This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6418D430D75511F091822878DAE4EC9C.roa
File:                     6418D430D75511F091822878DAE4EC9C.roa (raw, json)
Hash identifier:          0EyN8Ks6gTH3hxG0WBXNIGjAC+bfN4Cobvlp15mxU08=
Subject key identifier:   BF:0D:CB:62:14:95:C8:7E:8C:EE:AE:06:A3:EA:DE:65:56:FD:11:12
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AE00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6418D430D75511F091822878DAE4EC9C.roa
Signing time:             Fri 12 Dec 2025 12:23:40 +0000
ROA not before:           Fri 12 Dec 2025 12:23:35 +0000
ROA not after:            Sun 18 Jan 2026 12:23:35 +0000
asID:                     8796
IP address blocks:        154.200.128.0/24 maxlen: 24
                          154.200.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110080 (0x1ae00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 12 12:23:35 2025 GMT
            Not After : Jan 18 12:23:35 2026 GMT
        Subject: CN=693c094c-68bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:24:c1:20:88:b5:f8:d7:5b:97:94:61:b3:e6:
                    13:69:be:62:f6:d2:72:16:18:6d:4e:fb:2b:00:96:
                    61:cb:c4:43:f8:a2:cb:f0:74:98:07:48:9f:ed:c0:
                    c6:04:97:24:31:1b:97:f7:76:48:7b:0c:06:30:66:
                    21:3c:0e:cd:a1:02:2e:59:9b:29:d8:01:13:5b:51:
                    a5:ae:8c:4e:e9:5e:c4:e1:95:3a:6d:61:ac:ae:a8:
                    e3:0b:ee:4c:03:02:41:0c:ed:53:a8:dc:41:7b:92:
                    11:0a:92:71:86:d1:3b:e5:b6:80:56:a1:b5:34:b8:
                    82:b8:10:10:8f:9b:b8:71:af:4a:ed:b9:35:ac:09:
                    0b:59:ba:de:c7:21:02:34:10:8e:39:3a:47:32:06:
                    9d:c6:48:dd:a1:d0:c2:1e:14:5f:c3:2b:6e:e3:39:
                    e8:44:00:0b:13:9f:e6:a6:fe:7f:a8:d6:bb:20:26:
                    18:da:39:65:3e:c8:23:ef:c2:91:e2:5b:51:9a:90:
                    21:7a:50:f2:99:14:bf:01:8e:af:ed:e5:8c:f8:ca:
                    7e:92:a3:38:bf:bf:15:34:fc:35:9e:00:c3:be:74:
                    66:a9:83:f8:65:ae:29:76:bc:66:fa:28:7f:83:ee:
                    93:7b:41:2e:9a:81:fa:65:a0:8f:12:da:1b:0e:6f:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0D:CB:62:14:95:C8:7E:8C:EE:AE:06:A3:EA:DE:65:56:FD:11:12
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6418D430D75511F091822878DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.128.0/24
                  154.200.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:73:49:77:fb:e9:a4:c9:55:97:6e:f5:1c:5d:dd:ed:4b:82:
         88:fa:ba:e9:27:d1:67:dc:26:e6:e2:00:ad:e3:a1:e4:59:69:
         9d:22:72:04:3f:04:6c:c5:3a:df:1c:55:db:8d:ab:2f:2e:dc:
         ac:4d:4c:87:f8:77:db:82:76:59:06:09:0c:0a:73:89:c5:a3:
         41:96:90:2d:d9:e0:17:b0:d0:15:65:39:b4:2c:2f:f2:c8:38:
         18:09:5c:30:04:3b:55:46:08:02:1d:5f:b0:dc:09:f7:d9:f0:
         cd:19:d1:a0:6e:44:39:97:3a:c4:e8:6f:da:e7:81:66:73:e3:
         45:11:71:74:13:33:e2:95:9d:dc:94:fe:1f:b4:c9:0c:d1:f7:
         6e:bc:17:13:bb:f3:93:7c:44:6a:94:2b:c9:1c:27:39:3e:35:
         97:da:3f:72:90:a7:cf:98:6d:bd:d2:a9:6e:d8:ba:49:73:89:
         6e:d2:0d:21:15:cd:26:b8:93:7b:a5:73:7c:0e:2f:89:37:4b:
         dc:a1:fc:b1:d8:ea:2f:4f:f5:23:b3:b3:c8:73:d3:89:f7:ee:
         49:0e:5c:d3:85:ec:87:44:47:13:25:9c:6e:b3:88:43:82:5c:
         c5:50:43:d8:0a:fa:70:dd:a9:17:1c:c8:7f:ed:c8:44:13:e8:
         44:6b:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 04:12:24 2025 by rpki-client