This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C95E010D06A11F0B62BC996DAE4EC9C.roa
File:                     9C95E010D06A11F0B62BC996DAE4EC9C.roa (raw, json)
Hash identifier:          UgOoQ2b6dhBvWXFqTEHDTajKcfTtOyAFX2jMSa/N2jo=
Subject key identifier:   08:4C:23:2B:10:5D:65:56:FC:19:E5:87:60:A8:3A:54:EB:A7:E6:EB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018BE5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C95E010D06A11F0B62BC996DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 17:07:56 +0000
ROA not before:           Wed 03 Dec 2025 17:07:52 +0000
ROA not after:            Thu 10 Dec 2026 17:07:52 +0000
asID:                     273303
IP address blocks:        156.252.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101349 (0x18be5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  3 17:07:52 2025 GMT
            Not After : Dec 10 17:07:52 2026 GMT
        Subject: CN=69306e6c-8811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:fb:cc:9a:5a:2f:62:d7:13:52:0f:48:1e:
                    ec:bd:e8:f4:f6:91:83:26:09:c7:28:02:12:74:64:
                    68:39:bd:60:42:e3:c6:b6:34:61:9e:b2:e7:02:cc:
                    20:46:55:f8:d6:34:bc:9b:67:c0:3d:b3:0c:86:fa:
                    83:65:e7:95:14:39:f9:aa:8d:99:ff:53:00:a0:8d:
                    a9:24:89:dc:c5:5e:b0:95:bb:3b:52:12:5e:ec:73:
                    64:5a:a6:2a:22:8d:d5:67:46:d4:51:09:ff:24:82:
                    1e:a8:e6:a5:b2:25:4d:b7:64:c7:98:39:d8:50:e1:
                    3f:aa:56:c3:b5:33:a4:c9:e1:5b:90:c1:9d:6d:ad:
                    65:c3:1e:d5:50:0c:17:dd:4a:e4:b2:dc:70:63:aa:
                    bd:14:7a:02:8b:20:e0:60:e9:47:e7:ea:18:31:9e:
                    90:2d:ab:2e:26:a1:1e:5e:c0:77:c4:0a:1d:d2:c0:
                    fb:05:ed:4d:94:66:be:1d:71:77:bb:1e:df:fa:2d:
                    2d:cc:8d:1f:71:d6:85:58:c4:c0:b8:63:c6:bf:60:
                    64:32:d2:c6:e8:5e:35:90:46:46:1f:48:01:5a:79:
                    b6:c2:d9:e1:4d:87:f8:8f:e8:86:d6:2f:67:75:0b:
                    28:18:4f:17:12:c6:72:db:83:b5:74:f6:ee:97:ca:
                    c1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4C:23:2B:10:5D:65:56:FC:19:E5:87:60:A8:3A:54:EB:A7:E6:EB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C95E010D06A11F0B62BC996DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:43:8a:7f:5e:6c:49:06:ae:09:7d:ce:26:a3:38:3a:da:9f:
         de:b9:7b:8b:a6:e8:c5:ba:4e:5a:77:19:96:97:a3:73:41:3a:
         25:e9:cb:4c:a2:9c:ff:a6:5e:73:92:44:b8:3a:bc:25:96:58:
         6a:b0:52:a7:ac:1a:33:f8:77:35:a7:06:c5:00:a0:a4:5b:ae:
         07:df:d7:9e:26:c3:f5:17:98:7f:e3:88:ae:e8:f0:ff:69:d8:
         3e:fb:09:7f:94:9b:ad:d6:fc:c6:d8:0a:e2:43:cb:99:dc:00:
         00:02:8a:e6:55:0a:4a:6a:40:7a:74:6f:1c:7b:a0:33:1a:71:
         aa:0c:46:f6:af:9f:ff:ec:b3:b6:c9:23:59:c0:53:0e:8f:d1:
         ac:13:7e:2d:35:67:a2:55:22:03:96:f4:ff:3e:b8:7c:32:ae:
         e2:38:6e:50:bd:80:5f:a1:5c:8f:eb:43:26:82:03:ab:38:17:
         ab:be:a4:46:a2:dd:9d:c8:50:fe:7d:12:8f:91:f8:45:4b:5e:
         1a:f9:39:ad:37:7f:a5:19:17:b7:c8:98:38:63:38:48:11:da:
         30:3a:9b:4e:73:f2:74:ef:d7:05:21:37:bc:ee:a9:54:df:68:
         ed:f5:bc:0d:7c:0c:13:05:ea:10:7a:1c:db:1f:8a:54:fc:6f:
         08:13:ea:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:18:57 2025 by rpki-client