This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB10DECED06111F097E547DFDAE4EC9C.roa
File:                     EB10DECED06111F097E547DFDAE4EC9C.roa (raw, json)
Hash identifier:          zsHAztlpEgSO8iGvaUISIfKqq6LJK88ErkFDDs7hGmQ=
Subject key identifier:   7B:B4:18:A5:1A:E0:03:79:2D:7A:2C:3C:B3:29:3B:01:82:11:94:F3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018BD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB10DECED06111F097E547DFDAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 16:05:43 +0000
ROA not before:           Wed 03 Dec 2025 16:05:37 +0000
ROA not after:            Tue 13 Jan 2026 16:05:37 +0000
asID:                     18046
IP address blocks:        156.236.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101331 (0x18bd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  3 16:05:37 2025 GMT
            Not After : Jan 13 16:05:37 2026 GMT
        Subject: CN=69305fd6-7723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:39:b3:fd:0c:bd:b4:7f:a7:dd:6f:2c:ed:c6:
                    3f:1c:b1:ba:79:08:a0:2b:5e:c4:ce:d2:9c:b0:fe:
                    aa:60:3a:38:31:a4:ee:40:4c:6e:08:39:62:1e:d3:
                    9d:ca:29:8c:f8:03:02:bf:a8:b9:ff:70:5d:99:34:
                    73:ae:a4:d0:e6:1c:8e:c5:eb:d0:84:ee:97:a5:cf:
                    00:99:c8:a8:88:57:f9:15:1d:6e:42:a7:bd:2c:54:
                    26:4e:36:95:a0:36:ec:7f:b3:32:61:11:0d:30:cf:
                    2c:64:13:45:5d:df:11:ac:19:e6:e4:35:ad:a0:e6:
                    8a:e3:18:2f:74:0e:11:85:a7:ae:0d:21:3a:e6:dc:
                    9c:54:a1:69:e4:ad:30:e2:1e:2b:41:d9:a8:bb:7b:
                    ec:33:8f:d9:63:97:a1:8f:ff:75:59:de:c4:15:8c:
                    2c:d4:e7:b4:b6:52:ef:5b:83:a2:61:83:73:75:2d:
                    25:ff:ea:65:df:47:89:92:19:10:5d:59:08:82:19:
                    bd:e2:fe:bb:77:e0:fa:94:7a:50:08:8c:0e:75:71:
                    5d:87:22:79:7e:17:8b:5c:cb:81:70:07:33:dc:e3:
                    a3:c1:af:59:c5:80:c1:fe:6a:23:fd:75:fb:a8:9f:
                    6f:67:19:a4:a2:66:11:3a:6d:45:99:99:d5:4b:b2:
                    fa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B4:18:A5:1A:E0:03:79:2D:7A:2C:3C:B3:29:3B:01:82:11:94:F3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB10DECED06111F097E547DFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f1:68:e4:6f:91:c3:3a:45:c2:d5:8a:50:81:12:a9:3d:3d:
         2c:4f:61:da:09:5f:10:5a:c9:43:ee:d3:f6:e4:76:7e:0e:4f:
         35:c1:eb:92:51:fc:3b:5b:9b:64:63:d9:c5:5a:bb:3e:41:2d:
         fa:57:2f:3d:8a:e9:57:39:0d:29:3c:4c:eb:8d:fa:42:fc:66:
         2d:92:c7:6f:8d:eb:54:7f:1f:5c:c9:30:7f:cb:fa:11:2d:82:
         74:67:79:a3:99:99:c0:23:e2:73:15:fe:6f:51:fa:ef:f9:d7:
         d4:96:6f:81:9d:af:d9:f1:6b:40:d8:39:da:47:e4:1a:b7:8d:
         db:98:81:6a:c8:e1:48:49:b2:5a:14:85:f5:83:c9:62:5d:a1:
         fb:91:da:f2:b4:fb:2c:e1:2d:60:bc:f1:b2:e4:45:d5:72:48:
         71:04:f8:eb:b0:91:2e:14:27:04:16:1f:e9:6a:fe:b8:f2:3a:
         6a:9f:2b:74:fc:66:e8:63:e8:6a:ff:ba:d8:18:c8:00:16:38:
         b0:12:10:2d:53:2f:8b:ee:ca:bc:23:21:7c:5c:ee:11:7c:ad:
         c3:11:8d:c0:78:5c:cb:74:0e:14:15:75:14:7b:58:f8:66:67:
         d3:58:f1:7e:1e:2f:71:c5:2d:02:1d:86:d6:99:ff:a8:e8:77:
         26:1b:22:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:08:31 2025 by rpki-client