This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C40830AD1DF11F0B730A6BCDAE4EC9C.roa
File:                     5C40830AD1DF11F0B730A6BCDAE4EC9C.roa (raw, json)
Hash identifier:          Xi0AAS5uAEjYwtMnm1fA4nTtV8NUd8wDhkrd4/DpoLw=
Subject key identifier:   A1:CB:30:37:CF:CA:E5:2D:B6:63:C8:F4:CE:C5:BF:DE:A3:E8:18:8E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018CC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C40830AD1DF11F0B730A6BCDAE4EC9C.roa
Signing time:             Fri 05 Dec 2025 13:36:11 +0000
ROA not before:           Fri 05 Dec 2025 13:36:06 +0000
ROA not after:            Thu 22 Jan 2026 13:36:06 +0000
asID:                     40779
IP address blocks:        156.225.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101571 (0x18cc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  5 13:36:06 2025 GMT
            Not After : Jan 22 13:36:06 2026 GMT
        Subject: CN=6932dfcb-553c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7f:42:7c:5a:c5:da:a1:27:cb:1a:05:f0:f5:
                    52:23:d3:e3:30:de:76:a3:94:6e:79:c3:34:f4:63:
                    11:c4:82:76:78:b4:e6:d5:af:46:06:54:83:4c:d2:
                    fa:39:39:0f:35:7c:b0:a7:17:3c:9c:a3:40:08:a8:
                    84:d8:38:b1:11:43:d9:c9:d3:0b:5f:79:3c:4d:14:
                    3b:c5:99:53:56:d0:fd:f8:bd:8f:a1:5b:90:1c:69:
                    20:80:50:32:d2:18:b7:fd:2c:c5:7f:a1:8a:2c:76:
                    5e:0a:4f:34:91:4b:8d:e5:5a:b2:f6:f1:77:20:4e:
                    34:b6:b2:d6:87:6d:3f:3e:d8:41:9e:d0:0a:12:be:
                    37:bf:8f:34:03:bb:d9:93:d7:e6:31:49:f8:48:ac:
                    c8:e0:81:d2:ea:9b:03:39:0a:95:51:bf:39:d5:15:
                    f7:44:e3:b6:27:8f:23:a7:ae:90:3f:27:ae:b9:a6:
                    a9:ef:c9:3f:c4:71:1c:c1:f8:fe:a6:34:e3:f9:b2:
                    aa:50:75:33:eb:00:78:dc:6b:0a:1c:9d:08:bb:cd:
                    90:de:f4:c2:f7:fe:50:bb:95:85:04:b1:ea:c0:e0:
                    dc:ae:45:06:cf:8a:0d:d6:ad:9d:91:f3:a2:c5:64:
                    b4:3d:af:74:ef:ff:f7:2b:f1:c5:f3:b7:30:a2:d1:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CB:30:37:CF:CA:E5:2D:B6:63:C8:F4:CE:C5:BF:DE:A3:E8:18:8E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C40830AD1DF11F0B730A6BCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:ab:39:e6:e1:71:9d:b0:36:b9:6b:1a:fc:35:94:05:56:3a:
         b2:2a:4b:f7:5d:70:42:69:48:1d:da:04:c3:d1:8a:1f:d5:4a:
         6f:34:67:cb:12:74:31:b2:a7:f3:53:6d:aa:7e:7e:e5:de:3e:
         27:f3:06:e7:24:dc:94:4f:70:02:9e:97:68:0b:d7:32:81:3f:
         5f:5e:d6:6a:49:59:e4:e1:9d:8a:1b:0f:7f:84:21:a3:47:10:
         aa:1a:88:97:b8:ce:31:5c:30:c4:de:a0:64:1e:23:11:b0:62:
         bb:c8:03:e5:43:b1:ba:6f:ee:97:cd:99:52:f7:54:6e:5b:d4:
         b6:a5:fe:35:36:29:7d:ea:7c:0d:09:22:1a:fc:b9:e9:ca:93:
         17:d0:cb:d8:25:e6:42:3f:b8:90:4e:d9:97:7a:b0:d4:9d:7c:
         54:a7:a0:5f:b3:cd:9e:8b:25:ed:4f:79:09:62:d0:71:78:fa:
         4a:e9:b2:1b:0f:91:1a:4a:82:cb:7d:6e:c0:aa:25:9f:f9:ca:
         ea:90:95:b4:21:4c:3c:29:c4:32:81:cd:6b:26:3e:aa:9b:ac:
         cd:22:1a:c0:8c:7f:ae:06:68:33:fe:02:56:4c:d1:1a:12:7e:
         fe:97:73:af:1f:da:23:09:31:bc:f8:06:4c:68:ea:87:25:11:
         44:b7:cd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:15:07 2025 by rpki-client