This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B617BC2CD11C11F0985FFFF4DAE4EC9C.roa
File:                     B617BC2CD11C11F0985FFFF4DAE4EC9C.roa (raw, json)
Hash identifier:          FG+YceKPVNEgLxX6XHC6DXmsTj4OBzpf7UD21B+BH8g=
Subject key identifier:   F9:1D:87:C6:C1:82:7D:E1:B9:5F:2D:62:0E:04:9F:84:C4:77:8F:6D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018C29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B617BC2CD11C11F0985FFFF4DAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 14:22:50 +0000
ROA not before:           Thu 04 Dec 2025 14:22:44 +0000
ROA not after:            Thu 11 Dec 2025 14:22:44 +0000
asID:                     38193
IP address blocks:        156.238.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101417 (0x18c29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  4 14:22:44 2025 GMT
            Not After : Dec 11 14:22:44 2025 GMT
        Subject: CN=69319939-7b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b6:a4:de:06:18:71:af:e0:7d:02:d2:00:f8:
                    99:ec:7a:e6:c4:b1:33:6a:e2:ba:99:e0:4c:7b:ca:
                    ea:82:58:74:2b:0a:45:d8:af:0f:4e:8b:9f:a4:ea:
                    38:ed:9f:c6:e0:8a:63:01:95:75:84:0d:af:f7:a8:
                    f0:31:b0:7f:5e:bc:4b:6a:7b:8b:25:64:ed:b6:52:
                    7c:07:df:18:19:45:e0:d2:c4:58:7c:ba:7a:af:2f:
                    8d:0a:7a:86:6f:21:83:16:5c:47:ef:4a:ea:93:d6:
                    59:6f:96:a3:c4:2a:98:94:61:41:92:44:e8:64:77:
                    d6:35:d8:7f:ce:82:04:ab:38:ca:45:5b:81:1c:5c:
                    b1:09:8a:1d:c5:ec:f4:14:77:1b:be:3a:22:21:87:
                    e2:e3:d8:b9:2a:84:5f:22:26:18:ee:fa:30:e7:c3:
                    44:dd:f0:2a:e0:76:d2:61:ae:fe:df:4e:2b:b7:23:
                    5b:13:e6:4f:58:5d:c5:8c:19:9e:ea:10:aa:a8:f3:
                    cb:9d:75:5d:b8:64:ef:0f:bf:6d:97:76:58:de:05:
                    3e:80:2e:ba:87:74:b5:ab:34:1c:fe:e7:73:b4:18:
                    b9:be:db:85:a8:19:c9:81:d9:9a:a4:e5:6a:b8:83:
                    31:47:7b:f4:3a:76:e0:70:c0:06:d0:a9:c7:82:89:
                    bd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1D:87:C6:C1:82:7D:E1:B9:5F:2D:62:0E:04:9F:84:C4:77:8F:6D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B617BC2CD11C11F0985FFFF4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:d3:db:1e:fd:55:01:13:f7:3c:a2:48:25:41:cc:5b:4e:
         9d:b4:de:6d:24:77:4b:35:b9:b6:58:f3:a9:2b:1f:a4:97:87:
         bf:b6:8d:d3:3c:b3:80:51:ad:27:5a:ec:0e:16:e7:34:8a:d3:
         c0:60:07:e5:27:95:61:f0:5d:a8:6d:d1:bd:cf:11:63:b6:18:
         bb:9f:fd:c7:51:4f:28:fd:7c:f0:4e:49:13:86:a4:d1:2a:37:
         4c:4f:10:c7:4a:fe:e5:66:7c:1f:8f:3e:6d:57:81:b4:5e:14:
         ab:55:b8:9f:bd:dd:fb:33:b5:01:16:87:06:99:1a:8d:7b:e5:
         00:de:07:9d:2b:04:2b:81:2c:d1:d5:c6:73:79:05:5b:5d:f4:
         3e:90:13:23:95:35:24:4d:5c:ca:ce:bb:96:79:87:08:50:43:
         59:60:fb:56:d3:f6:02:7b:a1:1e:be:e1:9d:3f:5a:13:04:6e:
         d6:4c:c8:4d:9f:02:94:ae:93:1d:37:85:23:b3:31:30:67:a5:
         8b:4a:51:6c:aa:78:3b:ba:60:b3:4c:be:4b:98:5e:31:ee:2b:
         05:7c:ab:d9:9d:4b:84:54:3c:f4:60:f8:76:e9:55:55:8e:0a:
         6b:e0:9e:5a:7c:1f:de:1a:47:ac:69:87:98:86:1b:c3:cb:7a:
         37:92:c6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:54:50 2025 by rpki-client