This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AF87F52D05A11F0BA29F0B2DAE4EC9C.roa
File:                     9AF87F52D05A11F0BA29F0B2DAE4EC9C.roa (raw, json)
Hash identifier:          Yl3p6qveC6q4rW2Hu1xqSNL37elcxNmm2MoicYc92po=
Subject key identifier:   94:C1:65:4F:15:A6:4B:06:2C:E4:E0:83:B3:04:FF:3C:C6:4A:D1:7A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AC94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AF87F52D05A11F0BA29F0B2DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 15:13:22 +0000
ROA not before:           Wed 03 Dec 2025 15:13:17 +0000
ROA not after:            Fri 09 Jan 2026 15:13:17 +0000
asID:                     200373
IP address blocks:        154.82.150.0/24 maxlen: 24
                          154.82.168.0/22 maxlen: 24
                          154.86.112.0/24 maxlen: 24
                          154.86.113.0/24 maxlen: 24
                          154.86.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109716 (0x1ac94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  3 15:13:17 2025 GMT
            Not After : Jan  9 15:13:17 2026 GMT
        Subject: CN=69305392-b6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:0a:b8:19:6e:cb:0b:f5:c6:f6:63:cd:79:
                    94:93:d8:94:42:9d:f1:62:90:0c:7c:c8:5c:b1:02:
                    9f:54:19:49:a3:83:0f:4b:bd:04:47:82:70:34:ca:
                    07:52:6f:dc:2c:30:d5:32:c1:bd:ef:b4:46:18:a4:
                    89:6a:76:b8:30:0d:6d:4e:b0:5c:e1:d1:ed:e1:02:
                    54:c6:4a:64:16:db:81:1e:d9:5e:81:7f:38:4b:91:
                    01:ee:1c:d9:40:06:7e:50:27:b5:aa:28:84:3d:db:
                    e4:1b:0b:5c:9c:f6:df:16:35:10:89:9f:4f:32:66:
                    2b:c7:59:e7:1b:22:63:33:f3:a2:d9:a0:eb:7e:b9:
                    e2:d4:90:d2:7a:7c:82:6b:6b:f9:21:97:19:f6:43:
                    7f:01:9e:d8:cf:88:25:f4:53:6b:a1:5e:c0:69:34:
                    0b:25:91:05:4c:1b:c3:c0:46:35:79:36:77:3c:7c:
                    ea:86:e3:0b:b2:ce:c5:7d:b3:56:82:ac:dd:13:6f:
                    8e:8e:af:13:95:77:81:db:d2:f7:7f:f4:2c:52:6a:
                    5c:c7:da:fa:a0:9a:8d:dd:13:c8:53:45:88:80:81:
                    65:f4:3d:a7:de:18:1b:42:77:2a:28:4a:f7:a2:aa:
                    e2:50:d7:a7:96:2b:6c:2b:b6:c9:0a:4f:e2:31:1b:
                    c2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C1:65:4F:15:A6:4B:06:2C:E4:E0:83:B3:04:FF:3C:C6:4A:D1:7A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AF87F52D05A11F0BA29F0B2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.150.0/24
                  154.82.168.0/22
                  154.86.112.0-154.86.114.255

    Signature Algorithm: sha256WithRSAEncryption
         06:c5:18:ee:3e:91:26:a0:e3:5f:17:89:20:54:1d:c8:39:05:
         16:94:2d:9a:1a:89:66:ec:e7:4d:8c:d0:5d:77:c8:26:c0:d2:
         85:45:13:ab:db:ae:a2:09:66:b1:cb:77:26:fa:66:7a:1e:e8:
         6f:ea:03:a9:27:0e:bb:04:7f:a8:a5:64:ee:97:c6:c8:0e:1b:
         07:40:51:0e:e7:61:3e:8d:c0:68:8d:67:ef:ed:9d:13:b0:ce:
         9a:cb:80:93:ac:84:78:80:3b:52:2f:34:16:90:05:1e:a7:14:
         56:1a:00:fc:b4:fa:24:ad:9d:c8:55:df:74:85:a2:03:0e:25:
         4e:83:e6:47:12:a9:e2:22:19:4b:e6:2a:e8:38:a8:66:aa:dd:
         0f:15:af:be:3c:ab:63:1d:59:82:52:e3:6b:75:78:ea:be:3a:
         8f:60:cd:96:c5:7b:7a:d0:a6:41:9f:19:f8:8e:79:9a:ef:f6:
         7b:8d:91:4d:46:fe:2e:25:83:bc:05:d2:7f:84:64:2b:13:d6:
         ae:3a:0a:32:23:d7:76:44:09:9d:41:41:fc:a5:ea:c0:de:ed:
         61:7e:9b:1c:2b:dd:2b:c3:20:42:0f:b9:e0:83:ea:cd:22:c5:
         4a:38:b8:42:06:0d:5b:5e:27:ed:95:f2:95:89:65:24:7f:ea:
         6a:b9:6b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:19:44 2025 by rpki-client