This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7081660AD43111F08C1E50C5DAE4EC9C.roa
File:                     7081660AD43111F08C1E50C5DAE4EC9C.roa (raw, json)
Hash identifier:          eaIppr7SC7tsWkYDnWlay8sVinSa8a/6b7YOoIIbWqE=
Subject key identifier:   4C:C1:86:FB:DF:57:8A:99:02:D8:63:89:A0:52:F5:A9:8B:2F:7C:47
Certificate issuer:       /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial:       0DAE
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7081660AD43111F08C1E50C5DAE4EC9C.roa
Signing time:             Mon 08 Dec 2025 12:28:46 +0000
ROA not before:           Mon 08 Dec 2025 12:28:41 +0000
ROA not after:            Wed 05 Dec 2035 12:28:41 +0000
asID:                     203144
IP address blocks:        192.142.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
                          rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3502 (0xdae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
        Validity
            Not Before: Dec  8 12:28:41 2025 GMT
            Not After : Dec  5 12:28:41 2035 GMT
        Subject: CN=6936c47e-0432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:82:78:b2:3e:81:3b:de:ee:5b:5e:7d:98:
                    5a:50:c8:6a:f3:fd:b9:db:81:13:77:20:4c:39:99:
                    96:b0:ac:d6:41:9b:51:94:7f:2f:a4:10:b1:9c:20:
                    c2:8b:6b:a8:12:2d:07:26:aa:ff:16:3c:88:8d:b5:
                    0a:f4:94:86:45:56:67:ef:71:9d:e3:e2:8a:54:23:
                    59:3e:de:e7:12:ae:06:3a:d6:84:70:bc:93:38:71:
                    0f:18:d4:de:7b:a7:21:9c:df:91:9c:23:7c:af:62:
                    78:03:90:91:cf:d9:bd:69:35:ce:9b:ca:59:83:64:
                    97:e6:e6:65:d4:b5:78:50:58:09:d5:79:15:43:8a:
                    7e:6d:2f:03:f2:ac:01:8d:1e:84:10:45:3e:ff:e6:
                    50:a8:71:af:7c:58:04:42:4e:b8:c6:d9:4e:60:5c:
                    fb:17:f7:34:f5:d3:df:6e:8d:b4:42:72:cb:c1:74:
                    7b:8a:cd:11:6b:f2:45:09:f7:e9:46:bb:1f:3c:77:
                    99:c4:f0:c0:77:eb:2a:8b:e0:eb:df:dc:5e:eb:53:
                    b5:96:e2:87:1a:91:15:4c:8a:10:8f:20:38:19:09:
                    bd:92:d2:5e:38:76:d2:5f:08:f3:cb:29:6b:01:05:
                    b9:ae:dc:7b:40:91:d0:a1:9f:97:9a:de:77:b7:73:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C1:86:FB:DF:57:8A:99:02:D8:63:89:A0:52:F5:A9:8B:2F:7C:47
            X509v3 Authority Key Identifier:
                keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7081660AD43111F08C1E50C5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.142.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:06:78:a0:7c:59:f4:29:6d:7e:9c:0c:c6:74:58:28:5a:01:
         86:f9:cb:f7:67:cf:a3:22:64:17:53:ba:41:53:d2:9b:c5:26:
         72:a3:a8:19:79:65:da:65:03:8c:c9:b6:e6:3a:7f:17:02:cb:
         17:ef:cc:6f:6b:c3:a7:fb:a1:ec:0e:35:cf:b3:2c:18:7a:3b:
         97:f7:04:6c:f2:c8:65:cf:14:d5:40:32:66:5d:a1:37:58:5c:
         52:48:7c:68:88:31:8c:82:2e:35:1d:05:7c:a3:30:2f:33:d8:
         f8:45:05:5b:cb:5f:d9:c9:e4:95:0c:af:be:07:7a:92:74:85:
         16:27:6b:d6:05:0a:6f:48:a5:45:67:d3:86:e7:29:e7:20:8f:
         f5:8a:f0:ba:7c:e9:1c:f0:f6:39:dd:2a:f5:cd:99:d2:a0:58:
         2a:5d:ff:2c:03:4d:3d:07:40:b4:e8:f2:8b:48:f5:ce:cf:d3:
         cd:55:a0:e8:6d:b5:ff:30:b6:7e:b0:00:d2:b0:dd:d1:04:cd:
         c5:5a:a0:6f:08:a8:a0:9e:2b:41:e4:e0:48:80:5d:89:56:74:
         f7:2c:45:c8:58:38:19:e2:de:45:96:d5:86:9b:74:b7:87:c3:
         bf:29:e9:8e:1d:35:24:94:a1:20:a7:ae:13:4a:05:ad:19:2b:
         3e:a8:d4:c3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDa4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNTEyMDgxMjI4NDFaFw0zNTEyMDUxMjI4NDFaMBgxFjAU
BgNVBAMTDTY5MzZjNDdlLTA0MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDB9IJ4sj6BO97uW159mFpQyGrz/bnbgRN3IEw5mZawrNZBm1GUfy+kELGc
IMKLa6gSLQcmqv8WPIiNtQr0lIZFVmfvcZ3j4opUI1k+3ucSrgY61oRwvJM4cQ8Y
1N57pyGc35GcI3yvYngDkJHP2b1pNc6bylmDZJfm5mXUtXhQWAnVeRVDin5tLwPy
rAGNHoQQRT7/5lCoca98WARCTrjG2U5gXPsX9zT1099ujbRCcsvBdHuKzRFr8kUJ
9+lGux88d5nE8MB36yqL4Ovf3F7rU7WW4ocakRVMihCPIDgZCb2S0l44dtJfCPPL
KWsBBbmu3HtAkdChn5ea3ne3c7EVAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUTMGG
+99XipkC2GOJoFL1qYsvfEcwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzcwODE2NjBBRDQzMTExRjA4QzFFNTBDNURBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjgcwDQYJKoZIhvcNAQELBQAD
ggEBAAoGeKB8WfQpbX6cDMZ0WChaAYb5y/dnz6MiZBdTukFT0pvFJnKjqBl5Zdpl
A4zJtuY6fxcCyxfvzG9rw6f7oewONc+zLBh6O5f3BGzyyGXPFNVAMmZdoTdYXFJI
fGiIMYyCLjUdBXyjMC8z2PhFBVvLX9nJ5JUMr74HepJ0hRYna9YFCm9IpUVn04bn
Kecgj/WK8Lp86Rzw9jndKvXNmdKgWCpd/ywDTT0HQLTo8otI9c7P081VoOhttf8w
tn6wANKw3dEEzcVaoG8IqKCeK0Hk4EiAXYlWdPcsRchYOBni3kWW1YabdLeHw78p
6Y4dNSSUoSCnrhNKBa0ZKz6o1MM=
-----END CERTIFICATE-----
Generated at Fri Dec 19 00:25:07 2025 by rpki-client