This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E09FBA74BFEE11F0BE857EDDDAE4EC9C.roa
File:                     E09FBA74BFEE11F0BE857EDDDAE4EC9C.roa (raw, json)
Hash identifier:          d95EJ7gmFN9sH9qwEWsbt7Crof9IE1Srum4sK4arvSA=
Subject key identifier:   56:D2:A7:58:06:24:97:AC:3B:B9:47:E7:6A:3E:0F:95:A9:88:50:A7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01A8BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E09FBA74BFEE11F0BE857EDDDAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 17:41:54 +0000
ROA not before:           Wed 12 Nov 2025 17:41:50 +0000
ROA not after:            Wed 18 Nov 2026 17:41:50 +0000
asID:                     150706
IP address blocks:        154.218.6.0/24 maxlen: 24
                          154.218.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108730 (0x1a8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 12 17:41:50 2025 GMT
            Not After : Nov 18 17:41:50 2026 GMT
        Subject: CN=6914c6e2-96b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:48:af:d7:c5:fb:b3:ed:a6:b0:87:c2:be:
                    63:5c:43:50:64:cf:7c:3d:99:08:c7:d7:82:e9:3f:
                    78:de:1a:8c:de:c3:6c:28:48:cb:07:52:23:92:57:
                    6f:65:c3:4f:20:34:73:b6:f7:ca:48:c4:b1:63:b2:
                    de:a0:44:19:21:1a:09:ee:b9:d0:7a:e4:2d:25:64:
                    b9:55:56:51:13:3a:5f:f1:9d:9a:d4:c6:e8:02:f3:
                    52:fd:65:cd:fc:92:ae:0d:87:a2:b9:ab:c7:5f:a6:
                    bc:8e:60:d8:39:13:a5:2b:f1:ed:ae:69:fc:7a:06:
                    a7:02:cd:61:9a:91:b6:72:b6:1c:c7:56:66:37:4d:
                    da:da:40:8b:78:60:ff:19:06:32:c6:84:c7:2c:e7:
                    69:e8:1b:66:8b:7c:45:10:8c:3b:2c:a1:ac:a3:52:
                    8f:53:1b:82:e1:f2:d2:f4:39:3b:be:09:0d:d3:75:
                    d0:30:6c:a2:44:78:52:e8:a0:29:ef:cd:47:6e:ab:
                    ea:04:3b:ea:b9:fe:da:7b:6d:57:c1:1e:dd:a9:78:
                    9b:7d:53:31:fa:ee:b1:af:97:be:97:ac:19:eb:d9:
                    98:31:0d:79:37:68:de:1d:6f:ef:95:bf:76:24:16:
                    55:b4:5d:9a:64:cd:fc:29:2f:3d:41:16:ff:b2:40:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D2:A7:58:06:24:97:AC:3B:B9:47:E7:6A:3E:0F:95:A9:88:50:A7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E09FBA74BFEE11F0BE857EDDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.218.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:35:c5:61:c5:b0:ea:8a:f8:b2:d0:3a:25:04:3b:3c:45:9b:
         24:6e:d8:13:a8:e0:50:e5:30:46:07:53:22:e5:d7:4f:3d:f5:
         36:f8:30:37:24:c6:29:91:28:9b:7f:16:30:15:37:a8:a0:c6:
         d3:f0:c9:b1:91:bd:20:bc:ba:de:9c:d6:b3:74:a9:23:e7:6f:
         80:1a:43:e5:a3:4d:d8:14:f0:db:f0:15:b8:4e:1e:66:03:48:
         7c:5a:e1:cf:83:3b:b6:4d:17:12:17:eb:2d:8e:65:b7:b3:32:
         7a:61:48:e7:45:8c:b4:9f:ab:bf:54:97:85:ab:92:c4:ac:b3:
         dc:e1:95:ce:82:18:67:c8:ae:f8:6b:61:e9:e0:76:51:7f:3a:
         ea:23:e1:c5:3b:3c:71:8e:a7:a5:72:40:c8:f1:0e:a3:48:7f:
         db:43:cb:15:c1:27:b6:5e:32:b5:17:fd:1e:c2:29:8e:f8:ec:
         d4:a7:30:1c:1f:13:6b:a5:57:fe:55:06:30:12:1c:e7:a1:af:
         fb:e1:92:b4:cf:d0:e9:6a:86:ac:a1:a4:67:2e:c6:93:97:7a:
         33:11:e8:d5:30:48:01:3c:d0:77:51:6c:f5:3f:d0:0b:41:d1:
         1f:5b:2c:8c:39:e8:97:60:3b:fd:e3:f3:50:db:6e:22:89:c7:
         03:60:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:15 2025 by rpki-client