This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D8BBB6CC2511F0B12E5ADDDAE4EC9C.roa
File:                     E4D8BBB6CC2511F0B12E5ADDDAE4EC9C.roa (raw, json)
Hash identifier:          ygKq3WNSaQAXYcrGo2KYVeWFH+lzg9voDn/rOnCw2gQ=
Subject key identifier:   1B:19:B4:83:73:6E:E7:C6:3B:EF:56:BF:8B:E7:08:64:DD:5D:17:61
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AAE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D8BBB6CC2511F0B12E5ADDDAE4EC9C.roa
Signing time:             Fri 28 Nov 2025 06:45:58 +0000
ROA not before:           Fri 28 Nov 2025 06:45:53 +0000
ROA not after:            Sat 06 Dec 2025 06:45:53 +0000
asID:                     4760
IP address blocks:        154.213.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109284 (0x1aae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 28 06:45:53 2025 GMT
            Not After : Dec  6 06:45:53 2025 GMT
        Subject: CN=69294526-c3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:d2:04:be:f1:3a:7e:06:a3:32:b6:96:91:
                    7e:d5:68:5e:31:14:1b:b7:18:87:0d:c4:4a:8e:62:
                    23:08:38:02:f0:e0:bd:e8:84:34:8c:f4:f4:0d:28:
                    ed:ff:7e:f0:31:e4:c4:d5:a6:44:69:f6:a5:67:95:
                    65:64:03:e6:47:91:c5:eb:1e:c3:8a:35:70:68:8f:
                    1d:0f:c7:f9:f0:d7:c6:6e:23:8d:d7:aa:78:f5:71:
                    ea:79:3d:8f:3d:28:0b:00:b5:a8:6b:ec:83:da:65:
                    1f:d3:68:c9:f4:f3:34:67:e1:ec:2a:9e:2f:d2:c1:
                    fa:8b:90:bf:41:d6:7c:cf:da:1e:d1:ff:74:fc:ce:
                    0d:f4:99:a5:cd:ba:69:82:9f:9d:6d:06:d9:e7:ba:
                    d9:ce:0a:82:25:ad:72:60:59:3d:97:db:e2:66:18:
                    e3:a7:5e:62:20:67:f8:d3:da:34:08:d7:2e:1f:29:
                    14:59:f7:21:e0:3b:50:62:bb:c0:8f:e8:0c:a8:d8:
                    a2:07:60:c8:f3:f5:59:2b:71:76:00:ef:54:93:83:
                    ef:17:bf:23:bf:6f:f2:67:dd:bc:f2:30:51:64:d4:
                    57:cb:1d:02:49:8d:08:78:17:54:03:e3:07:1a:bf:
                    46:1c:67:df:4d:ba:26:f2:2a:e9:2c:ba:07:a9:1e:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:19:B4:83:73:6E:E7:C6:3B:EF:56:BF:8B:E7:08:64:DD:5D:17:61
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D8BBB6CC2511F0B12E5ADDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:24:27:9c:b5:59:e1:12:60:13:61:78:c8:92:59:a5:f2:0d:
         16:14:58:31:79:e9:61:12:31:4e:94:c3:25:5d:16:f1:6a:1a:
         39:e4:b1:6b:2b:c8:34:a1:a4:e0:87:42:24:b5:06:57:2d:67:
         36:a5:19:1e:23:bd:c5:ee:81:fb:e2:f9:3a:91:cb:c1:59:27:
         3c:55:ed:61:3c:05:7a:ac:5b:23:44:f0:98:79:70:11:8c:a4:
         56:60:45:20:07:b7:bf:8f:b8:0b:39:1f:85:96:9a:0d:e3:1a:
         30:f4:cf:12:97:b8:ad:e8:db:4f:c7:00:9e:46:5f:18:91:21:
         d1:9e:f2:4f:b5:69:10:82:96:c1:fe:c8:af:42:46:74:33:9f:
         8b:91:0e:dd:cc:66:c3:07:71:1f:8d:82:95:61:13:9a:c2:18:
         dd:6c:9b:75:53:4c:25:05:cd:c2:04:5e:61:d2:14:5c:fa:c4:
         5e:73:ec:01:04:81:df:67:b8:81:16:50:02:12:25:49:d3:80:
         e3:1b:a1:7f:3f:f1:45:f3:21:cb:cd:a5:bf:f8:e5:9e:85:3f:
         94:d0:79:3c:74:65:59:c1:49:27:30:55:f4:cb:fe:51:83:41:
         93:13:09:10:fc:a7:13:d8:27:45:3f:cd:87:f2:0c:9e:16:92:
         2b:fd:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:34 2025 by rpki-client