This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2383A728CEA511F0B9422B7ADAE4EC9C.roa
File:                     2383A728CEA511F0B9422B7ADAE4EC9C.roa (raw, json)
Hash identifier:          HLKkNibw25pG1GBCBw89taqtYgPAA4qEFdRdlbgZoZI=
Subject key identifier:   C9:78:D0:A7:7A:81:34:2B:0C:E6:1B:67:3F:B8:09:F8:68:58:61:7C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018AA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2383A728CEA511F0B9422B7ADAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 11:01:51 +0000
ROA not before:           Mon 01 Dec 2025 11:01:46 +0000
ROA not after:            Tue 09 Dec 2025 11:01:46 +0000
asID:                     214016
IP address blocks:        156.225.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101029 (0x18aa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  1 11:01:46 2025 GMT
            Not After : Dec  9 11:01:46 2025 GMT
        Subject: CN=692d759f-8c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:2d:ce:e7:42:5f:1b:12:f8:07:c7:19:dd:
                    b1:fd:61:ab:20:03:f5:db:ab:38:96:e4:bc:5f:cb:
                    21:4e:a2:2d:61:b4:07:14:ce:d8:0c:27:05:4f:00:
                    db:b2:17:05:81:9d:5b:20:6c:47:7a:40:c6:49:52:
                    ae:13:d7:d9:cd:a1:d5:f9:41:ca:15:1c:e8:f1:18:
                    7d:7a:cf:0c:84:46:4e:19:75:56:8a:dd:9b:a9:6b:
                    8e:65:b5:c3:a8:28:79:96:62:e6:44:ff:c3:26:7e:
                    70:54:88:ce:af:1f:0f:98:49:b4:cf:4d:81:a2:c6:
                    29:be:e0:54:58:e4:27:9d:ac:f8:e6:81:22:0e:e4:
                    b9:24:7b:3e:bb:08:8a:04:11:ac:cc:b4:6d:97:08:
                    62:8f:ba:4c:92:02:d6:fb:94:ba:52:6c:70:83:e0:
                    bf:2b:db:8b:29:0d:90:56:a5:9d:99:97:c1:38:96:
                    ad:a8:12:a2:a1:44:97:b5:9b:c3:48:a9:32:a9:bc:
                    eb:9e:bb:43:02:2c:9e:ed:bb:08:cc:bd:5f:91:43:
                    1b:bd:e0:48:ea:32:23:58:db:da:2a:ac:05:5c:91:
                    b0:9d:27:8d:ca:c0:8f:03:09:a9:12:82:af:63:0c:
                    48:96:46:0f:54:ea:c9:c5:15:0f:36:ca:74:5a:8f:
                    62:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:78:D0:A7:7A:81:34:2B:0C:E6:1B:67:3F:B8:09:F8:68:58:61:7C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2383A728CEA511F0B9422B7ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:ee:d6:6a:27:fb:37:29:d0:49:43:b2:2a:95:97:4a:4a:1f:
         24:aa:93:17:7d:3f:9d:a4:0b:dd:22:97:3d:f6:91:88:ae:e1:
         5b:7f:e0:02:bf:73:54:8a:ff:15:b7:a0:66:94:c2:18:16:0b:
         82:c6:61:49:d0:71:06:87:d5:41:0a:51:19:fe:c6:95:17:26:
         00:eb:07:02:13:b2:cf:22:a2:26:ff:be:96:5a:1d:06:66:c6:
         d7:bc:70:09:e4:53:10:b4:a2:ae:63:60:69:25:dc:3e:50:7a:
         88:ff:d5:47:e2:d0:61:79:88:a0:cd:c7:69:51:95:d0:fa:9f:
         46:33:55:de:27:1e:b9:9e:6c:c7:78:2b:ab:c2:98:4a:9c:b5:
         b8:e0:01:54:96:1f:77:32:68:f5:1d:93:1c:77:a8:9c:9f:64:
         72:1b:3a:b4:4e:d3:c5:f0:8b:58:cc:06:d5:bd:ab:16:e1:dd:
         50:07:0b:83:27:93:17:85:90:d1:7f:b7:12:2b:b1:24:84:37:
         49:f7:c8:63:6d:36:6c:20:0a:0d:c4:2a:0b:6c:fe:40:5d:98:
         6d:b1:cf:c9:1e:26:e9:6a:9b:c0:25:d7:25:25:91:21:cc:f4:
         53:50:d1:13:ed:40:73:c8:66:64:fb:75:6c:07:64:21:31:87:
         dc:fa:65:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:46 2025 by rpki-client