This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEF72A8AD06711F09D84C885DAE4EC9C.roa
File:                     CEF72A8AD06711F09D84C885DAE4EC9C.roa (raw, json)
Hash identifier:          JsMNFXXyCARuom7HMDwpGuilTx0WyePk6YmDJqVcDbk=
Subject key identifier:   E2:8E:07:6F:E0:AC:35:B6:1E:D9:73:6B:43:4D:C2:79:23:8D:37:D0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ACB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEF72A8AD06711F09D84C885DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 16:47:52 +0000
ROA not before:           Wed 03 Dec 2025 16:47:48 +0000
ROA not after:            Fri 23 Jan 2026 16:47:48 +0000
asID:                     21859
IP address blocks:        154.198.164.0/24 maxlen: 24
                          154.202.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109748 (0x1acb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  3 16:47:48 2025 GMT
            Not After : Jan 23 16:47:48 2026 GMT
        Subject: CN=693069b8-8f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:c5:84:06:1f:b8:db:17:d1:cb:70:51:f1:
                    e4:ff:19:82:4b:97:96:47:d6:55:f2:07:27:b4:22:
                    9e:99:ea:43:cf:21:3a:77:79:06:74:f8:e9:1a:66:
                    7c:76:ed:8e:34:ae:4c:0a:8d:9c:16:d6:44:f7:ff:
                    93:54:31:b9:6a:fd:b5:a7:f8:f9:45:49:33:70:cf:
                    2d:cb:14:1d:50:36:64:3a:62:5b:c1:ab:9f:58:05:
                    42:25:f8:66:b2:e3:37:b8:21:5c:49:70:7e:98:11:
                    43:60:23:94:ff:93:da:51:d9:8a:b6:2f:59:40:fc:
                    d5:a6:82:fe:c5:e8:4f:a8:8c:ef:6f:13:d6:eb:f2:
                    b4:38:f5:ce:06:25:f1:86:a8:8f:9a:76:ab:f2:54:
                    4b:c4:03:f6:7f:76:7c:1f:18:46:52:44:0c:9a:a9:
                    51:82:16:17:7f:1e:a0:c6:1e:cd:dc:f0:c5:02:19:
                    23:67:18:3f:92:f6:f9:de:cc:38:76:b8:6d:1d:a4:
                    46:30:cc:b2:1b:4e:90:0b:05:6a:61:87:5b:fd:80:
                    a2:a8:b5:e8:fa:3f:15:90:71:9a:67:9a:06:93:d7:
                    22:f8:30:50:d0:6b:04:fc:3c:a8:77:50:98:f4:c8:
                    5e:c4:01:cb:10:36:5a:17:79:60:7f:4c:76:71:9f:
                    57:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8E:07:6F:E0:AC:35:B6:1E:D9:73:6B:43:4D:C2:79:23:8D:37:D0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEF72A8AD06711F09D84C885DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.164.0/24
                  154.202.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:2d:de:07:32:29:2d:53:62:d3:90:58:64:42:61:8f:22:d3:
         7b:fb:79:7b:22:09:84:1f:30:67:f5:6e:3d:f3:3c:bf:ab:14:
         e4:46:d5:b3:7c:4b:88:ae:e4:35:b2:d4:bb:04:0b:05:1b:0a:
         ce:60:4e:1e:02:63:98:96:30:48:9d:26:da:90:d6:be:ba:79:
         ee:d2:1d:07:ab:b2:9e:12:dd:af:ad:b0:2f:ac:69:6c:3e:33:
         90:d7:03:79:42:c1:14:26:d7:55:19:a3:50:8e:33:a5:79:da:
         0f:48:38:63:db:e0:fb:0f:2a:87:1d:d8:6b:01:f2:e7:42:b1:
         a3:3a:d6:19:a9:b8:ec:c7:79:a8:82:9e:20:2e:a7:ea:6a:8d:
         94:42:27:f7:99:45:22:74:33:3a:26:d1:c2:a1:05:8c:3c:5e:
         77:86:2a:02:36:c6:ca:90:c9:e4:f3:1f:d6:54:b6:50:40:a8:
         75:56:9e:cf:4d:dd:f8:06:ff:74:d6:d1:71:9a:3c:6b:69:ca:
         e6:79:59:9b:9d:17:f8:00:58:63:d0:3b:86:af:d9:78:3d:a9:
         c7:20:20:fc:73:9e:c0:c5:3d:d3:df:7f:a0:3c:b3:34:d7:52:
         7d:e7:bf:86:c8:91:fa:33:ab:d9:e6:04:ca:19:21:58:20:3a:
         e6:49:a9:bc
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAay0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAzMTY0NzQ4WhcNMjYwMTIzMTY0NzQ4WjAYMRYw
FAYDVQQDEw02OTMwNjliOC04ZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArbbFhAYfuNsX0ctwUfHk/xmCS5eWR9ZV8gcntCKemepDzyE6d3kGdPjp
GmZ8du2ONK5MCo2cFtZE9/+TVDG5av21p/j5RUkzcM8tyxQdUDZkOmJbwaufWAVC
JfhmsuM3uCFcSXB+mBFDYCOU/5PaUdmKti9ZQPzVpoL+xehPqIzvbxPW6/K0OPXO
BiXxhqiPmnar8lRLxAP2f3Z8HxhGUkQMmqlRghYXfx6gxh7N3PDFAhkjZxg/kvb5
3sw4drhtHaRGMMyyG06QCwVqYYdb/YCiqLXo+j8VkHGaZ5oGk9ci+DBQ0GsE/Dyo
d1CY9MhexAHLEDZaF3lgf0x2cZ9X0wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFOKO
B2/grDW2Htlza0NNwnkjjTfQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRUY3MkE4QUQwNjcxMUYwOUQ4NEM4ODVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsakAwQAmspzMA0GCSqG
SIb3DQEBCwUAA4IBAQCiLd4HMiktU2LTkFhkQmGPItN7+3l7IgmEHzBn9W498zy/
qxTkRtWzfEuIruQ1stS7BAsFGwrOYE4eAmOYljBInSbakNa+unnu0h0Hq7KeEt2v
rbAvrGlsPjOQ1wN5QsEUJtdVGaNQjjOledoPSDhj2+D7DyqHHdhrAfLnQrGjOtYZ
qbjsx3mogp4gLqfqao2UQif3mUUidDM6JtHCoQWMPF53hioCNsbKkMnk8x/WVLZQ
QKh1Vp7PTd34Bv901tFxmjxracrmeVmbnRf4AFhj0DuGr9l4PanHICD8c57AxT3T
33+gPLM011J957+GyJH6M6vZ5gTKGSFYIDrmSam8
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:08:44 2025 by rpki-client