This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFD91870E02111F09F8377A2DAE4EC9C.roa
File:                     EFD91870E02111F09F8377A2DAE4EC9C.roa (raw, json)
Hash identifier:          il50E7K4PkGOnTvgUOZCwbe6scDFtbs7GY6WhPCPTGI=
Subject key identifier:   3E:FB:02:6A:AC:A6:B3:B0:37:23:03:27:DD:3D:20:19:3D:EE:2D:3E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B067
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFD91870E02111F09F8377A2DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 17:08:07 +0000
ROA not before:           Tue 23 Dec 2025 17:07:56 +0000
ROA not after:            Fri 18 Dec 2026 17:07:56 +0000
asID:                     140224
IP address blocks:        154.205.222.0/24 maxlen: 24
                          154.205.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110695 (0x1b067)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 23 17:07:56 2025 GMT
            Not After : Dec 18 17:07:56 2026 GMT
        Subject: CN=694acc77-195b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:a4:30:74:b7:88:fc:43:eb:97:d1:f1:48:
                    b9:33:57:7e:1a:8d:7a:08:b3:9f:14:8e:14:fe:61:
                    0d:bb:54:46:14:5a:96:cf:2e:2b:c4:ab:c7:3e:0f:
                    4e:ab:73:e5:b8:ae:a7:7f:39:49:a1:df:61:57:ce:
                    a3:a3:52:7e:2c:c2:1c:4c:1c:62:90:9e:fa:bf:19:
                    a6:ee:8e:53:16:aa:7e:56:fc:7b:73:54:b6:ff:20:
                    2e:5d:ca:31:a1:df:75:23:a6:ba:6a:ab:ee:59:f3:
                    57:76:0a:1c:ad:95:28:9c:07:3f:fb:0e:d1:94:bd:
                    fe:48:74:16:d7:e8:08:66:72:de:67:dd:be:5c:73:
                    2d:74:51:89:fb:fe:0a:6d:bc:64:1e:3c:48:26:30:
                    e7:f5:28:b0:aa:3f:a6:e9:c9:9c:d1:6c:fd:85:62:
                    7d:53:68:1a:ff:2d:7c:ac:ed:6e:aa:7c:22:ab:f1:
                    3e:c0:6a:2d:da:dd:99:a1:cd:82:83:59:da:3c:f7:
                    d0:18:cb:8b:6a:d6:f7:0d:b9:25:d7:70:a6:a8:1a:
                    9d:f3:3e:15:6c:35:29:88:1c:db:fd:de:a7:4f:20:
                    d1:1e:4d:92:b0:74:8b:39:69:bd:6e:c6:10:c5:04:
                    b7:6f:c3:0b:cc:08:81:c4:57:2f:87:04:63:84:0a:
                    9a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FB:02:6A:AC:A6:B3:B0:37:23:03:27:DD:3D:20:19:3D:EE:2D:3E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFD91870E02111F09F8377A2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:43:e1:70:4d:58:ac:60:a7:0e:cf:c8:1b:12:24:17:94:8a:
         ba:0d:2f:8d:2d:59:2d:82:4b:5d:e5:6a:e4:60:2a:5c:09:a2:
         8c:80:84:f4:be:4c:66:8f:8c:fe:a1:6f:24:9e:f5:a4:11:87:
         42:87:fb:b6:16:50:ce:4c:63:49:1e:6d:7a:17:27:4e:37:ed:
         24:9f:dd:7f:31:84:5c:cf:ec:13:0e:db:40:16:38:d6:d5:23:
         ee:ce:49:1e:cd:07:5c:a2:a5:25:ee:fa:17:62:b6:a4:cb:7d:
         73:92:61:f7:7d:69:89:88:3a:fd:74:a2:17:d9:4e:b3:53:24:
         98:79:26:d6:96:fe:1c:e6:7b:f9:59:29:0a:18:00:af:d1:83:
         89:05:ce:7f:be:88:d2:9b:25:13:0e:76:2a:8f:16:90:a5:bc:
         bb:5f:99:8f:57:12:b7:75:c9:3c:5b:8d:37:46:34:1a:ad:85:
         b2:3e:76:ce:d2:ed:47:10:e7:21:1a:08:18:5c:4b:03:f0:12:
         0f:07:da:db:ff:bd:9e:6e:39:81:17:04:26:57:67:63:df:78:
         c8:66:89:8b:4d:53:46:57:11:4c:24:50:cd:c6:81:67:2e:fe:
         a8:38:22:b3:e0:8f:25:f9:9d:57:06:93:76:8e:a3:2f:54:a1:
         82:37:f7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:25:10 2026 by rpki-client