This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E22E7D20F69511F0BD5698B2DAE4EC9C.roa
File:                     E22E7D20F69511F0BD5698B2DAE4EC9C.roa (raw, json)
Hash identifier:          aI3Ni+Q7pu/TzxAJIZ+EKXsPJmCuw3CtTaNLJBAV0AE=
Subject key identifier:   D3:0A:93:66:8E:9D:AA:17:21:DF:B4:A6:EF:BC:F1:48:79:C6:A4:73
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E22E7D20F69511F0BD5698B2DAE4EC9C.roa
Signing time:             Wed 21 Jan 2026 06:53:26 +0000
ROA not before:           Wed 21 Jan 2026 06:53:21 +0000
ROA not after:            Fri 27 Feb 2026 06:53:21 +0000
asID:                     147176
IP address blocks:        154.83.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112094 (0x1b5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 21 06:53:21 2026 GMT
            Not After : Feb 27 06:53:21 2026 GMT
        Subject: CN=697077e6-c0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a4:4e:bb:d3:13:f2:d7:83:39:83:d9:32:3e:
                    2a:5c:ef:35:aa:b9:ff:f7:1a:11:6b:73:44:78:39:
                    5d:08:d7:43:d2:88:df:75:8c:64:1c:36:41:e6:25:
                    84:d1:c2:fe:34:23:de:24:e6:69:72:a0:27:b6:dc:
                    b9:40:2d:f1:9e:25:b2:1f:ae:01:b9:47:07:34:d2:
                    2f:61:e8:ad:0f:f4:56:c9:84:bc:b9:d3:c7:97:08:
                    f2:94:b4:29:b2:15:e6:e7:c3:93:35:b2:14:ff:25:
                    3a:9b:8a:85:cd:ab:55:7c:74:96:ea:1a:9a:cb:8b:
                    c0:6f:0c:93:ba:8d:40:47:d4:d8:87:f0:22:d7:d1:
                    26:9d:47:1b:d8:7d:1c:bf:be:f6:19:b3:04:bf:8e:
                    3a:f3:39:e8:f0:85:5d:bf:83:9d:0f:8c:8a:d5:2e:
                    a9:21:6a:7f:5f:59:a0:0d:1b:f8:75:9e:86:88:19:
                    9c:32:de:61:c3:4c:4a:cf:09:30:d5:b0:0d:eb:7f:
                    11:7a:24:df:3d:70:8b:86:2d:0d:e5:c3:f1:c7:a8:
                    5f:98:ca:f2:a3:e4:b9:18:33:d3:d6:a7:d5:1b:b7:
                    7f:53:65:c1:82:dd:b8:6d:9d:29:e5:7a:09:77:b3:
                    20:52:33:06:f5:e6:10:9e:65:b1:58:81:e1:b0:e0:
                    10:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0A:93:66:8E:9D:AA:17:21:DF:B4:A6:EF:BC:F1:48:79:C6:A4:73
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E22E7D20F69511F0BD5698B2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:ec:75:8c:90:51:1a:3e:18:f5:ed:2c:54:6c:7b:ad:3c:a8:
         99:04:40:07:95:92:a2:00:56:78:87:9e:bf:8d:e1:66:d6:cd:
         05:83:09:38:bb:9e:65:75:13:90:10:67:7e:f1:e1:fb:9d:6f:
         f8:01:56:b2:86:95:de:60:a1:4f:ec:bc:7d:be:32:4f:11:59:
         f8:82:35:c8:e1:72:f1:79:47:9c:d1:96:af:61:da:ca:67:98:
         dc:03:a9:18:c6:7d:26:d9:89:fc:cc:81:59:a7:67:15:7f:ac:
         90:f5:62:cc:bd:1b:b7:b0:ba:f6:97:ab:9e:cb:89:84:fe:b2:
         2b:77:21:f4:42:ef:22:4b:79:cf:00:c9:42:2c:dd:64:6d:93:
         aa:21:b6:97:b3:c4:13:8e:58:64:57:65:b1:78:c2:7b:9d:fd:
         f2:b6:04:49:69:e6:e1:89:87:b8:7a:66:45:98:13:43:ba:40:
         72:01:49:4d:79:9c:36:db:72:05:a1:75:d5:89:ef:eb:7b:db:
         16:84:e6:fa:6e:dc:81:2c:45:bd:cf:a3:8b:bc:22:eb:10:f7:
         51:f1:8e:96:a8:ae:e5:41:c7:4c:71:ca:cb:a7:5d:49:2f:6c:
         f4:5a:cf:5b:0f:05:37:3e:83:43:b0:62:a5:82:d3:90:95:5d:
         ed:12:c3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:20 2026 by rpki-client