This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE162D1ED13211F0B7CC697FDAE4EC9C.roa
File:                     EE162D1ED13211F0B7CC697FDAE4EC9C.roa (raw, json)
Hash identifier:          PUOoJJ3XBV+YM/WXBwrY/XbHrHG4XhtWzbc0YXnpsKo=
Subject key identifier:   BA:BC:1E:6D:F7:FB:90:5A:1B:8D:32:32:68:3D:42:63:6A:30:A5:30
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ACF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE162D1ED13211F0B7CC697FDAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 17:01:53 +0000
ROA not before:           Thu 04 Dec 2025 17:01:48 +0000
ROA not after:            Sat 07 Mar 2026 17:01:48 +0000
asID:                     138152
IP address blocks:        154.92.22.0/23 maxlen: 24
                          154.94.4.0/24 maxlen: 24
                          154.94.6.0/24 maxlen: 24
                          154.94.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109810 (0x1acf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  4 17:01:48 2025 GMT
            Not After : Mar  7 17:01:48 2026 GMT
        Subject: CN=6931be80-4892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:5f:cb:aa:a0:e4:01:53:63:ff:8b:0a:bf:
                    bc:5f:58:b4:b9:48:e8:17:19:9c:27:9d:cf:46:b4:
                    05:1e:40:84:dd:25:f3:57:f6:63:18:5c:f9:a2:4d:
                    70:cc:75:2e:ea:be:a5:04:bc:08:80:6f:04:6e:5d:
                    e8:09:d9:79:69:37:94:d4:37:c8:c4:a7:7e:99:bd:
                    14:6e:35:77:a9:26:d4:86:91:f3:49:bb:ef:d6:f4:
                    bf:28:9d:57:b0:06:58:60:b2:3c:9c:c8:71:4f:fc:
                    78:67:c8:63:62:a4:91:6a:46:7f:4b:87:9f:70:09:
                    65:a8:3d:8b:fc:cb:76:6f:22:a1:9b:2b:bc:d0:24:
                    9a:3c:fd:df:a5:b1:33:d7:d3:21:84:30:dc:e9:84:
                    85:95:b0:3e:88:1a:73:af:f4:52:7b:25:5d:b2:14:
                    3d:8f:03:86:a3:17:de:a7:ce:27:e1:5e:b3:41:d9:
                    eb:2a:f7:2a:f0:f1:e1:00:ff:0b:8d:93:81:b5:6d:
                    10:33:6c:01:a2:f2:6c:3c:46:49:51:d7:29:2d:57:
                    b6:68:02:ce:7e:aa:d6:4c:3a:88:c6:5f:33:21:84:
                    6e:6e:45:4b:5a:1e:27:97:8a:fc:26:af:b9:5d:11:
                    db:c6:1b:ef:a5:01:75:fa:74:f9:87:98:62:0f:7b:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BC:1E:6D:F7:FB:90:5A:1B:8D:32:32:68:3D:42:63:6A:30:A5:30
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE162D1ED13211F0B7CC697FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.22.0/23
                  154.94.4.0/24
                  154.94.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:13:23:cf:6c:ad:0e:da:97:48:e3:5e:cf:73:31:da:de:d7:
         7d:62:35:e3:e4:e9:e4:b4:85:46:c0:88:2a:19:93:f7:55:dc:
         bf:81:aa:a7:86:ff:6d:35:84:fb:76:67:68:51:b0:25:fa:18:
         6a:01:5a:bd:74:cf:71:88:b3:30:ae:41:c7:01:96:3a:71:f8:
         46:55:0b:59:92:5d:35:71:d0:b7:a0:f5:a2:f8:0e:24:67:8b:
         79:5b:29:3e:ca:45:34:a7:af:44:9f:47:f6:20:be:13:9d:e4:
         52:25:84:e7:46:f6:b9:bc:cc:92:4b:35:8a:1c:ca:c6:83:f9:
         a4:2c:78:74:d8:d3:0c:ae:4c:fc:f6:31:2f:5e:5a:e5:d4:04:
         dd:38:d1:f2:72:63:ee:4f:76:28:fd:4f:d8:cd:ae:b7:50:7e:
         8f:13:f0:a5:e3:e4:ee:4f:ab:35:7a:1d:38:0a:86:5a:ef:2e:
         d6:7c:ac:c4:74:f4:2c:1d:fb:25:87:77:30:87:05:e3:d9:43:
         7b:20:17:dd:24:6d:e4:2c:36:05:75:38:d7:a8:39:79:05:0e:
         18:f9:53:5d:f5:d7:80:c2:0e:e5:82:5e:c2:58:cd:d8:4e:01:
         b1:ef:d4:54:3b:96:5c:26:b9:00:ee:13:5e:81:da:85:fa:36:
         02:a4:23:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:06:07 2025 by rpki-client