This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07531918D03411F08A3216C6DAE4EC9C.roa
File:                     07531918D03411F08A3216C6DAE4EC9C.roa (raw, json)
Hash identifier:          RKodg5gsBYExlv8ZVlHdjDLCIsgKotv66jnt2D7OVfs=
Subject key identifier:   30:AF:EB:CC:D9:65:D5:FC:F7:17:6B:4B:FE:4D:28:D1:A1:5D:5C:CE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AC3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07531918D03411F08A3216C6DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 10:37:13 +0000
ROA not before:           Wed 03 Dec 2025 10:37:05 +0000
ROA not after:            Sat 07 Mar 2026 10:37:05 +0000
asID:                     139490
IP address blocks:        154.209.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109631 (0x1ac3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  3 10:37:05 2025 GMT
            Not After : Mar  7 10:37:05 2026 GMT
        Subject: CN=693012d9-9c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:66:ec:c4:47:b6:97:df:df:66:e4:24:51:
                    fa:16:bd:94:cf:6b:51:4e:bd:b3:6a:46:81:e6:8e:
                    d8:54:7d:ac:99:45:6c:ee:1f:7a:25:e3:50:40:a9:
                    b2:4d:0e:51:6e:ec:6c:30:b9:61:93:27:42:17:ea:
                    da:da:16:94:0c:22:79:c7:e0:2d:1d:1a:4f:40:3f:
                    d7:cc:96:81:4b:4e:d3:8c:f6:bd:f9:77:04:e2:52:
                    49:6a:48:c9:73:f6:7d:d4:87:5c:26:02:b0:af:04:
                    1f:f4:4b:10:f4:3f:0e:eb:58:a6:34:f6:53:75:7f:
                    0c:da:7e:e2:8d:9a:df:46:9d:33:2d:40:76:86:81:
                    44:bf:a6:d8:2f:0d:38:d2:e2:2b:ec:f1:e6:22:44:
                    b3:d8:4e:f7:8d:28:b2:60:f5:d6:92:5c:db:d2:a0:
                    cb:4b:5c:c1:b4:4b:1f:31:1e:1d:7c:de:68:31:8b:
                    91:c0:08:b6:83:ae:8e:54:7e:dd:e0:51:d5:93:02:
                    7d:50:94:29:a4:8f:7a:ed:14:c9:8e:ed:7e:b2:86:
                    5f:c3:5f:69:db:c8:93:03:5f:0c:9c:34:32:ac:ad:
                    b9:f9:43:b7:c2:eb:0c:63:51:49:98:36:88:f4:2d:
                    d0:99:00:30:da:f1:df:8e:4f:a7:ae:15:9c:d0:06:
                    d9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AF:EB:CC:D9:65:D5:FC:F7:17:6B:4B:FE:4D:28:D1:A1:5D:5C:CE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07531918D03411F08A3216C6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:f0:09:49:bf:80:8a:37:58:6a:c7:f7:54:bd:04:6f:bf:4e:
         15:17:2d:54:d6:d2:66:3e:c5:89:2a:2e:ba:3f:82:f0:90:40:
         33:01:02:f9:0b:22:ad:7c:99:98:fe:cf:2d:36:8b:6b:fd:dc:
         9c:7c:ec:db:fc:81:52:95:95:eb:c7:54:a9:3a:3f:ab:ae:1e:
         ba:64:e5:18:a1:02:a2:18:e4:26:f0:68:77:0c:62:82:fd:5b:
         d3:f7:6c:a4:7b:a5:b1:95:b6:83:fe:e9:7e:e0:a7:d6:3b:5b:
         ed:1e:10:96:14:f0:71:41:cf:52:2a:36:1b:21:a5:d5:46:f8:
         46:02:ca:75:86:0c:40:4c:92:77:67:ec:03:14:53:22:a7:67:
         ae:97:4d:2d:54:b4:b0:40:96:59:e4:cf:b9:83:85:70:75:63:
         e7:62:a0:69:4e:a1:c4:b8:74:80:d2:e1:48:02:41:ab:43:7c:
         1d:2d:e7:d8:e7:ad:f8:4b:f8:96:d0:11:bb:a3:08:4c:f3:a7:
         fa:cc:89:4e:73:ab:04:a8:68:c1:0d:b7:e2:d9:98:34:3b:ee:
         53:26:b7:64:04:b8:97:3c:63:3f:20:b8:ab:c5:6b:b3:e9:e0:
         01:9c:c9:17:1c:ab:f8:67:db:9f:ff:96:d6:fe:60:8a:13:17:
         b3:c8:11:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:47:24 2025 by rpki-client