This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/314B8F66D1D311F08B33BDF1DAE4EC9C.roa
File:                     314B8F66D1D311F08B33BDF1DAE4EC9C.roa (raw, json)
Hash identifier:          ZFlHuYxCw0SfztkAXmZyO7MdADLnN0HD7ESFvWXWGcM=
Subject key identifier:   50:4A:B6:84:65:06:F1:A6:0E:55:5A:4D:DC:1F:DF:65:E9:45:E7:BB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018CA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/314B8F66D1D311F08B33BDF1DAE4EC9C.roa
Signing time:             Fri 05 Dec 2025 12:09:05 +0000
ROA not before:           Fri 05 Dec 2025 12:08:58 +0000
ROA not after:            Thu 01 Jan 2026 12:08:58 +0000
asID:                     209968
IP address blocks:        156.225.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101539 (0x18ca3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  5 12:08:58 2025 GMT
            Not After : Jan  1 12:08:58 2026 GMT
        Subject: CN=6932cb61-c72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:b4:2d:57:60:75:bd:34:ca:09:47:7e:1f:81:
                    a6:f8:9d:9b:d9:5a:4d:cd:32:eb:9d:64:42:db:b4:
                    7e:4a:62:1d:c7:70:ed:fd:46:cd:d5:67:d3:5e:65:
                    3c:23:fd:65:b4:64:a2:fc:aa:ca:a0:84:4f:03:bb:
                    82:63:80:b4:a1:f4:22:fc:44:6c:9b:26:2a:93:a2:
                    13:6c:a9:0a:ca:d5:2a:fb:90:7d:4a:0b:94:70:4d:
                    32:81:cb:1d:87:d6:e4:98:f2:72:d4:95:eb:69:0a:
                    23:f7:ba:ce:85:2b:0f:65:c0:79:ba:f3:67:5f:ae:
                    8c:24:b5:f2:06:f6:e9:fa:fb:e4:94:78:64:dd:ac:
                    c9:eb:12:c4:b0:17:dc:0c:06:59:4e:54:00:ce:3f:
                    9b:ba:08:d5:6c:14:5c:2b:5c:52:09:02:f4:10:6b:
                    b6:c0:fa:2b:cc:e7:3a:a4:b0:43:a8:b4:54:33:33:
                    4b:34:59:ed:70:75:dd:aa:53:1e:c2:1b:39:4c:2a:
                    b2:6b:02:5a:98:b5:9e:6e:08:97:b0:f2:89:c1:83:
                    3c:11:75:a3:22:8b:cf:60:34:b1:b3:cd:0e:dc:d0:
                    3b:3b:1d:59:a0:5a:8f:7e:56:9d:6a:77:a7:c2:73:
                    5a:5d:9f:30:c5:12:d9:64:d1:61:c4:4d:14:af:d7:
                    63:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4A:B6:84:65:06:F1:A6:0E:55:5A:4D:DC:1F:DF:65:E9:45:E7:BB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/314B8F66D1D311F08B33BDF1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:b2:a4:4b:3d:40:d2:73:22:d1:8a:f3:03:8e:4e:c9:2c:34:
         37:49:1e:0b:bb:c3:76:ef:16:86:01:6c:30:41:cb:b5:83:0a:
         90:66:19:84:2b:b1:6c:79:11:b2:aa:b6:4b:0c:00:df:55:d9:
         bd:1a:ee:4e:88:8d:39:8d:a6:d7:9d:20:2d:ef:75:a2:df:1c:
         e0:4a:bc:b1:bb:1c:3b:14:11:45:b1:16:fd:a1:4a:41:7d:78:
         c2:85:a2:5c:a0:c5:25:db:d3:e0:f0:f1:4a:d3:88:29:af:3d:
         c4:69:15:2e:55:1d:38:05:01:1d:0e:61:0f:41:f1:59:3a:26:
         76:ac:d9:db:6a:6c:fe:98:18:5d:e8:4d:13:1a:f9:c2:f9:cb:
         cd:bb:32:bf:09:4f:ac:06:c9:a0:19:b1:24:0a:0e:4f:b7:e9:
         89:58:d3:ad:ac:c4:84:38:09:01:60:f7:2b:68:aa:85:91:ea:
         c2:84:74:5b:74:cc:1a:f7:74:62:1f:f6:f8:06:e5:6f:7d:a7:
         c3:8f:9b:d6:5b:f7:6c:b1:0d:f5:3f:24:02:5a:0a:4a:13:8a:
         57:bf:91:bc:de:82:3a:62:33:cc:58:68:e4:39:d6:14:5b:52:
         2c:c2:d9:91:a8:2f:2a:6e:2e:9d:41:c7:5a:fb:f8:1d:e9:ff:
         b0:cc:0a:61
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYyjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjA1MTIwODU4WhcNMjYwMTAxMTIwODU4WjAYMRYw
FAYDVQQDEw02OTMyY2I2MS1jNzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+rQtV2B1vTTKCUd+H4Gm+J2b2VpNzTLrnWRC27R+SmIdx3Dt/UbN1WfT
XmU8I/1ltGSi/KrKoIRPA7uCY4C0ofQi/ERsmyYqk6ITbKkKytUq+5B9SguUcE0y
gcsdh9bkmPJy1JXraQoj97rOhSsPZcB5uvNnX66MJLXyBvbp+vvklHhk3azJ6xLE
sBfcDAZZTlQAzj+bugjVbBRcK1xSCQL0EGu2wPorzOc6pLBDqLRUMzNLNFntcHXd
qlMewhs5TCqyawJamLWebgiXsPKJwYM8EXWjIovPYDSxs80O3NA7Ox1ZoFqPflad
anenwnNaXZ8wxRLZZNFhxE0Ur9djDQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFBK
toRlBvGmDlVaTdwf32XpRee7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMTRCOEY2NkQxRDMxMUYwOEIzM0JERjFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOEtMA0GCSqGSIb3DQEBCwUA
A4IBAQAnsqRLPUDScyLRivMDjk7JLDQ3SR4Lu8N27xaGAWwwQcu1gwqQZhmEK7Fs
eRGyqrZLDADfVdm9Gu5OiI05jabXnSAt73Wi3xzgSryxuxw7FBFFsRb9oUpBfXjC
haJcoMUl29Pg8PFK04gprz3EaRUuVR04BQEdDmEPQfFZOiZ2rNnbamz+mBhd6E0T
GvnC+cvNuzK/CU+sBsmgGbEkCg5Pt+mJWNOtrMSEOAkBYPcraKqFkerChHRbdMwa
93RiH/b4BuVvfafDj5vWW/dssQ31PyQCWgpKE4pXv5G83oI6YjPMWGjkOdYUW1Is
wtmRqC8qbi6dQcda+/gd6f+wzAph
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:06 2025 by rpki-client