This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C337132BAFF11F0B0133DBCDAE4EC9C.roa
File:                     2C337132BAFF11F0B0133DBCDAE4EC9C.roa (raw, json)
Hash identifier:          EE0hvmnuegF0uLwGqsyNbYolV4NhnQMAhPh719tnwos=
Subject key identifier:   AE:70:1B:A8:34:73:E1:A1:8F:51:92:BF:47:DA:35:D4:55:1F:71:71
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01852B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C337132BAFF11F0B0133DBCDAE4EC9C.roa
Signing time:             Thu 06 Nov 2025 10:55:57 +0000
ROA not before:           Thu 06 Nov 2025 10:55:52 +0000
ROA not after:            Sat 03 Jan 2026 10:55:52 +0000
asID:                     138643
IP address blocks:        156.234.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99627 (0x1852b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  6 10:55:52 2025 GMT
            Not After : Jan  3 10:55:52 2026 GMT
        Subject: CN=690c7ebd-4cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7a:ed:70:ed:14:1d:64:fd:7a:84:07:1c:a7:
                    6d:fe:9d:de:9b:62:2e:63:5c:d8:3e:52:19:26:fc:
                    a4:57:a4:b3:19:69:14:75:ee:17:f5:7d:e4:38:5f:
                    8d:29:a6:49:91:0c:42:aa:2d:71:ed:b2:2e:17:f3:
                    33:54:47:0b:9d:85:05:24:c2:5a:db:6b:2f:29:ee:
                    00:34:2d:8b:e8:2e:93:30:9c:c0:c7:e5:24:99:34:
                    b6:b7:79:1e:fa:11:39:4c:c1:fa:f6:2c:16:62:e6:
                    f2:e3:30:59:ed:12:6a:05:29:38:b2:04:04:32:aa:
                    87:a9:a8:6d:2e:07:77:cd:10:88:52:ab:1d:d8:c9:
                    7e:d8:6e:ee:34:3c:05:52:f0:82:19:d7:a7:ec:33:
                    9a:67:a3:19:8b:7b:88:a1:4c:0d:c2:b0:6d:84:77:
                    5b:c6:10:4b:c3:df:b4:13:c0:b2:93:4f:d2:db:c8:
                    64:45:8f:1d:25:99:e2:67:b6:39:ab:08:6a:8f:ff:
                    42:6f:fc:b5:d8:37:97:5b:5a:b0:2a:49:71:cc:7a:
                    01:a5:2a:60:f9:5b:10:2b:25:7e:94:31:08:2f:ac:
                    64:02:be:11:0c:2e:24:9b:e2:01:bf:b5:c8:ac:2b:
                    00:36:bc:8a:92:52:5c:c8:41:63:08:47:72:5d:47:
                    28:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:70:1B:A8:34:73:E1:A1:8F:51:92:BF:47:DA:35:D4:55:1F:71:71
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C337132BAFF11F0B0133DBCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:86:03:a8:a5:a2:90:3a:0d:8e:af:9e:c6:09:26:ca:f4:95:
         14:3e:92:b5:21:ac:74:b1:ca:e3:60:8b:53:92:8e:d9:f6:0a:
         77:b0:20:0d:14:db:90:12:0e:60:ad:41:29:01:83:0e:33:09:
         70:af:7f:8e:14:e1:c5:61:20:2c:2b:d1:53:5f:0d:05:f7:03:
         de:7c:d2:e3:02:08:25:9a:f6:0e:0f:a2:b1:d8:e4:22:dc:0a:
         01:88:5b:e7:be:9c:ee:57:be:83:35:f0:da:b1:d9:46:35:35:
         ac:24:2d:73:83:65:85:25:d4:73:44:b1:83:3b:d8:22:2c:4a:
         e8:e4:21:1c:1b:c3:3f:6a:c9:63:0d:9f:ee:45:be:85:d7:d8:
         e5:69:29:63:ac:95:0d:40:80:de:b8:a7:a7:0e:7e:b9:4e:75:
         b4:98:cf:97:03:f8:5e:b1:01:e1:0b:e9:3d:c4:dd:ea:ce:d3:
         1b:01:91:93:69:bc:a6:74:32:38:2c:96:64:3a:33:ab:4a:36:
         e9:fd:a3:85:ff:27:b5:08:22:4b:a6:53:3a:79:35:5f:d0:44:
         f8:d5:b3:a0:f9:3f:68:c9:1e:0e:05:11:12:b0:a6:73:b2:68:
         dc:13:31:3b:ba:64:30:f4:99:5d:2f:dd:b1:29:e0:41:a8:9f:
         86:bf:f0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:48 2025 by rpki-client