This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD16C3CD1B011F099630F9DDAE4EC9C.roa
File:                     4DD16C3CD1B011F099630F9DDAE4EC9C.roa (raw, json)
Hash identifier:          hMma7XzD1XoaCE1D5R7ApyMaKQi7HXdmEwlI8i9Kwz8=
Subject key identifier:   2A:52:EE:23:80:F3:BD:22:67:3E:45:C1:D0:CC:82:C7:CF:0E:61:9A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018C77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD16C3CD1B011F099630F9DDAE4EC9C.roa
Signing time:             Fri 05 Dec 2025 07:59:21 +0000
ROA not before:           Fri 05 Dec 2025 07:59:15 +0000
ROA not after:            Tue 05 Dec 2028 07:59:15 +0000
asID:                     17561
IP address blocks:        156.228.187.0/24 maxlen: 24
                          156.231.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101495 (0x18c77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  5 07:59:15 2025 GMT
            Not After : Dec  5 07:59:15 2028 GMT
        Subject: CN=693290d9-401a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c3:1b:28:51:f8:51:de:f2:80:2a:38:72:b7:
                    2b:0e:1d:58:54:c9:79:44:23:63:0e:ed:d3:9e:cf:
                    42:fc:c5:90:e8:58:0c:4a:63:a2:c1:38:5e:f6:36:
                    fc:75:89:24:a7:fa:7c:ca:22:63:45:3f:25:4a:8a:
                    c3:08:f3:f9:21:46:0f:ec:33:ce:4d:16:9c:c9:65:
                    09:7d:52:b8:9a:64:25:c5:50:2d:24:58:b8:8e:e2:
                    9e:24:d0:b2:d4:11:2a:50:39:ec:6a:ff:d6:ed:7d:
                    46:67:e9:28:a4:a1:20:e5:9a:02:46:1c:a0:a1:70:
                    55:89:d4:2d:84:79:c1:34:ba:a3:ed:68:c3:5f:4d:
                    f8:ff:3a:36:97:d0:f9:0a:02:d2:a9:3a:55:ae:be:
                    ac:dd:b8:03:3f:0c:5e:25:7b:8b:b7:a5:cc:67:5a:
                    dd:be:a9:92:52:12:05:89:10:b7:cd:30:ad:58:32:
                    03:84:08:31:81:c2:c1:56:ce:33:e9:a1:9b:12:b4:
                    25:8d:bc:0d:96:44:ce:89:37:e3:dd:c2:c4:b6:26:
                    7c:b2:4d:91:54:b9:b2:67:e3:6a:2c:2c:a9:01:c8:
                    fc:dc:1e:d5:43:70:d8:e3:29:5f:83:27:00:ea:b0:
                    ea:13:18:22:08:e0:9d:79:1a:da:4a:e6:c7:cf:2d:
                    ce:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:52:EE:23:80:F3:BD:22:67:3E:45:C1:D0:CC:82:C7:CF:0E:61:9A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD16C3CD1B011F099630F9DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.187.0/24
                  156.231.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:f6:a3:9f:26:f3:a3:a0:98:49:b5:a3:0f:ad:27:7e:8f:df:
         58:8e:27:ff:c8:ca:b7:d1:64:69:5d:cf:93:ab:b9:69:71:25:
         6d:46:8d:e1:a0:55:61:7f:cb:a6:35:5b:2b:de:49:31:74:41:
         98:2d:9c:19:e1:21:e7:d0:32:d9:fe:68:f4:fe:26:e1:07:d7:
         4c:c4:8b:10:66:33:de:f5:00:88:0e:e1:69:d8:eb:a1:78:c0:
         69:73:8f:a6:81:ac:87:a2:15:30:01:10:27:7a:18:d4:c5:9b:
         f1:bd:88:54:d4:cd:3f:4c:69:df:1d:80:5d:89:ae:bc:f7:74:
         67:c7:99:bd:24:51:10:7d:2d:49:98:97:d2:33:dd:69:fe:9d:
         2a:8d:b4:ea:6c:04:b2:09:4b:95:7c:41:28:11:5d:98:42:8b:
         e8:b5:d2:56:fa:26:1e:4c:3f:a4:27:07:5a:32:e1:c9:e6:da:
         b6:22:e1:6e:f4:a7:68:a9:cf:d9:21:21:ec:be:f1:10:ed:a9:
         0f:d4:69:93:24:1a:b2:ff:9c:b5:91:0f:3d:0d:11:bc:d3:7f:
         dc:aa:ab:9c:1d:df:31:6a:39:7e:a9:df:fc:18:ba:1a:88:db:
         78:c0:08:98:4c:01:1a:bc:5e:06:06:f1:28:4a:29:82:42:eb:
         8c:8a:15:5c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAYx3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjA1MDc1OTE1WhcNMjgxMjA1MDc1OTE1WjAYMRYw
FAYDVQQDEw02OTMyOTBkOS00MDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3sMbKFH4Ud7ygCo4crcrDh1YVMl5RCNjDu3Tns9C/MWQ6FgMSmOiwThe
9jb8dYkkp/p8yiJjRT8lSorDCPP5IUYP7DPOTRacyWUJfVK4mmQlxVAtJFi4juKe
JNCy1BEqUDnsav/W7X1GZ+kopKEg5ZoCRhygoXBVidQthHnBNLqj7WjDX034/zo2
l9D5CgLSqTpVrr6s3bgDPwxeJXuLt6XMZ1rdvqmSUhIFiRC3zTCtWDIDhAgxgcLB
Vs4z6aGbErQljbwNlkTOiTfj3cLEtiZ8sk2RVLmyZ+NqLCypAcj83B7VQ3DY4ylf
gycA6rDqExgiCOCdeRraSubHzy3OvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpS
7iOA870iZz5FwdDMgsfPDmGaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80REQxNkMzQ0QxQjAxMUYwOTk2MzBGOUREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOS7AwQAnOd5MA0GCSqGSIb3
DQEBCwUAA4IBAQAE9qOfJvOjoJhJtaMPrSd+j99Yjif/yMq30WRpXc+Tq7lpcSVt
Ro3hoFVhf8umNVsr3kkxdEGYLZwZ4SHn0DLZ/mj0/ibhB9dMxIsQZjPe9QCIDuFp
2OuheMBpc4+mgayHohUwARAnehjUxZvxvYhU1M0/TGnfHYBdia6893Rnx5m9JFEQ
fS1JmJfSM91p/p0qjbTqbASyCUuVfEEoEV2YQovotdJW+iYeTD+kJwdaMuHJ5tq2
IuFu9Kdoqc/ZISHsvvEQ7akP1GmTJBqy/5y1kQ89DRG803/cqqucHd8xajl+qd/8
GLoaiNt4wAiYTAEavF4GBvEoSimCQuuMihVc
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:41:40 2025 by rpki-client