92:80:20:1b:2e:46:
         53:6a:f0:48:f2:99:14:e3:36:72:d9:53:50:c2:e5:bc:09:f0:
         86:d6:72:29:bd:a0:a3:a7:2d:fe:49:6a:ac:7c:3a:3e:ed:1b:
         91:30:60:d4:ec:18:2d:4b:d9:fa:dd:64:e2:f6:b1:6b:2e:3f:
         bf:c4:0b:2b:d6:97:b3:59:51:c8:7f:a8:2e:18:6d:8b:d1:94:
         4d:fb:4e:0a:7a:4f:63:bd:dd:90:84:7c:4d:f6:52:b3:13:3a:
         f9:71:8d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:07 2025 by rpki-client