This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E701C6B4D05611F0BB7F1E9CDAE4EC9C.roa
File:                     E701C6B4D05611F0BB7F1E9CDAE4EC9C.roa (raw, json)
Hash identifier:          G2NLdDkXL/PSbkEFkywupKUAJBUImbBwAWbjJLRjiEI=
Subject key identifier:   80:40:32:32:01:F9:31:1F:AC:C5:21:2E:2C:5A:5C:36:CE:AC:69:72
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AC8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E701C6B4D05611F0BB7F1E9CDAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 14:46:51 +0000
ROA not before:           Wed 03 Dec 2025 14:46:47 +0000
ROA not after:            Mon 05 Jan 2026 14:46:47 +0000
asID:                     214238
IP address blocks:        154.219.23.0/24 maxlen: 24
                          154.219.25.0/24 maxlen: 24
                          154.219.30.0/24 maxlen: 24
                          154.219.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109708 (0x1ac8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  3 14:46:47 2025 GMT
            Not After : Jan  5 14:46:47 2026 GMT
        Subject: CN=69304d5b-b76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:36:96:d4:da:43:c2:3b:49:43:50:6f:ae:
                    0c:fc:c7:4d:58:2c:5c:54:c4:a2:f0:e0:d9:dc:16:
                    2a:03:34:0c:17:73:08:4a:9b:71:04:68:71:37:cd:
                    da:4d:c5:90:26:c9:17:bf:ac:1c:2b:7d:3e:51:bf:
                    72:4d:b5:98:0f:c9:f0:f8:25:5a:19:bd:b7:f6:7c:
                    3e:11:b1:6a:0d:a4:29:07:38:15:17:ad:55:d6:2a:
                    a5:48:e2:a8:b9:2a:54:ac:84:a5:c7:ea:5e:8d:0f:
                    67:d9:10:be:0b:e6:66:20:d9:ef:18:22:f6:8b:33:
                    5c:41:80:3c:25:31:db:f6:55:a5:02:08:47:2d:0e:
                    3f:85:c7:0d:9e:7b:1f:45:8a:40:11:53:f4:fe:69:
                    43:8a:fe:68:36:2f:3f:d0:31:ea:71:78:92:62:73:
                    5f:8a:a0:f3:31:a2:75:32:3d:a1:56:f3:f6:c3:8f:
                    fc:7d:dd:d0:7f:6f:f9:53:6b:0d:fd:56:6c:d3:f2:
                    1a:9b:b7:10:17:49:68:a9:62:fd:fb:f4:a8:3a:11:
                    6c:15:1b:46:4f:a6:d2:bd:bc:b3:36:b8:b8:ea:36:
                    39:40:51:a4:de:20:f6:b0:08:9d:64:35:f5:75:a3:
                    c2:af:20:99:84:5d:6c:69:3c:b6:8a:da:ed:5c:8a:
                    50:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:40:32:32:01:F9:31:1F:AC:C5:21:2E:2C:5A:5C:36:CE:AC:69:72
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E701C6B4D05611F0BB7F1E9CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.23.0/24
                  154.219.25.0/24
                  154.219.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:5b:24:ba:fc:6e:d1:35:6c:ef:f0:f1:e2:e4:42:c4:fc:68:
         99:f0:83:e1:d9:15:f9:7b:72:82:b4:36:92:a0:a9:de:69:b9:
         d6:0c:cc:1d:a8:29:41:a1:01:92:90:c9:54:f5:03:90:ec:2d:
         7e:06:be:6b:ef:7c:fe:25:f0:a2:99:b1:71:5a:88:48:3f:6c:
         ec:4b:22:a0:e3:05:df:1f:56:ff:95:36:1a:6d:24:60:65:83:
         16:31:9a:9e:b1:f4:7e:7d:fa:ce:d6:52:6f:53:a8:cf:51:8f:
         ca:be:29:76:c3:51:66:0a:72:92:58:07:50:55:72:c6:0a:6f:
         d0:df:68:5f:68:04:00:e0:e3:18:f6:9c:e3:e3:3a:c0:3c:6b:
         ba:6d:9b:4e:59:45:2a:de:26:d0:a9:33:54:8a:64:a4:bf:65:
         25:29:a6:78:00:cb:e5:d3:cb:11:30:52:c8:d4:c4:b3:aa:02:
         85:72:19:4e:e8:f0:e2:82:e5:b5:4e:7c:df:bd:2d:32:fb:2a:
         b1:2f:48:56:e7:af:db:1d:2d:02:0e:fd:d9:1f:33:88:3d:4a:
         b2:26:8d:07:2c:a5:45:07:48:c2:6d:3c:ad:a9:bf:31:76:46:
         fa:9c:b8:06:d6:08:08:b6:75:f7:17:87:15:2c:12:60:3e:bc:
         ca:18:22:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:34:19 2025 by rpki-client