This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E9FB180CF8411F0AD5631F0DAE4EC9C.roa
File:                     2E9FB180CF8411F0AD5631F0DAE4EC9C.roa (raw, json)
Hash identifier:          3zi4t3BD3vcdkcJ/oTR1cDBRZj3ghuNa32K4QP/ZUVE=
Subject key identifier:   B5:CA:01:E5:78:44:23:06:E5:2E:B1:31:5A:E5:F2:5E:4B:B6:EF:81
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018AE7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E9FB180CF8411F0AD5631F0DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 13:38:28 +0000
ROA not before:           Tue 02 Dec 2025 13:38:21 +0000
ROA not after:            Sun 04 Jan 2026 13:38:21 +0000
asID:                     211961
IP address blocks:        156.233.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101095 (0x18ae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 13:38:21 2025 GMT
            Not After : Jan  4 13:38:21 2026 GMT
        Subject: CN=692eebd4-8e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:ad:0c:4b:49:48:b8:41:14:ed:17:ed:02:
                    ba:c4:ed:38:f8:20:ca:93:85:4e:e2:6b:80:d6:89:
                    2d:63:90:92:f0:d5:20:10:53:44:d5:2e:65:78:94:
                    56:86:cb:8d:34:3f:ec:f8:89:ec:bb:39:d5:07:72:
                    6d:b3:c9:2f:38:2a:7c:ac:83:d0:26:bb:d5:cb:b7:
                    08:9e:dd:7e:cd:62:93:5b:c1:05:85:d3:0a:f0:5f:
                    18:cf:f9:93:87:58:60:b3:bb:8a:14:5e:b4:cc:1d:
                    de:3d:51:37:a4:03:e6:35:e8:23:f5:2c:a9:80:5f:
                    b0:8d:cc:06:44:3e:2b:4a:f8:64:69:5e:52:9b:39:
                    35:c4:eb:25:42:ea:72:a0:09:c6:3d:33:43:0e:f4:
                    21:b3:da:66:2e:1d:e9:0e:8e:42:3d:67:f5:3a:9b:
                    61:fd:8d:30:c7:6b:42:67:bf:02:dc:57:56:e0:48:
                    54:ff:13:71:05:7c:03:73:f1:58:a6:87:62:3d:6d:
                    de:f0:dc:12:ad:b2:27:c0:14:c3:9e:c3:ef:18:b1:
                    06:ee:78:bf:27:cc:d8:d6:60:00:e9:5a:b9:0c:7b:
                    96:b7:5b:19:91:3d:d0:f7:d1:47:75:b2:a5:e3:a1:
                    f5:58:53:fb:cf:69:cb:6b:1e:3e:2f:c4:78:24:1f:
                    2e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CA:01:E5:78:44:23:06:E5:2E:B1:31:5A:E5:F2:5E:4B:B6:EF:81
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E9FB180CF8411F0AD5631F0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:59:2c:14:13:82:45:db:d2:97:0a:8e:00:74:2c:1b:d6:bc:
         c9:a3:1a:da:60:3e:87:a2:eb:ba:e3:45:0f:b3:97:c5:53:2f:
         a1:1b:a0:ab:c8:9f:a9:d5:d9:74:9a:d4:9c:46:ed:96:a2:2e:
         16:bd:b0:fa:8b:ae:8a:d8:95:3d:ac:2f:f7:62:ca:9b:06:5c:
         96:a2:ea:3d:2b:88:7f:0f:ef:ba:96:fc:84:54:9c:fe:cc:10:
         04:db:12:b8:28:34:89:89:c4:ad:db:7c:88:29:38:a0:4d:b6:
         c7:51:6f:6b:b2:0f:f2:c3:23:c6:27:8b:e6:cd:d5:48:ba:dc:
         05:de:ef:e4:a7:fe:47:2b:ad:88:6e:48:22:00:07:45:5e:9e:
         0c:e3:30:57:9b:84:ad:d0:c2:7d:4e:35:f6:fd:b7:e3:48:63:
         e8:6a:2e:41:e9:35:a8:d6:a0:17:e4:78:38:ff:e3:01:40:89:
         ef:69:f0:f5:0d:30:06:d3:85:4a:75:dd:f1:d8:c1:a0:03:7e:
         3a:05:43:3f:3e:72:45:0b:59:88:17:5c:eb:36:69:51:a7:72:
         c1:29:08:ec:bd:ad:07:34:28:d9:46:97:42:b8:7a:bb:9c:cb:
         b7:a1:58:19:ef:51:68:ac:7d:82:b8:44:6d:cf:7e:d8:6c:77:
         31:37:92:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:47:57 2025 by rpki-client