This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E670F9DAD12411F0AE7E71A8DAE4EC9C.roa
File:                     E670F9DAD12411F0AE7E71A8DAE4EC9C.roa (raw, json)
Hash identifier:          vgSK7PU2fvlK1Cb1dhsUfm2f4rrhDyKqeNxvf5fjLFU=
Subject key identifier:   B3:24:FA:40:74:F7:20:FB:04:F3:FB:35:52:75:E8:60:C3:33:C5:B3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018C35
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E670F9DAD12411F0AE7E71A8DAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 15:21:27 +0000
ROA not before:           Thu 04 Dec 2025 15:21:22 +0000
ROA not after:            Thu 11 Dec 2025 15:21:22 +0000
asID:                     134365
IP address blocks:        156.239.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101429 (0x18c35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  4 15:21:22 2025 GMT
            Not After : Dec 11 15:21:22 2025 GMT
        Subject: CN=6931a6f7-3516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:a9:6a:e3:70:70:f3:0f:9a:f2:91:97:42:
                    35:f2:27:d2:16:14:a6:ac:c1:68:cc:05:ce:3d:e3:
                    d7:31:46:ff:3a:ad:e3:13:e1:48:8d:4c:1b:46:82:
                    e8:2e:15:85:90:d4:d2:a0:c6:b0:2c:5e:01:5b:de:
                    5b:1f:d1:4e:94:18:77:e4:c3:e9:5d:0b:c4:07:47:
                    da:c6:d8:e4:ac:88:d7:cd:31:7a:6c:e8:8c:f3:49:
                    40:b4:db:ea:b4:f3:91:c8:d7:69:fd:11:74:6c:76:
                    1b:2a:8b:5f:16:c8:ea:75:6f:85:30:3d:70:ab:6c:
                    e0:b4:d9:8f:ca:f4:0c:72:b3:47:c2:44:49:ff:da:
                    3d:ff:70:29:e2:8c:25:86:4d:a0:d8:56:cb:dd:cb:
                    e9:73:31:9c:09:bf:be:4c:51:bb:a7:f4:a9:9d:b0:
                    cf:ab:07:a2:ae:fd:ba:a5:fa:46:98:2e:30:bf:57:
                    e3:a9:df:32:c4:ac:a6:8b:da:be:ea:df:5d:98:58:
                    ff:ab:c9:0f:14:86:db:1b:72:44:ad:10:2f:9d:4d:
                    22:69:61:a8:4f:7b:57:fa:2c:45:e5:f6:33:5b:30:
                    bc:69:bd:4b:12:98:6a:1b:58:4e:22:8f:79:b9:2c:
                    7c:77:ab:76:14:3d:b8:21:49:75:d0:6b:07:0c:74:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:24:FA:40:74:F7:20:FB:04:F3:FB:35:52:75:E8:60:C3:33:C5:B3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E670F9DAD12411F0AE7E71A8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:d4:42:4c:37:2a:b7:96:d2:a2:82:4a:b6:79:c3:91:08:19:
         6f:cb:88:f5:6a:bc:0b:6c:5b:90:46:74:3d:85:ad:2b:29:32:
         04:cd:a4:99:39:ca:02:1c:0f:fd:50:7a:01:42:49:ae:30:ca:
         dc:f7:c0:b1:ed:7e:9f:fc:a2:c3:cb:10:b4:a4:44:46:04:0e:
         66:6a:b2:69:20:a9:9a:36:71:0e:9c:36:2b:7a:82:8b:77:7c:
         66:27:13:e6:a1:be:ab:0f:e0:4e:9a:63:fa:1d:ae:3e:71:30:
         df:54:78:ef:b9:ea:8b:01:f8:5c:77:06:9d:5d:65:d9:7d:7c:
         2c:db:42:59:44:d9:05:7e:2e:6a:99:87:ad:59:2e:16:14:0c:
         d8:b6:54:4d:10:b9:f2:92:19:d1:51:47:1b:51:32:b4:9a:55:
         03:07:d4:b0:2d:9b:0e:de:46:59:20:7e:66:95:80:85:9d:64:
         24:89:fa:b1:45:be:8f:e7:0b:54:ab:e5:2e:10:21:7b:6d:6d:
         c5:67:26:75:9a:d7:69:42:ba:6f:fb:c7:ca:f2:8b:22:be:8c:
         f7:37:70:89:35:e6:47:67:ba:48:fd:94:75:85:f4:6f:6f:0d:
         e4:05:72:c2:ff:8f:0c:f9:61:a7:60:d7:8e:21:cd:6d:66:3e:
         09:6e:e4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:55:19 2025 by rpki-client