This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1574B030D1CC11F0BAD021C6DAE4EC9C.roa
File:                     1574B030D1CC11F0BAD021C6DAE4EC9C.roa (raw, json)
Hash identifier:          jJTYfAP85t/sDJgTvrS+dKwUUQGQ/uEMaxmgd2vWo+I=
Subject key identifier:   D5:32:72:FE:39:58:18:C9:56:AA:F1:34:E3:6C:1E:E0:03:94:A9:D8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018CA1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1574B030D1CC11F0BAD021C6DAE4EC9C.roa
Signing time:             Fri 05 Dec 2025 11:18:12 +0000
ROA not before:           Fri 05 Dec 2025 11:18:07 +0000
ROA not after:            Thu 01 Jan 2026 11:18:07 +0000
asID:                     205712
IP address blocks:        156.225.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101537 (0x18ca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  5 11:18:07 2025 GMT
            Not After : Jan  1 11:18:07 2026 GMT
        Subject: CN=6932bf73-1e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:5c:60:b1:dc:ad:1b:c9:cd:f1:ba:d5:ed:
                    d3:cb:c8:aa:4c:a9:c0:9c:a3:a2:f4:9e:7f:e0:14:
                    5d:4d:60:97:a7:17:6e:dd:8e:b8:0d:83:8b:72:8c:
                    5a:f8:4b:7b:f7:95:c9:2e:33:62:30:5d:fa:6f:f6:
                    76:09:80:05:0f:03:56:11:72:3b:78:fc:dd:d4:9d:
                    00:da:ea:61:ff:30:5b:2c:b1:59:9f:f6:84:a1:1e:
                    9f:fd:39:80:5a:44:a7:03:77:db:66:c2:66:ae:f3:
                    be:c7:f1:5c:90:c7:d2:31:9f:72:ed:a5:d5:8a:ad:
                    ff:e2:a0:b3:29:c7:25:7c:9a:4d:c7:1d:a7:f4:69:
                    54:75:e2:b7:98:b6:f6:df:50:1b:6c:88:e1:a8:a0:
                    09:17:f3:3b:05:d1:b5:9c:4d:50:04:30:ed:08:8f:
                    27:16:4b:38:9e:3c:67:0d:c2:cc:f5:70:2c:ff:a9:
                    c5:58:a5:37:39:6d:8c:43:bb:9b:17:42:ef:ce:cb:
                    ab:ad:a0:7b:fb:e0:4c:78:5d:de:52:24:e7:e1:36:
                    13:8d:fc:86:92:4a:d7:c0:41:4c:2f:ee:05:6f:0f:
                    ee:58:99:70:96:64:e2:08:00:5e:6e:4b:fe:59:9e:
                    3c:47:ea:ec:5a:aa:f1:6e:e5:d6:2d:01:a8:67:58:
                    b2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:32:72:FE:39:58:18:C9:56:AA:F1:34:E3:6C:1E:E0:03:94:A9:D8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1574B030D1CC11F0BAD021C6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:d6:23:b2:7a:cf:5e:14:97:55:d1:d8:c0:72:6b:38:dd:95:
         5c:57:a6:68:d5:76:13:3f:75:a7:85:de:a1:dd:50:09:b1:e9:
         80:1d:3d:fd:7d:1f:fd:39:9a:3a:8c:83:02:9a:a9:6b:83:38:
         20:41:38:02:d4:8d:6e:40:e4:9b:57:da:af:ff:a8:65:8f:2f:
         a3:1d:bd:c2:43:0d:81:89:a7:2c:74:a0:f6:75:91:53:10:76:
         75:a8:33:93:d3:bb:41:7e:6b:5e:66:c0:b9:62:97:a4:62:91:
         4f:c6:d8:98:5d:31:6d:d6:64:74:fb:7a:6f:1d:f9:33:a2:b1:
         f1:ed:34:46:68:10:c1:89:bc:15:3c:c9:48:0b:cf:d6:da:08:
         59:50:4f:9c:9a:a9:ff:93:23:b9:e3:e7:be:ad:da:39:a0:74:
         6c:b2:57:5a:ed:13:cf:d0:70:5e:e8:3b:91:fe:b4:2c:fe:c7:
         ef:04:06:5a:b6:0f:30:56:cb:ff:87:d1:70:3f:55:ff:2a:57:
         56:85:9e:a2:27:b1:1d:51:ef:4b:31:5e:ae:58:94:26:2f:1e:
         b1:ce:4b:ea:d9:86:ea:18:1e:0d:48:7d:60:27:e3:cc:dd:21:
         96:fa:f9:76:60:7b:56:e0:ed:3f:8a:fe:6d:66:3b:57:19:f4:
         dd:2a:78:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:45:15 2025 by rpki-client