This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19DB070EC6CE11F097E8C2B5DAE4EC9C.roa
File:                     19DB070EC6CE11F097E8C2B5DAE4EC9C.roa (raw, json)
Hash identifier:          RGAzCTbXX0Cv3e6A5FFd8cjIWKoeohsQRqbhEctE2nU=
Subject key identifier:   0C:E1:54:41:36:19:AD:48:73:0C:9E:92:56:C2:3B:48:6D:21:4B:30
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0188F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19DB070EC6CE11F097E8C2B5DAE4EC9C.roa
Signing time:             Fri 21 Nov 2025 11:34:55 +0000
ROA not before:           Fri 21 Nov 2025 11:34:50 +0000
ROA not after:            Thu 04 Dec 2025 11:34:50 +0000
asID:                     54801
IP address blocks:        156.229.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Dec 2025 11:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100597 (0x188f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 21 11:34:50 2025 GMT
            Not After : Dec  4 11:34:50 2025 GMT
        Subject: CN=69204e5f-2bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1c:39:16:ab:29:54:af:1d:33:c3:58:e1:88:
                    44:d1:98:06:01:85:e5:17:dd:1d:06:db:8a:14:95:
                    44:ad:b9:20:c9:27:01:c8:56:60:cb:02:51:df:2e:
                    55:72:52:51:60:97:0f:e5:12:ae:63:eb:18:b6:56:
                    7b:ac:42:3f:bb:49:51:81:de:97:66:ce:ff:4f:a3:
                    6f:c4:ab:41:fc:41:5b:80:01:71:16:ba:c1:6e:dc:
                    9a:fc:39:37:ef:81:37:89:64:b3:fb:8e:c5:84:51:
                    1e:cc:98:e4:d6:06:53:96:e5:f2:f4:eb:dc:ec:2c:
                    87:5b:5a:ce:79:58:c5:ec:02:2b:cd:7e:2e:d8:ff:
                    fc:08:b2:5d:14:eb:a4:da:13:59:85:cc:57:9a:ce:
                    27:5e:41:ea:2b:78:0d:26:50:d5:d1:0e:68:21:7c:
                    4f:93:57:46:d9:e6:92:18:69:ff:bc:03:5b:30:ac:
                    b6:5b:db:88:79:03:e2:c1:59:16:5d:ac:31:54:cf:
                    86:40:e6:5d:47:6f:53:b1:21:43:9e:72:f2:1e:c5:
                    81:89:ba:56:48:8f:d6:41:a7:6f:6a:0a:ac:b5:81:
                    9a:4e:71:2a:5e:09:47:d3:13:56:e3:71:38:39:5e:
                    4d:e4:11:99:14:da:e1:72:24:9e:2e:8b:58:c1:11:
                    ed:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E1:54:41:36:19:AD:48:73:0C:9E:92:56:C2:3B:48:6D:21:4B:30
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19DB070EC6CE11F097E8C2B5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:aa:69:9e:38:2a:6e:10:a8:25:c3:16:a6:ae:f1:74:88:54:
         65:9d:9d:6b:b6:46:77:06:0a:d5:2a:70:c1:a9:a9:d2:0f:d3:
         62:9a:18:f4:f7:4f:fa:a8:2e:34:ed:77:73:f9:22:ca:aa:24:
         57:e3:34:17:d8:54:78:10:3b:be:4a:32:41:71:43:3e:8a:1e:
         e1:c9:3c:38:b0:94:ee:db:58:f6:bc:97:75:2b:25:03:06:dd:
         e6:f2:62:aa:e8:06:8b:5d:a7:eb:d4:5b:4d:d0:fd:e8:d9:02:
         b9:a0:ae:28:08:cc:78:ac:70:ac:70:af:84:b7:54:66:ff:3f:
         8b:33:2a:8d:dd:41:6b:16:36:cb:a3:b3:78:d5:08:e2:cc:9a:
         75:ea:28:53:26:dd:7a:3c:d6:bc:50:02:a2:0a:28:f9:ae:77:
         16:df:a4:8d:cc:96:f2:38:a6:d3:3b:78:09:38:6f:72:94:56:
         0a:cb:09:5a:69:dc:14:a5:40:2f:04:5c:de:15:71:39:96:4d:
         c5:cd:d7:9b:3b:2f:0e:1a:ac:d3:35:01:96:6a:81:01:0e:92:
         ca:06:2e:90:ff:c1:c2:df:ec:22:10:fc:a4:a5:14:77:17:64:
         00:b1:dc:e6:cb:5a:c8:a9:a6:e3:97:49:18:e2:a8:63:b6:eb:
         0f:ed:fb:c6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYj1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTIxMTEzNDUwWhcNMjUxMjA0MTEzNDUwWjAYMRYw
FAYDVQQDEw02OTIwNGU1Zi0yYmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6hw5FqspVK8dM8NY4YhE0ZgGAYXlF90dBtuKFJVErbkgyScByFZgywJR
3y5VclJRYJcP5RKuY+sYtlZ7rEI/u0lRgd6XZs7/T6NvxKtB/EFbgAFxFrrBbtya
/Dk374E3iWSz+47FhFEezJjk1gZTluXy9Ovc7CyHW1rOeVjF7AIrzX4u2P/8CLJd
FOuk2hNZhcxXms4nXkHqK3gNJlDV0Q5oIXxPk1dG2eaSGGn/vANbMKy2W9uIeQPi
wVkWXawxVM+GQOZdR29TsSFDnnLyHsWBibpWSI/WQadvagqstYGaTnEqXglH0xNW
43E4OV5N5BGZFNrhciSeLotYwRHtmQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAzh
VEE2Ga1IcwyeklbCO0htIUswMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xOURCMDcwRUM2Q0UxMUYwOTdFOEMyQjVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnOWAMA0GCSqGSIb3DQEBCwUA
A4IBAQAqqmmeOCpuEKglwxamrvF0iFRlnZ1rtkZ3BgrVKnDBqanSD9Nimhj090/6
qC407Xdz+SLKqiRX4zQX2FR4EDu+SjJBcUM+ih7hyTw4sJTu21j2vJd1KyUDBt3m
8mKq6AaLXafr1FtN0P3o2QK5oK4oCMx4rHCscK+Et1Rm/z+LMyqN3UFrFjbLo7N4
1QjizJp16ihTJt16PNa8UAKiCij5rncW36SNzJbyOKbTO3gJOG9ylFYKywlaadwU
pUAvBFzeFXE5lk3FzdebOy8OGqzTNQGWaoEBDpLKBi6Q/8HC3+wiEPykpRR3F2QA
sdzmy1rIqabjl0kY4qhjtusP7fvG
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:22 2025 by rpki-client