This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EA10928D9CC11F09EADBDE5DAE4EC9C.roa
File:                     4EA10928D9CC11F09EADBDE5DAE4EC9C.roa (raw, json)
Hash identifier:          eA82+n9/E69DLs9yLGZl3ihKCfuZeJVrZy55wXWWOkI=
Subject key identifier:   13:7D:20:11:DD:67:3D:EE:8B:61:90:C9:E1:80:C2:D9:49:AB:B9:BA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018E7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EA10928D9CC11F09EADBDE5DAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 15:39:57 +0000
ROA not before:           Mon 15 Dec 2025 15:39:52 +0000
ROA not after:            Wed 21 Jan 2026 15:39:52 +0000
asID:                     139880
IP address blocks:        156.254.32.0/19 maxlen: 24
                          156.254.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102010 (0x18e7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 15 15:39:52 2025 GMT
            Not After : Jan 21 15:39:52 2026 GMT
        Subject: CN=69402bcd-1e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:69:e9:ef:c3:9d:82:4e:95:3a:80:8a:c9:20:
                    53:aa:7c:2a:a0:4a:af:20:4a:b9:59:df:e2:d8:05:
                    c2:ff:82:2e:5b:ac:5d:5a:fa:7a:da:d6:dc:dc:0e:
                    e0:dc:29:39:4c:d3:8b:03:b1:af:c1:b0:1b:4b:a8:
                    e8:f4:70:97:af:c0:ed:22:bc:fd:a0:ee:01:3c:66:
                    80:3a:34:5e:27:64:a0:24:f2:5d:fb:c9:73:4f:de:
                    61:27:d8:d2:d9:a7:51:22:3b:d3:b9:fa:b1:0b:9b:
                    03:d1:c9:40:32:0c:38:18:c1:50:0a:cf:9e:70:b5:
                    0b:9f:98:9c:20:94:f6:11:7d:a3:16:d3:5f:13:97:
                    fa:93:4c:be:3d:f3:14:43:23:73:ea:95:83:3b:4b:
                    ba:fb:a7:0c:5c:ce:c1:9d:78:0d:7b:e2:fa:ab:ca:
                    ad:ca:0f:59:08:3c:32:a5:75:9d:c5:e8:e3:e8:82:
                    98:36:5a:07:4f:6b:2d:67:49:50:b7:3f:bd:d5:74:
                    a7:25:59:1a:8f:a8:3d:02:16:a7:14:e7:8f:48:14:
                    e8:9b:b4:c3:c2:48:55:21:f5:e8:c6:9e:15:9b:1e:
                    9d:51:f6:7d:ee:72:c4:83:30:37:b3:ec:75:3f:ad:
                    b9:f6:6e:3f:73:8b:d5:95:75:34:27:77:e8:14:b3:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7D:20:11:DD:67:3D:EE:8B:61:90:C9:E1:80:C2:D9:49:AB:B9:BA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EA10928D9CC11F09EADBDE5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.32.0-156.254.95.255

    Signature Algorithm: sha256WithRSAEncryption
         36:4f:63:e9:38:0d:16:34:32:65:43:89:7d:b4:dd:fe:4f:a5:
         64:28:94:ce:4b:bb:59:a4:c2:f8:ee:dd:72:bd:f8:20:fd:6d:
         e8:87:4a:da:ca:1d:58:af:d0:64:40:de:08:7e:40:a7:8a:ea:
         8e:42:5f:d2:f8:04:5c:83:30:7a:b2:78:8d:6f:c9:b3:6f:b7:
         56:50:da:a2:c7:ac:d9:b9:e3:a7:ea:73:e6:d6:a2:fa:95:09:
         66:88:6b:b4:4e:8e:dd:a3:c2:38:9e:50:9e:86:b5:d3:d9:5a:
         45:1c:ac:88:4f:c9:51:82:d5:ea:32:44:bf:fd:fe:55:73:ed:
         99:ca:ba:6c:66:8f:3a:31:59:0a:d7:29:47:98:dc:c8:e1:73:
         55:9a:66:dd:7f:6e:dc:0e:e8:db:9b:52:b6:ee:f4:46:47:18:
         94:84:8a:00:b7:31:12:53:28:e7:2e:51:0a:85:c1:cb:29:74:
         e5:57:82:d1:a0:36:af:6e:fd:b0:f8:62:3c:29:23:e7:59:d9:
         f4:11:4d:b7:2f:09:66:e4:83:0d:c1:23:45:95:26:9a:85:15:
         1c:ae:4f:ce:ae:64:42:8e:9e:20:a3:61:20:02:e4:14:64:c9:
         44:eb:dd:ca:91:55:8c:56:87:97:be:8b:4f:ac:4d:85:ee:b1:
         eb:23:6c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:09:23 2025 by rpki-client