This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5B6BE5ED10E11F090C8EAA2DAE4EC9C.roa
File:                     F5B6BE5ED10E11F090C8EAA2DAE4EC9C.roa (raw, json)
Hash identifier:          /erKNhowuI9Vku8NvPXXAi7areLuKjizdczHirtPypE=
Subject key identifier:   EB:5E:E1:18:E6:FB:B6:2D:89:32:E9:D4:88:14:5E:2C:26:13:0C:1A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ACD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5B6BE5ED10E11F090C8EAA2DAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 12:44:23 +0000
ROA not before:           Thu 04 Dec 2025 12:44:18 +0000
ROA not after:            Tue 06 Jan 2026 12:44:18 +0000
asID:                     45194
IP address blocks:        154.84.214.0/24 maxlen: 24
                          154.84.215.0/24 maxlen: 24
                          154.84.216.0/24 maxlen: 24
                          154.84.217.0/24 maxlen: 24
                          154.84.218.0/24 maxlen: 24
                          154.84.219.0/24 maxlen: 24
                          154.84.220.0/24 maxlen: 24
                          154.84.221.0/24 maxlen: 24
                          154.84.222.0/24 maxlen: 24
                          154.84.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 11:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109780 (0x1acd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  4 12:44:18 2025 GMT
            Not After : Jan  6 12:44:18 2026 GMT
        Subject: CN=69318227-0985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:18:1b:b3:6d:53:60:5b:d2:8c:cf:29:21:
                    14:46:b4:12:1b:37:35:ad:10:0b:6e:4a:6c:78:52:
                    71:c8:38:63:e6:08:a8:c3:60:0b:2b:4c:68:a9:41:
                    26:55:6c:f8:87:1a:2e:bf:52:24:de:1f:7d:3d:d0:
                    07:71:93:a0:41:e8:7f:02:f5:b0:ce:39:6e:ca:3c:
                    f9:f5:7f:c7:19:b7:64:95:78:d7:2c:43:2c:f7:ec:
                    9d:0f:60:35:97:03:9d:12:d9:e4:5c:f3:fb:19:1f:
                    68:d3:1f:cf:19:33:3f:4c:18:73:6d:e3:37:33:f2:
                    48:1d:dd:8f:69:d8:32:6a:bd:8f:6c:bd:31:be:04:
                    b2:36:c0:f1:1d:7d:13:c2:c7:75:31:6b:c0:c1:49:
                    73:fb:d5:a1:f2:c1:6f:ee:8d:dc:62:fe:61:b0:b9:
                    b0:5b:97:f7:75:60:15:36:e9:15:a5:3b:9d:da:ba:
                    e3:f7:e3:65:cf:5a:8a:e1:87:40:79:b8:1d:ae:ee:
                    a3:b6:ed:e7:32:6e:84:5e:61:34:c3:dd:23:fb:16:
                    96:cb:4b:8f:b0:7f:fe:67:d9:7b:4d:07:d6:aa:26:
                    6b:7c:33:97:7d:2e:4a:2a:4f:67:14:2f:df:13:89:
                    c5:2f:8a:9b:82:f9:1c:35:59:17:94:c1:59:ae:d9:
                    94:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5E:E1:18:E6:FB:B6:2D:89:32:E9:D4:88:14:5E:2C:26:13:0C:1A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5B6BE5ED10E11F090C8EAA2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.214.0-154.84.222.255
                  154.84.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:ff:4c:89:12:c2:86:7e:6a:f6:3f:25:9e:ad:70:33:d6:17:
         eb:cf:0b:a2:8d:f1:b3:76:0b:ba:bd:de:10:4c:c1:17:d2:e8:
         63:ca:60:be:38:bb:21:18:6a:80:af:81:39:18:c8:f7:e4:11:
         8e:32:58:38:10:b6:a0:8d:5e:23:fa:21:54:66:1d:af:ad:aa:
         85:50:78:24:20:40:06:44:26:7c:94:79:7a:89:3e:1b:3e:31:
         da:c1:ef:5d:24:44:7a:f9:c9:fb:83:8c:73:29:a3:fd:2d:46:
         c7:e2:1c:a3:b8:a7:54:60:26:25:4b:d3:53:eb:1b:d8:01:0c:
         90:e9:1c:84:2a:b2:aa:97:f5:9c:d5:55:6a:45:cb:62:01:0f:
         f4:50:f0:50:70:26:68:cf:3b:51:a4:2e:07:ce:b5:c5:36:c8:
         ba:0c:5a:2c:ce:3c:88:92:c1:4f:25:81:a1:fa:4b:4f:59:2f:
         de:55:ab:53:0e:04:3c:a9:9f:7e:ea:da:42:4c:1d:09:41:e9:
         47:44:91:96:84:1e:fc:7c:99:b6:55:37:0c:42:15:dc:bd:71:
         69:78:ae:0a:18:e9:47:8f:ff:4f:20:7a:16:40:1c:14:8c:f7:
         72:da:9b:bf:c4:c2:cb:d4:25:15:00:82:f1:cb:45:9e:15:cd:
         29:5b:1d:be
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAazUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjA0MTI0NDE4WhcNMjYwMTA2MTI0NDE4WjAYMRYw
FAYDVQQDEw02OTMxODIyNy0wOTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuTEYG7NtU2Bb0ozPKSEURrQSGzc1rRALbkpseFJxyDhj5giow2ALK0xo
qUEmVWz4hxouv1Ik3h99PdAHcZOgQeh/AvWwzjluyjz59X/HGbdklXjXLEMs9+yd
D2A1lwOdEtnkXPP7GR9o0x/PGTM/TBhzbeM3M/JIHd2Padgyar2PbL0xvgSyNsDx
HX0Twsd1MWvAwUlz+9Wh8sFv7o3cYv5hsLmwW5f3dWAVNukVpTud2rrj9+Nlz1qK
4YdAebgdru6jtu3nMm6EXmE0w90j+xaWy0uPsH/+Z9l7TQfWqiZrfDOXfS5KKk9n
FC/fE4nFL4qbgvkcNVkXlMFZrtmUAwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFOte
4Rjm+7YtiTLp1IgUXiwmEwwaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNUI2QkU1RUQxMEUxMUYwOTBDOEVBQTJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAGaVNYDBACaVN4DBACa
VOAwDQYJKoZIhvcNAQELBQADggEBAKn/TIkSwoZ+avY/JZ6tcDPWF+vPC6KN8bN2
C7q93hBMwRfS6GPKYL44uyEYaoCvgTkYyPfkEY4yWDgQtqCNXiP6IVRmHa+tqoVQ
eCQgQAZEJnyUeXqJPhs+MdrB710kRHr5yfuDjHMpo/0tRsfiHKO4p1RgJiVL01Pr
G9gBDJDpHIQqsqqX9ZzVVWpFy2IBD/RQ8FBwJmjPO1GkLgfOtcU2yLoMWizOPIiS
wU8lgaH6S09ZL95Vq1MOBDypn37q2kJMHQlB6UdEkZaEHvx8mbZVNwxCFdy9cWl4
rgoY6UeP/08gehZAHBSM93Lam7/EwsvUJRUAgvHLRZ4VzSlbHb4=
-----END CERTIFICATE-----
Generated at Fri Dec 5 19:01:28 2025 by rpki-client