This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A412AEFCD1DE11F0BE766AB8DAE4EC9C.roa
File:                     A412AEFCD1DE11F0BE766AB8DAE4EC9C.roa (raw, json)
Hash identifier:          lmDoln5y/ENdAewfpWy9S5M+EJi2OzkNfdkh6a4rC+w=
Subject key identifier:   B8:A5:30:AB:F7:E9:A0:57:EA:CB:30:EC:E6:AC:96:29:1E:A7:05:4D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018CC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A412AEFCD1DE11F0BE766AB8DAE4EC9C.roa
Signing time:             Fri 05 Dec 2025 13:31:02 +0000
ROA not before:           Fri 05 Dec 2025 13:30:56 +0000
ROA not after:            Thu 22 Jan 2026 13:30:56 +0000
asID:                     401696
IP address blocks:        156.225.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101569 (0x18cc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  5 13:30:56 2025 GMT
            Not After : Jan 22 13:30:56 2026 GMT
        Subject: CN=6932de96-3b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:54:79:ac:57:75:5a:81:dc:de:6b:04:f4:
                    b3:a1:f5:14:25:8b:95:fd:7f:55:c3:ba:6e:0b:9b:
                    76:af:ac:b1:70:b8:07:b9:cf:b2:86:56:66:6d:3f:
                    ff:46:b2:93:86:d5:36:38:eb:72:d0:20:1b:06:3f:
                    37:af:31:7b:83:4f:5f:89:ed:02:b0:68:06:95:c0:
                    a8:c9:c5:fd:69:4e:65:2f:e0:0e:7c:26:53:09:0d:
                    68:06:14:6b:bd:ff:27:5b:11:63:48:f9:2f:fb:83:
                    3f:7a:05:74:69:d2:45:ac:1f:54:39:07:93:52:da:
                    f8:97:a4:ab:57:0a:a5:b5:b2:b6:39:7c:82:d6:be:
                    39:c3:b4:30:64:f7:cf:ed:de:06:27:aa:ef:62:82:
                    6a:c1:c2:d0:52:58:1c:29:f2:47:07:eb:8a:b3:f4:
                    46:f5:fb:83:43:28:0b:22:fb:41:60:bc:1e:5e:f3:
                    7a:de:c8:e9:98:53:8d:85:25:e1:95:71:cc:00:e0:
                    bd:57:3c:8a:67:bb:04:e5:dd:6f:77:89:50:97:2c:
                    92:c8:e7:ae:ac:fd:0d:41:aa:1a:99:c8:15:09:31:
                    fa:68:b0:40:fe:3c:4d:99:e5:9b:c3:99:63:1c:7d:
                    2c:f6:46:c1:0e:26:2b:51:37:1f:ff:83:d7:90:d5:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A5:30:AB:F7:E9:A0:57:EA:CB:30:EC:E6:AC:96:29:1E:A7:05:4D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A412AEFCD1DE11F0BE766AB8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:04:79:90:23:11:62:f9:1b:a2:8c:fd:87:52:be:fe:21:7b:
         c9:51:7b:bd:b2:37:37:30:d7:22:64:2e:ff:db:43:cf:5f:53:
         1b:9a:e8:3e:9f:f4:15:72:47:11:ec:f9:07:ac:5b:df:0c:e7:
         f0:84:33:ab:d4:e2:b0:3e:1c:47:55:a1:43:b6:18:10:5d:1e:
         91:4c:39:ca:44:56:8a:0d:2d:e8:ac:dc:16:35:63:85:88:17:
         5e:ef:ba:bc:61:10:c6:0d:46:72:a2:1c:5a:55:e5:95:80:22:
         78:6d:dd:53:65:2f:cc:94:a7:5e:ac:ee:df:37:f2:db:bf:24:
         e5:33:ce:1a:49:9c:ef:82:ea:30:5f:c8:ac:9c:d2:dc:6f:2a:
         b1:5b:95:31:be:96:ec:00:ba:2c:38:98:89:bd:1c:ba:23:80:
         4e:82:e9:29:a3:97:70:2c:e3:8d:a4:1d:36:e0:fe:c8:08:ac:
         77:fc:4f:6a:4f:e6:16:e8:71:a7:36:a6:b4:57:fe:b2:4e:22:
         7c:38:f9:57:77:8d:23:a4:d9:66:3a:13:3f:b3:ee:ba:9b:67:
         63:d1:db:ab:67:21:84:63:de:e9:02:20:9f:37:9a:fd:3e:ba:
         80:22:68:9a:b2:b9:3c:20:15:91:1e:52:4d:5f:af:21:95:b8:
         d3:5e:c0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:19:57 2025 by rpki-client