This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37FD285CBAEE11F0B0CCDDD0DAE4EC9C.roa
File:                     37FD285CBAEE11F0B0CCDDD0DAE4EC9C.roa (raw, json)
Hash identifier:          eMj43+2AzO2jDoSHxRmAeUYN+YBgoc4PPBZKasIEfRI=
Subject key identifier:   9F:1E:01:27:EA:22:34:4A:41:67:67:6F:C5:AE:48:ED:56:C1:30:D0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01850D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37FD285CBAEE11F0B0CCDDD0DAE4EC9C.roa
Signing time:             Thu 06 Nov 2025 08:54:36 +0000
ROA not before:           Thu 06 Nov 2025 08:54:31 +0000
ROA not after:            Sat 13 Dec 2025 08:54:31 +0000
asID:                     397423
IP address blocks:        156.225.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 25 Nov 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99597 (0x1850d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  6 08:54:31 2025 GMT
            Not After : Dec 13 08:54:31 2025 GMT
        Subject: CN=690c624b-0c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:f8:bc:93:92:42:9a:0b:a6:29:7f:af:a9:
                    2a:df:ae:3e:5d:9c:6d:e3:85:17:cb:95:de:a6:7b:
                    a5:bf:27:5d:eb:db:e5:f5:92:c4:65:61:c6:c7:d9:
                    3f:c1:fc:dc:27:e5:9c:b8:a7:8f:90:6c:34:c3:35:
                    fe:d7:cb:07:d9:cc:80:dc:39:3f:3a:01:fd:e4:46:
                    a1:1f:32:3a:98:62:9b:67:06:ac:ce:c2:88:a2:6e:
                    ea:16:25:83:f4:cc:28:cf:39:51:0a:11:f0:6a:9b:
                    a4:9c:71:76:70:a0:e9:43:33:31:6f:99:55:67:f2:
                    d4:56:06:a1:39:5f:a6:8c:91:ed:37:87:5b:2b:14:
                    a5:1d:59:8c:c7:d7:e5:d1:72:25:8b:56:2d:c5:6a:
                    e4:f5:8a:01:7d:83:8a:71:c4:9a:00:65:f1:41:70:
                    b0:95:de:5b:c1:71:52:b9:44:47:27:dc:4f:e7:d6:
                    85:a9:20:5c:3b:d6:03:a5:53:e5:fc:b7:f7:97:99:
                    e8:b1:e9:54:0d:a6:05:ac:10:16:16:b8:22:42:7e:
                    83:12:8e:38:36:d2:38:9f:72:07:21:39:79:28:e6:
                    dc:55:0a:4b:d6:df:10:f8:c9:fa:a3:e8:8c:3b:e7:
                    a9:f0:a5:0f:4c:7b:6e:0b:87:f4:b1:b2:8c:15:ac:
                    c4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1E:01:27:EA:22:34:4A:41:67:67:6F:C5:AE:48:ED:56:C1:30:D0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37FD285CBAEE11F0B0CCDDD0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:e0:3f:de:17:8e:0b:a0:1e:65:29:60:0b:34:53:b7:12:5e:
         e2:e8:47:6e:38:d9:09:72:a3:b5:74:40:1c:ea:2f:21:27:30:
         0d:15:6a:41:4e:e0:f2:9c:31:12:03:d4:a8:fe:46:a8:d1:7e:
         9b:ee:11:f1:af:d9:4e:3e:31:20:e9:6e:1c:af:fb:20:6f:3f:
         1e:3a:6c:f4:fd:0a:c5:72:e8:52:59:31:8e:e2:e6:e1:96:a1:
         30:8a:69:56:1e:d9:2c:4e:fd:ef:7e:12:46:f2:57:51:b8:51:
         73:67:72:a8:75:6c:8d:df:96:e7:f2:36:42:0b:b6:3b:6c:f1:
         e9:26:ed:85:be:bf:ce:a8:90:ce:64:ba:5b:2b:7f:c0:97:c7:
         de:87:62:07:2d:42:5f:72:85:0e:dd:d3:ef:7e:46:64:95:e8:
         f6:7f:0f:93:13:f1:6b:4e:db:70:78:94:81:d2:8a:de:93:12:
         29:41:2a:25:41:6f:e2:72:e4:6e:c0:7b:2c:57:b4:bc:d5:60:
         f1:cd:8e:96:bd:28:2f:df:fc:be:db:25:d7:42:28:46:dd:b9:
         0b:e1:ad:2b:4d:22:00:1c:7b:6f:8d:16:1d:1b:20:82:5d:29:
         30:fe:0c:f2:ea:6f:55:b5:7f:7f:dc:ca:fc:3c:75:bc:e0:4a:
         63:d7:ef:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 13:05:31 2025 by rpki-client