This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A0B86AAC61011F09DF70686DAE4EC9C.roa
File:                     0A0B86AAC61011F09DF70686DAE4EC9C.roa (raw, json)
Hash identifier:          3dbzgByWi4ApNydo1vSrviL8tVq5bsDSTty0Hwk5e1s=
Subject key identifier:   35:3F:82:10:1F:34:46:D8:9F:09:CE:7F:79:90:AE:D4:BE:E8:3D:1A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0188A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A0B86AAC61011F09DF70686DAE4EC9C.roa
Signing time:             Thu 20 Nov 2025 12:54:24 +0000
ROA not before:           Thu 20 Nov 2025 12:54:19 +0000
ROA not after:            Sun 04 Jan 2026 12:54:19 +0000
asID:                     395886
IP address blocks:        156.238.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100516 (0x188a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 20 12:54:19 2025 GMT
            Not After : Jan  4 12:54:19 2026 GMT
        Subject: CN=691f0f80-9585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:b0:00:22:6f:05:22:38:d7:d9:96:c6:96:
                    0c:85:04:13:00:96:4c:cb:c9:fc:25:04:36:94:c0:
                    fc:00:e6:3d:e8:5f:17:ad:6c:8a:54:65:31:f4:7b:
                    40:62:6c:8c:89:de:54:09:f4:47:a4:bb:2f:3e:35:
                    c2:0f:5b:a8:9a:05:72:f6:87:c4:c7:13:8c:2b:64:
                    d0:97:5b:70:40:86:94:25:9e:06:90:a5:4c:4f:c3:
                    fb:7b:a4:73:cd:d5:07:e0:28:11:2e:77:ff:d6:2c:
                    01:3e:b6:99:b7:b7:f1:93:62:50:d0:d0:54:37:ea:
                    52:a9:5b:06:9b:71:fa:ba:76:94:9d:99:9f:7e:66:
                    6e:e5:06:0e:3c:43:e2:8f:4e:6a:86:cb:7c:a3:08:
                    5a:89:87:4b:38:a1:e0:b0:97:60:c3:ea:d2:0c:1c:
                    5c:89:c2:a5:2e:25:40:95:a5:f3:cf:95:c0:5c:18:
                    a1:a6:be:cc:08:14:f8:f3:b8:ac:a0:79:fb:ec:b8:
                    08:d6:70:0d:aa:b8:db:53:a2:de:ad:f3:77:39:d3:
                    26:f0:ea:75:af:07:64:87:1e:ce:ad:8b:3c:e5:10:
                    17:df:42:be:d2:a3:85:36:4e:55:9c:c4:58:54:9f:
                    16:c5:63:42:f0:ba:a0:81:5d:ad:9a:f5:93:7d:c3:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3F:82:10:1F:34:46:D8:9F:09:CE:7F:79:90:AE:D4:BE:E8:3D:1A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A0B86AAC61011F09DF70686DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:7b:45:b4:ea:74:b6:c9:f5:5c:1e:8f:fa:9c:6f:66:14:aa:
         cb:0a:56:94:d1:b8:52:a2:23:6c:6d:f5:7e:4e:47:d5:5f:a0:
         57:03:d0:cf:fd:a9:3c:e0:26:10:2d:c7:c9:53:c4:14:04:4e:
         51:91:63:37:11:c3:56:80:39:18:5b:e0:eb:51:1f:e3:99:7c:
         6f:a1:6f:88:34:b7:73:f8:c9:b3:76:38:5b:20:da:c9:aa:23:
         5b:cf:a3:66:d9:da:e3:93:c9:de:3d:3b:ef:8c:f9:3c:85:54:
         b1:e3:61:30:5f:f2:e4:7f:ca:db:f0:10:5e:6e:69:81:55:8e:
         d0:97:d2:6b:ac:e9:35:54:3a:85:ae:87:3d:53:06:0f:72:07:
         f2:e6:da:13:b0:fb:60:96:97:d6:71:03:01:1b:fb:79:8b:a9:
         b8:f4:0b:a7:ae:9d:fd:17:8d:4d:48:0a:e3:52:dd:ac:f5:86:
         92:db:07:42:2c:e2:aa:d8:9b:35:64:ad:14:93:ca:2b:68:cf:
         16:0c:0d:19:fa:8a:9c:25:e1:ca:45:43:b7:cb:7e:55:4a:bb:
         e7:e3:01:5e:82:13:c0:79:c2:0b:a0:d7:b2:b7:2f:77:9b:6e:
         23:f7:eb:ac:b7:5d:ff:30:03:8f:13:be:79:5f:dc:ab:c5:05:
         09:86:1f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:09 2025 by rpki-client