This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F36FE544CE9811F09649B0B0DAE4EC9C.roa
File:                     F36FE544CE9811F09649B0B0DAE4EC9C.roa (raw, json)
Hash identifier:          X0qHTmKE9ED8Xf1IaxA5biCCEDF5AZ5liRMxfKI+4Nw=
Subject key identifier:   2B:B1:75:53:95:F7:B9:35:51:69:A9:B0:CD:4F:4E:E0:2B:27:58:62
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AB2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F36FE544CE9811F09649B0B0DAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 09:34:37 +0000
ROA not before:           Mon 01 Dec 2025 09:34:30 +0000
ROA not after:            Wed 31 Dec 2025 09:34:30 +0000
asID:                     62240
IP address blocks:        154.195.139.0/24 maxlen: 24
                          154.195.143.0/24 maxlen: 24
                          154.195.144.0/24 maxlen: 24
                          154.195.145.0/24 maxlen: 24
                          154.195.146.0/24 maxlen: 24
                          154.195.147.0/24 maxlen: 24
                          154.195.148.0/24 maxlen: 24
                          154.195.149.0/24 maxlen: 24
                          154.195.150.0/24 maxlen: 24
                          154.195.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109354 (0x1ab2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  1 09:34:30 2025 GMT
            Not After : Dec 31 09:34:30 2025 GMT
        Subject: CN=692d612c-269c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:4a:e0:aa:65:83:3a:41:15:98:f6:8f:1a:
                    d3:1a:8f:e9:85:eb:13:ea:ab:77:03:42:d3:87:17:
                    d9:11:67:46:94:cc:1e:37:ab:69:08:b2:06:47:59:
                    95:48:68:77:e7:91:c6:bf:32:5e:a3:79:76:83:2c:
                    c8:c8:5e:e5:43:77:01:13:f5:85:80:4f:1d:8c:88:
                    b6:f3:22:34:f8:19:b2:72:c8:9b:bc:7c:9b:f8:5d:
                    a0:6c:f9:25:8a:80:a6:0b:a8:64:2f:63:29:b5:b0:
                    03:69:9e:8c:35:9c:fc:19:d2:8d:7e:68:00:7d:53:
                    57:06:81:96:71:99:40:33:44:38:92:8c:53:ea:e6:
                    8e:c9:88:2b:1b:af:b3:4c:fb:06:ac:fd:b4:b8:0d:
                    8c:1a:f5:6e:ad:48:0a:cb:e6:8b:21:c8:39:a7:a6:
                    b3:6c:e8:24:7f:83:52:de:ea:60:e6:f1:6a:9d:49:
                    67:75:8b:b6:6c:aa:4e:cb:98:1a:48:ad:76:28:a1:
                    2f:f1:0a:d9:ca:aa:a8:95:23:ab:7f:e9:33:7c:5c:
                    3d:94:d1:8d:c9:71:c4:ce:cf:1b:74:fd:37:ff:8c:
                    f2:1e:00:88:99:44:3d:ea:71:a4:3d:4f:43:08:fa:
                    7e:39:0c:9c:59:a4:05:a1:4e:13:03:4c:e5:49:65:
                    5d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B1:75:53:95:F7:B9:35:51:69:A9:B0:CD:4F:4E:E0:2B:27:58:62
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F36FE544CE9811F09649B0B0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.139.0/24
                  154.195.143.0-154.195.151.255

    Signature Algorithm: sha256WithRSAEncryption
         b3:a3:be:f5:6c:a2:dc:eb:fa:2b:9b:ca:ec:74:fe:b4:67:4b:
         95:84:fb:01:9a:34:d5:56:d0:ce:1c:0a:bf:80:cf:d2:41:8e:
         1c:b5:b0:76:8e:62:fb:77:fd:86:42:ee:3d:e1:c4:1d:bc:b8:
         3b:02:c8:0b:91:7b:2e:e0:4b:3b:40:23:e3:a8:55:e1:f3:90:
         8c:bf:89:13:78:d9:a7:69:d4:ce:c9:1f:8b:c5:72:95:0e:d7:
         25:54:88:22:71:03:61:28:63:3a:4a:16:8d:e6:5f:a3:13:98:
         a1:30:50:9f:3a:1d:57:43:87:71:13:b2:8e:ba:7d:71:14:4c:
         de:9b:c2:25:be:47:04:40:85:77:87:82:9b:e1:94:e5:ff:11:
         51:a7:d0:85:c6:bd:95:95:e9:bb:55:fd:1d:04:70:3e:15:22:
         ff:3a:4c:c7:4a:ef:c1:48:07:fe:4b:69:28:10:4f:ac:1e:b7:
         1a:e8:63:79:a7:60:35:6a:f6:6c:19:c8:bc:9e:7a:ab:37:87:
         5f:86:6f:a7:66:ae:7f:f0:67:c8:9e:a8:6c:9e:d4:48:df:51:
         9b:b7:ca:fc:b2:80:d9:03:c1:74:a2:e5:87:b3:7c:23:61:f1:
         ed:c7:ad:a6:8c:43:d8:89:86:34:7c:20:73:43:d5:fd:60:d5:
         99:19:8f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:07:16 2025 by rpki-client