This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22A5365CD41611F0A457989DDAE4EC9C.roa
File:                     22A5365CD41611F0A457989DDAE4EC9C.roa (raw, json)
Hash identifier:          ft8bqSPpmyE8Bp0oXhBaO5fENO6u7CafhQAjPVLSpI0=
Subject key identifier:   8C:3B:CE:5B:12:E5:9A:2C:1B:D4:51:44:D8:4D:90:1A:0C:AB:F1:C2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AD5D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22A5365CD41611F0A457989DDAE4EC9C.roa
Signing time:             Mon 08 Dec 2025 09:13:19 +0000
ROA not before:           Mon 08 Dec 2025 09:13:13 +0000
ROA not after:            Thu 18 Dec 2025 09:13:13 +0000
asID:                     137962
IP address blocks:        154.216.0.0/24 maxlen: 24
                          154.223.6.0/24 maxlen: 24
                          154.223.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109917 (0x1ad5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  8 09:13:13 2025 GMT
            Not After : Dec 18 09:13:13 2025 GMT
        Subject: CN=693696af-6b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8c:bb:2f:5f:a2:f8:ee:a0:f6:c8:08:41:ae:
                    1f:c7:7c:73:bb:72:01:96:a6:35:8d:01:30:ba:d4:
                    37:3b:c7:11:b8:43:1f:5b:f0:71:3e:d1:87:dd:44:
                    5e:0a:86:6a:d1:9f:2e:46:c5:65:54:64:1f:4e:87:
                    b4:c2:18:94:13:65:d8:8d:3e:59:24:77:27:e1:c7:
                    31:dd:53:f2:90:f9:e8:d3:3d:c9:86:6c:83:e7:74:
                    20:61:78:fc:4f:89:0e:f0:f2:d9:f8:a7:07:9c:12:
                    6e:16:64:2b:24:af:c6:eb:97:7b:27:23:4c:16:88:
                    4a:ac:49:9e:77:6b:5f:6d:67:f4:33:84:1f:ce:93:
                    6d:97:01:68:09:9a:90:67:b5:01:df:8c:01:60:ee:
                    44:b5:42:21:a6:d6:dd:7d:23:68:c7:d0:a1:75:70:
                    be:af:78:5a:5b:32:40:a6:d2:05:5c:f0:aa:71:ba:
                    f3:f5:30:73:0b:41:f8:5e:18:ce:54:79:7e:f6:aa:
                    71:95:ab:91:fe:b6:a8:45:71:d7:b3:e6:c5:7c:99:
                    16:9f:67:2a:8d:b0:9f:ea:c3:aa:29:3b:c6:13:a7:
                    86:05:b7:0a:ca:8a:85:33:db:80:56:be:ad:5a:18:
                    f2:5d:d9:53:b5:e8:8b:ae:e5:0a:e9:92:62:87:3c:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3B:CE:5B:12:E5:9A:2C:1B:D4:51:44:D8:4D:90:1A:0C:AB:F1:C2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22A5365CD41611F0A457989DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.216.0.0/24
                  154.223.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:f3:c3:88:25:c4:fe:c9:69:9a:ef:39:2f:9d:a0:68:1d:bb:
         f3:df:e1:3a:e4:27:92:52:b5:4c:4d:88:c3:01:99:5c:f6:f7:
         cd:91:45:67:bd:9a:01:3d:88:0b:79:a7:c1:7e:da:08:01:a2:
         ae:9e:35:f6:eb:c6:61:60:71:22:9e:2b:f0:b8:f4:99:2f:cc:
         70:78:55:45:35:5a:2f:55:b5:d2:81:6c:c8:8f:fa:17:e7:14:
         fe:13:a1:c8:68:53:26:5c:0b:57:6c:4b:a0:e1:5c:4a:42:49:
         e8:c8:31:81:3b:7a:e1:fb:a5:c0:75:04:45:f6:42:10:4d:d1:
         7a:89:c6:76:77:03:5a:fe:d2:34:7c:ec:79:23:32:1e:ad:a8:
         c6:71:01:3e:55:9c:52:ff:39:00:b8:d8:c1:56:4e:9f:78:ff:
         f4:92:46:66:69:45:26:45:1f:62:1f:c9:38:00:5f:b5:1c:46:
         66:7a:69:5f:62:b5:90:ff:4f:20:e9:4b:41:a7:34:84:d7:55:
         24:18:54:a6:bb:69:bc:a4:92:2e:72:01:5d:09:13:b1:d9:6a:
         dc:15:b8:a6:e9:0d:e5:fc:d0:3e:87:31:e0:e4:11:73:ee:62:
         7a:96:e2:c4:0c:f8:ae:5b:9c:21:f7:3e:9b:5a:a9:45:c7:a3:
         6d:32:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 20:19:50 2025 by rpki-client