This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A32B91AD06411F0A56FE6EBDAE4EC9C.roa
File:                     0A32B91AD06411F0A56FE6EBDAE4EC9C.roa (raw, json)
Hash identifier:          H66DWi/PakG88aXJVdpiJWWuowk67SzXBCPAM7ZY5nE=
Subject key identifier:   ED:D1:CA:F2:47:27:0F:61:CC:BB:5C:36:57:75:A1:31:78:09:11:C4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018BD7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A32B91AD06411F0A56FE6EBDAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 16:20:54 +0000
ROA not before:           Wed 03 Dec 2025 16:20:45 +0000
ROA not after:            Thu 25 Dec 2025 16:20:45 +0000
asID:                     54801
IP address blocks:        156.226.208.0/23 maxlen: 24
                          156.233.205.0/24 maxlen: 24
                          156.233.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101335 (0x18bd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  3 16:20:45 2025 GMT
            Not After : Dec 25 16:20:45 2025 GMT
        Subject: CN=69306366-1a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:58:1d:ef:a4:52:68:39:a7:85:e9:75:7a:
                    72:29:f8:7b:9c:9e:24:60:b7:df:e5:5e:b3:09:7b:
                    8f:76:79:01:eb:94:b1:ec:aa:08:d4:ee:c4:57:b3:
                    6d:dc:a6:d4:4b:4a:01:27:51:6b:8d:49:99:d2:6b:
                    db:4b:a9:9c:48:12:b6:fc:d1:f6:19:46:74:bc:be:
                    fa:5e:1f:f9:8e:86:a4:ef:14:d5:ba:d8:f2:c5:32:
                    4e:4d:17:c3:8b:f9:6b:80:60:ae:90:ac:64:1e:52:
                    78:30:f5:a8:f9:e0:8a:19:1e:f0:23:19:a7:0a:a9:
                    0a:00:f9:17:09:39:35:95:5c:41:51:a6:ca:0e:3a:
                    fc:19:ae:64:64:be:cd:78:82:f8:f6:7c:ca:f4:d3:
                    97:99:77:17:18:16:d7:ec:61:14:cf:ea:c9:ab:61:
                    c0:7b:c5:c2:29:9d:2e:52:c7:cc:d9:80:10:4e:4d:
                    eb:d0:2c:2e:00:84:04:b8:3a:22:2d:a1:a0:93:b5:
                    5c:ab:9b:e7:7a:45:75:5e:be:34:8a:3d:ac:94:15:
                    8a:68:76:36:1c:32:81:07:1b:01:23:11:52:e9:86:
                    fb:aa:28:67:5f:ef:36:65:4e:e0:18:81:0a:68:6e:
                    83:a3:47:9d:af:a0:06:5b:54:5c:fe:20:99:2a:58:
                    70:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D1:CA:F2:47:27:0F:61:CC:BB:5C:36:57:75:A1:31:78:09:11:C4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A32B91AD06411F0A56FE6EBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.208.0/23
                  156.233.205.0-156.233.207.255

    Signature Algorithm: sha256WithRSAEncryption
         84:bd:61:a9:7a:62:50:fd:9d:ee:b5:c7:f1:fa:a9:cc:a5:1c:
         3b:fa:b2:5b:18:57:a5:06:59:ad:f9:77:8b:18:e8:0e:da:86:
         87:8b:4a:de:6a:22:01:a1:ba:93:87:95:6e:26:a6:59:e2:66:
         59:96:64:27:dc:68:0f:13:86:89:20:15:ec:04:34:6d:5b:8d:
         f1:f5:10:d3:32:a8:b1:87:86:18:47:32:ce:6e:66:27:be:41:
         6e:ef:c8:b3:ac:2e:69:d2:82:f6:b8:e0:ec:63:22:00:d3:58:
         74:78:be:8a:ee:bb:ab:10:bf:ab:72:9d:5f:1c:85:10:e6:71:
         6f:1e:73:f9:87:d1:1c:8e:04:8a:25:4a:1c:65:65:d8:a6:3f:
         55:b8:8f:fe:05:36:34:76:e7:50:11:72:9f:0b:03:9c:09:24:
         5e:9c:5c:e1:09:67:12:b1:fd:e8:79:77:b3:4a:ba:56:e7:58:
         02:3e:6a:ad:2e:2e:e2:fb:05:ed:1a:4c:53:76:af:0c:2a:62:
         a2:49:e3:11:c5:19:4a:40:2b:2c:1a:af:59:f4:6e:22:4b:91:
         66:8d:66:99:a7:6e:14:07:fb:aa:4f:2d:cb:42:24:4c:9e:b5:
         68:37:59:e0:cf:4a:fc:6a:66:45:d3:77:fa:45:25:fd:ff:3a:
         5b:0b:98:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:41:50 2025 by rpki-client