This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A2A1C1ED1DC11F095D05FABDAE4EC9C.roa
File:                     5A2A1C1ED1DC11F095D05FABDAE4EC9C.roa (raw, json)
Hash identifier:          H5q5e6lApBDICNDe5m7ZVMoGKF6rbz0YReZV5mtlE80=
Subject key identifier:   3E:99:49:30:96:17:58:7B:B4:A4:5C:C9:CE:86:04:0B:99:F5:C9:2A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018CBB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A2A1C1ED1DC11F095D05FABDAE4EC9C.roa
Signing time:             Fri 05 Dec 2025 13:14:39 +0000
ROA not before:           Fri 05 Dec 2025 13:14:34 +0000
ROA not after:            Thu 22 Jan 2026 13:14:34 +0000
asID:                     395886
IP address blocks:        156.225.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101563 (0x18cbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  5 13:14:34 2025 GMT
            Not After : Jan 22 13:14:34 2026 GMT
        Subject: CN=6932dabf-8ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3d:60:d9:44:60:6b:e2:31:ab:a2:c1:02:94:
                    a9:8a:56:c2:03:17:b2:64:32:57:68:4b:e8:05:08:
                    0a:a1:c1:58:23:7f:1b:92:31:6b:b5:3d:8f:6a:73:
                    8c:ff:aa:34:80:6e:6a:ad:b8:8e:2c:c5:01:c8:45:
                    9b:92:14:cd:f3:26:99:dd:40:e5:09:c9:5c:f2:fd:
                    5e:a7:84:f7:5f:a2:5f:de:f1:03:44:94:57:5c:48:
                    13:8b:30:0c:57:5d:8c:12:8d:7b:c3:0b:ec:cf:bd:
                    de:b0:e2:d7:40:2b:93:3a:ac:df:44:64:11:b5:20:
                    f3:a7:ce:59:62:32:83:62:01:32:4a:65:2f:53:00:
                    b4:5c:7f:ec:ce:de:c7:b8:3d:b3:d8:ca:55:21:81:
                    ab:e1:ab:ba:ab:43:e9:26:16:98:7a:2b:81:c2:05:
                    31:a6:94:b7:3c:89:6d:72:e4:18:48:d9:78:82:2b:
                    40:56:65:63:a6:58:90:6c:56:be:f4:5b:9e:6a:64:
                    11:de:7b:d5:80:db:8c:b0:fb:12:b0:f2:85:fb:8b:
                    62:4a:98:dc:87:40:2b:51:33:59:dd:4e:b1:9a:6b:
                    91:9e:4a:8a:e8:13:92:88:9c:c7:b8:26:93:0f:56:
                    26:d1:13:e8:12:a1:6b:fd:b5:24:66:70:d7:37:df:
                    79:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:99:49:30:96:17:58:7B:B4:A4:5C:C9:CE:86:04:0B:99:F5:C9:2A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A2A1C1ED1DC11F095D05FABDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:b4:f9:05:25:2a:0e:b4:74:0f:47:37:7e:c5:4d:6a:a0:3f:
         4d:64:58:35:27:53:5d:73:fd:e2:0c:aa:c0:af:9a:58:c3:77:
         6b:1f:4c:19:9f:b9:58:64:d7:5e:e2:e7:53:b1:77:d5:55:99:
         b2:42:2b:15:0a:20:c9:10:70:1e:94:c0:79:f0:57:ee:47:4e:
         d7:28:f5:bd:33:ab:26:94:7e:b9:91:f8:7e:66:70:a6:1e:a7:
         d7:5b:25:41:36:11:c3:5b:e7:59:a8:a6:8a:50:a6:fd:15:ab:
         72:35:e3:e4:01:ae:30:b0:ee:2a:ab:83:f2:b9:32:2f:22:79:
         1c:3d:a8:3b:04:6f:4c:dc:51:ee:fc:36:80:f3:5a:a1:aa:9e:
         48:2f:5d:b4:1c:04:2c:fc:2a:0b:8c:01:77:5f:f6:d2:0b:70:
         73:cb:2c:3a:86:c6:e7:a6:75:49:e0:ed:56:36:ff:57:97:c7:
         ac:5b:ff:71:d2:6c:9f:7d:18:1d:c6:8f:30:98:e8:17:5f:3c:
         80:b0:4e:ed:1e:0b:a3:f5:1f:cb:12:55:79:75:c1:92:d6:c9:
         7f:c7:83:da:de:4f:7b:99:da:25:ee:c0:a1:4f:8b:21:60:1d:
         c0:9a:50:ae:0c:fb:1f:27:4a:59:ac:b9:dd:c8:0e:fc:0f:26:
         c5:be:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:19:51 2025 by rpki-client