This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2E3DA68D12C11F0AED5A9D6DAE4EC9C.roa
File:                     A2E3DA68D12C11F0AED5A9D6DAE4EC9C.roa (raw, json)
Hash identifier:          upeKxE/dGJAJ4P2uEyYX09FUNiBKtCmQzF0tRbbavOA=
Subject key identifier:   FF:8F:84:4B:3C:B8:E5:1C:14:40:B5:91:AA:5D:0E:EB:E2:39:F3:61
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ACE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2E3DA68D12C11F0AED5A9D6DAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 16:16:49 +0000
ROA not before:           Thu 04 Dec 2025 16:16:44 +0000
ROA not after:            Sat 13 Dec 2025 16:16:44 +0000
asID:                     141883
IP address blocks:        154.204.0.0/24 maxlen: 24
                          154.208.12.0/22 maxlen: 24
                          154.208.16.0/20 maxlen: 24
                          154.212.128.0/24 maxlen: 24
                          154.215.0.0/24 maxlen: 24
                          154.218.0.0/24 maxlen: 24
                          154.221.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109800 (0x1ace8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  4 16:16:44 2025 GMT
            Not After : Dec 13 16:16:44 2025 GMT
        Subject: CN=6931b3f1-5cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:74:39:f7:0b:7d:a0:64:d7:0d:1e:64:3b:
                    f6:ad:73:d8:60:9a:93:b9:0e:1c:0b:59:01:52:d5:
                    c7:45:fc:3d:61:d9:d1:66:dd:e6:10:0c:02:03:84:
                    4a:7d:dc:4e:61:10:2f:0f:3a:c7:96:03:cd:89:e0:
                    a5:52:67:60:00:c6:20:83:5c:c0:32:ef:ff:a7:16:
                    ce:0a:4a:7e:45:d2:56:25:df:eb:97:e3:0e:11:27:
                    4f:26:8f:65:f2:50:19:bc:3d:1d:7d:2b:5f:39:ac:
                    af:ce:7c:43:4b:10:c2:16:92:b5:64:1f:71:a8:bc:
                    9b:f2:14:5b:f3:16:39:2b:29:9c:f9:a6:53:df:4b:
                    3e:67:b9:53:27:8f:69:6c:36:35:4d:c5:28:d7:99:
                    a4:11:a6:9a:9b:5d:d1:40:be:8e:15:b7:b7:fe:07:
                    d6:5b:24:14:1d:e8:51:d6:62:c6:94:52:c6:c6:83:
                    2c:82:db:6b:ea:ea:14:93:63:5f:ba:a0:b8:2f:c8:
                    67:90:50:f8:4d:39:66:99:b3:58:cd:f6:f3:78:5d:
                    a9:ac:e4:9d:57:4b:d1:e1:0d:24:4b:57:69:d3:36:
                    24:05:6b:9b:5b:d1:d7:ed:23:e2:b8:9a:2e:b0:27:
                    23:99:db:b0:c7:d0:14:94:71:e7:5c:2f:d3:4d:e8:
                    8b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8F:84:4B:3C:B8:E5:1C:14:40:B5:91:AA:5D:0E:EB:E2:39:F3:61
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2E3DA68D12C11F0AED5A9D6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.0.0/24
                  154.208.12.0-154.208.31.255
                  154.212.128.0/24
                  154.215.0.0/24
                  154.218.0.0/24
                  154.221.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:98:0b:6b:22:23:f1:19:57:d9:d5:46:31:d4:3b:d9:2a:d7:
         f9:04:ef:fd:59:af:0b:84:95:68:74:95:9f:81:a8:c1:a9:32:
         a8:60:59:b5:72:9b:d9:51:0c:28:2e:8a:48:03:fb:2d:28:87:
         11:61:45:a5:ba:39:c1:06:1f:b9:b9:d7:17:2f:ad:7b:1f:87:
         b3:5c:20:c2:2b:c8:a1:57:ee:0d:32:03:50:31:95:58:58:f1:
         db:0e:6c:c8:72:0b:2a:3b:07:c9:0b:37:19:97:62:f2:20:2a:
         70:e8:07:6d:17:c3:ed:10:a4:3b:83:35:fb:29:32:e8:ae:44:
         fd:ac:ab:c6:b4:9e:71:bb:e8:61:77:95:4a:b4:e2:ab:b4:ae:
         48:36:37:2f:b1:20:53:d4:01:20:83:1c:6d:2e:d4:6a:b5:e5:
         08:47:38:3a:cd:8d:c9:45:f7:1a:27:26:b1:8a:98:f6:6e:ca:
         2d:82:92:c9:9c:ab:bb:0c:b9:63:9c:3f:e9:ff:d5:23:09:49:
         25:ef:89:b3:72:ad:3c:05:4f:cd:53:5b:f3:a1:3d:38:bb:58:
         10:8f:cc:fd:8d:70:fa:58:f8:71:34:29:44:71:60:8f:97:6d:
         45:d9:02:ca:81:57:0c:9d:b2:0a:09:9d:27:70:03:d8:19:8e:
         ab:5e:02:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:46:51 2025 by rpki-client