This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EDEF120C90711F09D6FD7B9DAE4EC9C.roa
File:                     2EDEF120C90711F09D6FD7B9DAE4EC9C.roa (raw, json)
Hash identifier:          K1OZ3BLfoVxhOOFz3/7IwUGG0x4yinqPM3wGIQDgre8=
Subject key identifier:   CA:98:11:E1:C2:05:05:8C:6C:E7:AE:81:4F:D3:17:64:53:F1:E4:89
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01AA35
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EDEF120C90711F09D6FD7B9DAE4EC9C.roa
Signing time:             Mon 24 Nov 2025 07:28:34 +0000
ROA not before:           Mon 24 Nov 2025 07:28:26 +0000
ROA not after:            Sun 28 Dec 2025 07:28:26 +0000
asID:                     57043
IP address blocks:        154.83.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109109 (0x1aa35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 24 07:28:26 2025 GMT
            Not After : Dec 28 07:28:26 2025 GMT
        Subject: CN=69240922-80b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:95:93:3b:b4:62:20:fb:e3:42:13:bc:e9:
                    b5:a3:16:ff:53:93:31:ad:32:8a:6b:79:0d:c2:0a:
                    9e:e8:1e:cd:4c:99:93:74:68:e7:8e:1a:bb:54:b9:
                    72:2d:26:08:e3:10:5e:4a:51:bf:dc:f9:37:c0:bd:
                    d7:9a:a3:e0:e9:12:d0:ca:e0:44:92:d8:43:4c:d2:
                    db:d9:82:c5:c5:e9:32:fd:bc:bd:d6:b6:c4:f9:00:
                    58:60:a8:42:1c:92:e8:8c:9c:90:62:88:73:c8:46:
                    5d:0b:44:88:ad:f0:b8:04:f0:2c:18:71:59:cc:1f:
                    58:1d:7a:60:0a:df:d8:6a:2a:35:4c:d9:36:32:e7:
                    bb:20:0d:2a:ac:24:e3:8c:e6:88:9f:84:9e:59:bd:
                    9c:4a:b5:02:e5:50:94:aa:2d:89:40:34:3d:08:ee:
                    63:b8:29:3c:7f:af:9a:ff:26:bf:f2:f9:d9:41:ae:
                    9e:1d:26:db:57:7a:b1:5e:5a:13:9b:0e:0b:ae:2b:
                    84:57:b2:31:07:b4:cf:70:a4:bf:a6:8e:1b:f8:fc:
                    f8:6b:d8:cf:2c:e0:f9:e3:38:8e:c8:86:87:e1:a7:
                    05:31:5f:ae:a4:a1:47:66:ec:54:25:95:99:5a:53:
                    28:37:e8:33:62:b4:ac:ba:85:c4:3f:c7:80:af:9d:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:98:11:E1:C2:05:05:8C:6C:E7:AE:81:4F:D3:17:64:53:F1:E4:89
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EDEF120C90711F09D6FD7B9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:62:1c:2b:40:2a:3a:fc:1a:19:2a:b1:a9:13:4e:56:20:10:
         04:9e:c9:03:22:50:f4:56:0b:aa:49:aa:a9:31:42:81:88:5d:
         b0:35:2b:dc:cd:e6:73:d6:09:9b:24:a3:cf:c2:94:3b:a9:36:
         6b:80:c0:03:77:13:2d:0a:ea:cb:08:57:40:86:e4:c9:1f:20:
         ac:51:55:ee:d2:ad:74:6e:d6:12:2f:16:6c:da:a9:e6:3a:87:
         59:15:a8:47:4e:4c:d6:94:56:6c:2d:ba:0d:05:a7:f3:e0:13:
         3c:5f:85:f1:02:9f:bd:97:a5:e2:8f:5a:5e:7a:67:aa:80:91:
         b9:4b:86:b9:4c:83:d9:72:d7:7d:f6:f6:6e:3d:ba:1d:9a:35:
         b0:37:60:8e:ff:5e:49:70:9a:f5:7c:f7:67:b3:69:b9:c8:53:
         d0:7d:72:17:de:d1:97:33:c4:0b:ef:2d:4e:8e:b1:43:61:64:
         4d:4b:e0:18:ec:b9:ff:6b:a7:8f:6d:86:a8:78:23:e7:ec:03:
         86:62:82:1d:f2:de:fa:40:44:ea:34:b4:99:37:5b:92:95:0a:
         91:09:25:6d:39:ee:19:1d:8b:37:8c:47:7d:bb:9e:89:80:e1:
         84:49:ac:48:3e:db:04:ac:a0:2e:bd:51:64:de:11:51:46:4c:
         5f:a5:ca:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:19 2025 by rpki-client