This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20B70AD6C47C11F0A42409A2DAE4EC9C.roa
File:                     20B70AD6C47C11F0A42409A2DAE4EC9C.roa (raw, json)
Hash identifier:          nxcFBt51aGz9QUglxDZa9HpghmjpleuY/B1CpaLKAyQ=
Subject key identifier:   8C:C8:D5:9C:50:F5:85:65:4B:A3:D9:F7:C7:29:3A:E2:B3:D7:3E:7E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018838
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20B70AD6C47C11F0A42409A2DAE4EC9C.roa
Signing time:             Tue 18 Nov 2025 12:43:05 +0000
ROA not before:           Tue 18 Nov 2025 12:43:00 +0000
ROA not after:            Tue 30 Dec 2025 12:43:00 +0000
asID:                     152705
IP address blocks:        156.245.200.0/22 maxlen: 24
                          156.245.200.0/24 maxlen: 24
                          156.245.201.0/24 maxlen: 24
                          156.245.202.0/24 maxlen: 24
                          156.245.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100408 (0x18838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 18 12:43:00 2025 GMT
            Not After : Dec 30 12:43:00 2025 GMT
        Subject: CN=691c69d9-c04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:de:69:be:b7:43:8b:15:88:ed:00:7a:92:
                    01:b0:51:e1:e9:78:b8:a6:af:93:94:66:d2:c8:bb:
                    35:43:bd:4c:68:57:a6:b7:9d:e8:e4:11:04:db:2c:
                    6d:8a:c3:51:6f:ba:ad:74:b7:41:e1:0c:2c:3d:87:
                    e7:29:93:f6:d9:e7:7c:4a:76:ae:21:c9:b8:8c:48:
                    4b:2c:25:9f:b9:1c:9f:08:c4:04:14:ed:f0:32:c1:
                    08:56:c3:32:ac:f3:e7:67:03:03:10:79:48:58:4e:
                    72:eb:d4:4a:3e:bd:bd:c6:61:b4:06:a3:aa:ff:67:
                    9a:99:ed:3d:79:84:9d:bf:07:91:69:78:74:74:0e:
                    2d:c4:ff:d4:bc:03:67:55:7f:1a:b9:d1:1c:6a:16:
                    80:8b:ce:11:8b:8d:2b:b8:e4:a1:ce:d8:ff:43:f0:
                    bb:8c:74:6f:cf:19:dd:d2:6b:91:bf:c2:8a:92:f6:
                    f3:4c:a2:ac:a9:cc:ff:58:5a:ad:1b:ce:25:f3:aa:
                    7c:f6:f2:4d:16:bb:7b:6a:8f:85:e2:ff:07:2c:bf:
                    85:26:11:ad:ba:f0:81:fa:82:fe:19:0b:f8:7f:7b:
                    8c:2b:63:cb:66:a7:bc:1e:e3:64:00:87:54:ad:49:
                    da:dc:82:86:3d:9a:42:9c:d2:50:9d:04:a6:25:38:
                    ba:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C8:D5:9C:50:F5:85:65:4B:A3:D9:F7:C7:29:3A:E2:B3:D7:3E:7E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20B70AD6C47C11F0A42409A2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:a7:2c:a6:cd:61:de:f4:7c:e1:5d:f5:ad:15:92:ad:69:dc:
         bf:60:d5:8e:2f:1a:9a:f0:f2:d5:e2:23:21:7b:92:c6:fc:07:
         56:f6:cc:b2:5a:43:75:d6:d8:e6:df:3e:ac:07:f7:ab:b2:de:
         fc:35:20:83:57:93:73:b6:85:f7:8a:c5:b4:39:9b:82:64:e6:
         68:b7:35:d5:6e:d6:2e:75:d4:ac:3d:fb:3c:b4:33:7e:35:0f:
         47:4d:39:23:42:cf:76:7c:d4:6b:6e:50:79:f4:0b:1e:81:77:
         c4:a5:7f:cd:aa:ae:cc:ad:9d:c8:14:94:61:42:39:a8:fc:e0:
         20:c7:82:ef:b8:64:bd:fb:33:be:2b:61:e5:45:b9:94:25:63:
         ff:ab:b5:79:d7:fc:dc:05:c7:39:52:3b:bb:25:a3:f3:ae:e5:
         2c:f1:c6:12:86:66:45:34:59:cf:04:a8:3a:9e:2e:09:5f:eb:
         92:9e:96:fd:3d:6b:14:29:f7:24:14:01:fd:96:55:1a:d0:df:
         2b:56:71:ab:68:4f:23:6d:e2:a1:a9:1c:8d:60:53:86:73:dd:
         2d:c1:99:f7:65:e6:db:26:94:ad:4d:ed:4e:c6:65:d1:89:3a:
         a1:01:de:a5:f6:df:64:cc:26:e2:72:64:7f:5c:5e:4d:f8:96:
         bf:1a:f4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:01 2025 by rpki-client