This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E93AA30E63A11F09DFF87AEDAE4EC9C.roa
File:                     2E93AA30E63A11F09DFF87AEDAE4EC9C.roa (raw, json)
Hash identifier:          qSHOJ0NKjMizo8RnWuxum83XmULSLJkcefGj6cqqfyc=
Subject key identifier:   BF:27:A9:2D:BB:C1:E3:21:05:72:25:D8:7A:BC:FB:B6:6E:70:6F:28
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B211
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E93AA30E63A11F09DFF87AEDAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 11:16:41 +0000
ROA not before:           Wed 31 Dec 2025 11:16:36 +0000
ROA not after:            Mon 09 Feb 2026 11:16:36 +0000
asID:                     135377
IP address blocks:        154.82.22.0/24 maxlen: 24
                          154.82.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Jan 2026 11:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111121 (0x1b211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 31 11:16:36 2025 GMT
            Not After : Feb  9 11:16:36 2026 GMT
        Subject: CN=69550619-22a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:61:aa:9d:9e:e6:bd:c8:9e:92:84:6c:74:
                    bf:d6:d5:0c:41:6e:f4:cf:50:89:15:f4:7d:bf:19:
                    e3:fe:9d:b9:6b:e6:d1:76:3f:b6:87:d7:bd:fa:5e:
                    6a:28:ed:47:ff:56:db:a2:92:1f:49:d9:49:fc:8d:
                    dd:63:ee:59:ce:4c:7b:37:9a:a0:e1:d6:b8:39:b7:
                    d4:bd:63:bc:25:b5:cc:ae:e3:4e:08:23:1f:f8:23:
                    ac:c7:63:c1:df:b4:f3:db:2c:91:de:50:21:e8:ec:
                    d8:66:ca:17:5b:69:37:dd:96:80:a3:5e:76:05:1f:
                    96:f4:aa:31:96:1a:16:fe:6a:ea:48:63:71:12:6f:
                    88:81:20:47:25:0b:ed:0c:75:c0:67:fa:59:9f:4b:
                    d0:7a:ab:15:34:c6:31:2d:49:5a:a6:33:6d:1b:c5:
                    65:61:a6:cc:70:d8:d3:eb:ba:77:03:6a:66:14:25:
                    59:f5:4f:a9:c1:dd:71:93:10:c5:27:e2:26:b9:4b:
                    3c:02:9c:59:7b:0c:4d:15:1b:f2:f4:01:10:ff:49:
                    6c:18:a6:f3:8f:a7:09:d9:27:0b:72:d9:b9:4b:6f:
                    50:ac:c6:dc:2b:f4:84:67:5b:f0:8c:86:32:60:a0:
                    6e:dd:ae:d4:cc:bb:f6:fc:40:f8:b7:eb:97:06:fe:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:27:A9:2D:BB:C1:E3:21:05:72:25:D8:7A:BC:FB:B6:6E:70:6F:28
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E93AA30E63A11F09DFF87AEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:75:b4:ee:7f:24:ce:9a:4f:3d:ef:9a:46:80:c7:06:89:6d:
         a1:e0:52:31:97:b6:a0:90:79:ec:a6:95:4d:41:4b:a4:6f:ed:
         5a:b6:b1:02:27:3f:04:68:57:26:37:a8:46:90:16:29:6e:cc:
         ad:ca:7f:5a:7b:df:da:7e:c3:e2:f3:08:f0:1d:5e:0f:a2:db:
         b8:67:ca:a5:a7:92:f7:a2:98:02:36:bb:6d:b1:08:8b:bc:44:
         79:48:15:33:ff:70:46:67:43:aa:c5:14:ce:23:a6:73:27:f3:
         1e:a2:54:ec:1d:fb:c9:3a:76:ee:15:24:c9:f0:d6:b8:98:70:
         49:a9:0e:08:ca:01:26:00:d8:e1:e6:71:74:e7:c7:fe:e3:87:
         d5:ac:67:58:47:fb:9b:ac:5b:7a:54:07:32:ca:25:ee:e1:0d:
         4b:11:ac:5b:e1:85:b7:ca:85:18:b3:41:b0:de:5a:d6:74:0c:
         fb:1c:1a:cb:de:98:e1:e4:0d:d7:0e:f8:f1:84:28:cb:1b:15:
         fb:43:c5:ab:d5:8e:31:3c:a2:9e:56:a4:64:32:85:e2:15:0d:
         8f:e8:5d:9c:b0:87:ae:81:79:eb:83:a0:d9:e6:dc:b4:b9:d6:
         7d:ce:18:02:35:bd:0d:20:52:f4:ba:4a:4f:fa:c1:2e:14:79:
         60:93:7b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:30:35 2026 by rpki-client