This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0B19848C6C811F0886C3D96DAE4EC9C.roa
File:                     F0B19848C6C811F0886C3D96DAE4EC9C.roa (raw, json)
Hash identifier:          U4f0S22lNzoL5PaQB4kif181xe37ra3mA9kTKvZmWc0=
Subject key identifier:   84:16:01:C3:55:FD:DD:1B:64:B1:03:BB:03:6B:CB:29:83:F5:B4:95
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AA14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0B19848C6C811F0886C3D96DAE4EC9C.roa
Signing time:             Fri 21 Nov 2025 10:57:59 +0000
ROA not before:           Fri 21 Nov 2025 10:57:54 +0000
ROA not after:            Sat 28 Nov 2026 10:57:54 +0000
asID:                     133847
IP address blocks:        154.92.160.0/20 maxlen: 24
                          154.92.160.0/24 maxlen: 24
                          154.92.161.0/24 maxlen: 24
                          154.92.162.0/24 maxlen: 24
                          154.92.163.0/24 maxlen: 24
                          154.92.164.0/24 maxlen: 24
                          154.92.165.0/24 maxlen: 24
                          154.92.166.0/24 maxlen: 24
                          154.92.167.0/24 maxlen: 24
                          154.92.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109076 (0x1aa14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 21 10:57:54 2025 GMT
            Not After : Nov 28 10:57:54 2026 GMT
        Subject: CN=692045b6-4f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:64:20:7c:74:00:5e:99:74:91:ac:f5:1f:
                    47:c0:99:9d:06:cd:bd:69:b1:46:a3:37:be:9e:18:
                    4b:8b:e3:6d:bf:23:4d:d1:63:ae:21:45:d2:5c:dc:
                    47:8d:79:d3:1d:4a:22:db:4d:a3:39:e6:9c:05:82:
                    eb:ca:48:11:94:77:70:4c:75:e7:b0:84:a4:49:20:
                    f6:28:79:b4:c1:8d:dd:34:9a:e4:49:aa:1b:6b:a8:
                    65:9c:7a:60:2d:35:1f:4d:85:7c:aa:e3:31:9d:8a:
                    41:e8:28:2e:5e:89:19:d2:0d:4b:c0:e5:90:6e:18:
                    1e:82:1a:ce:85:b7:32:41:61:2e:d8:1f:9e:cd:8a:
                    9d:71:a1:95:6f:de:9d:aa:20:3f:7f:89:1f:5b:a7:
                    da:a2:d6:29:59:a5:f5:b1:26:23:37:75:d2:b3:79:
                    3f:60:ab:f9:6a:d2:8a:3e:b4:3c:19:f7:af:35:96:
                    23:33:20:76:62:d7:38:50:74:b7:09:22:66:5d:8e:
                    b1:7d:df:5f:70:57:d3:01:60:b0:69:73:75:0f:bd:
                    52:e0:1a:a3:06:08:d3:d8:74:a0:ca:c1:9e:b1:9f:
                    6b:d3:d2:02:8c:6f:af:ba:03:3f:24:01:47:d9:f7:
                    e7:e5:fd:a4:d3:24:a3:d1:57:4d:83:23:d2:fe:ee:
                    2d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:16:01:C3:55:FD:DD:1B:64:B1:03:BB:03:6B:CB:29:83:F5:B4:95
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0B19848C6C811F0886C3D96DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:7f:dc:b1:1b:5a:b5:9c:67:43:13:e0:eb:d0:c5:e6:cc:d3:
         6d:5f:a1:5a:b3:e4:57:c8:e7:fb:c6:3a:68:5b:09:a3:22:2b:
         6e:53:9d:76:ce:6c:b6:10:1d:97:bb:9b:ec:15:33:a0:e7:c2:
         5f:97:44:2e:89:07:36:f7:71:56:b7:8e:3e:48:21:95:3d:f3:
         fc:51:89:09:67:36:e1:92:29:f1:a7:e1:9e:f5:70:bf:79:7c:
         e1:c2:dd:6e:90:5a:03:31:2c:bc:cf:86:97:d9:fe:f9:8c:cb:
         dc:7b:49:d1:58:f8:10:59:7b:f2:ac:7b:b6:45:1d:fe:a9:55:
         21:15:be:45:91:df:34:55:eb:1b:cb:2b:e8:47:72:3f:e3:3b:
         d4:7f:56:78:3d:a8:bd:0c:05:2e:f9:40:f7:18:d3:12:3a:99:
         76:3a:8b:d9:b0:fc:37:41:de:e0:4f:cd:ec:b6:83:d8:75:33:
         25:82:8b:0b:37:aa:11:9f:6b:6f:db:83:d9:af:24:71:bc:86:
         ce:79:ed:8d:44:28:97:52:1b:97:1d:19:54:e6:28:59:9b:a2:
         62:c5:17:e1:38:14:51:33:05:f9:e2:4e:ab:3b:d2:17:62:c7:
         09:f2:fb:c9:50:7a:fe:e1:9f:e6:e1:5a:a9:83:f0:d2:83:29:
         9a:a2:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:07:08 2025 by rpki-client