This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/415551A2BB0911F0B1D8337ADAE4EC9C.roa
File:                     415551A2BB0911F0B1D8337ADAE4EC9C.roa (raw, json)
Hash identifier:          HdnOzCzF5yVzYN2flM74OLdkXpRxzFCZpkLP5RTcepg=
Subject key identifier:   0B:80:F8:D1:42:20:A1:5E:95:62:A9:AD:3E:70:A0:EB:B8:CB:7A:C4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018551
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/415551A2BB0911F0B1D8337ADAE4EC9C.roa
Signing time:             Thu 06 Nov 2025 12:08:08 +0000
ROA not before:           Thu 06 Nov 2025 12:08:03 +0000
ROA not after:            Sun 04 Jan 2026 12:08:03 +0000
asID:                     18013
IP address blocks:        156.234.0.0/24 maxlen: 32
                          156.234.7.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99665 (0x18551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  6 12:08:03 2025 GMT
            Not After : Jan  4 12:08:03 2026 GMT
        Subject: CN=690c8fa8-9b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:e7:6a:12:5b:53:e5:02:f3:27:9a:7d:01:
                    30:a7:58:8c:2e:c0:c3:ff:d7:41:fc:8b:a5:2c:30:
                    af:03:d0:f5:fc:67:d3:57:84:0f:7b:21:5b:c0:0c:
                    89:f2:30:77:02:dc:f5:c8:34:25:1c:2e:e8:b7:7e:
                    dd:fa:95:68:c4:03:6d:6f:62:a0:c9:46:3c:7e:e9:
                    bd:bd:2d:a7:2f:ae:2c:ff:98:b5:6b:70:58:d0:49:
                    6e:bc:6b:b3:a9:d8:fb:05:67:e1:ab:83:a6:7f:f0:
                    ce:33:3f:84:54:19:82:4a:2c:b2:8b:63:3b:97:6f:
                    e1:3f:c7:86:4f:40:fb:8b:5e:80:07:e5:51:e7:43:
                    1f:28:de:36:19:e0:19:e7:a1:70:92:1e:f3:01:cb:
                    41:59:c5:2d:5d:cb:70:f0:0a:f7:ba:f1:3e:4d:08:
                    53:c3:d9:8f:8f:d8:c5:91:c0:9f:13:af:18:fd:65:
                    4a:a4:04:5e:87:69:b3:e5:0d:a3:d8:de:03:54:84:
                    62:f9:cc:48:fb:5d:00:e8:41:6c:18:d1:b3:a5:a8:
                    84:08:cf:4e:bd:a0:14:88:dc:2b:e5:5d:63:b4:49:
                    fc:ae:ab:38:96:1a:5e:2b:9f:f7:f6:f3:15:78:a6:
                    53:8a:9f:3d:8d:bd:b9:73:e3:81:ca:83:76:7b:27:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:80:F8:D1:42:20:A1:5E:95:62:A9:AD:3E:70:A0:EB:B8:CB:7A:C4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/415551A2BB0911F0B1D8337ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/24
                  156.234.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:f7:cc:df:e4:e6:d5:e3:da:bf:09:e3:61:fd:55:9e:ad:55:
         18:f1:bc:4b:f0:40:39:0f:4a:fd:d5:1a:e0:4a:ad:df:f7:be:
         3c:8c:8f:81:c9:ad:57:d1:45:2a:a5:11:f3:c4:a5:78:1b:79:
         63:74:22:a0:02:44:19:46:eb:57:67:02:63:8f:99:6e:0d:f2:
         27:af:59:30:5b:52:63:3a:39:21:c1:7c:68:6c:1b:00:34:6b:
         06:ca:b7:0d:1b:f2:97:a9:4d:dd:62:a5:80:7d:c1:d9:6a:d3:
         20:b5:90:1c:62:b9:13:16:95:67:55:f7:80:87:48:71:bc:aa:
         29:0b:61:7b:53:d6:bb:a0:ca:04:33:54:6d:a3:8d:33:51:6e:
         31:87:1a:be:7b:ac:91:bf:d8:01:ee:55:de:4c:6d:80:73:46:
         58:41:f2:0b:fa:dc:a1:19:98:ad:0d:8d:10:a6:97:bb:9d:04:
         8e:ea:37:d8:c1:b6:17:ab:cc:fd:d5:f4:f7:ca:23:0f:17:14:
         68:ff:50:85:60:7a:29:d8:8f:c0:2f:76:69:db:4d:02:cc:7a:
         71:f0:3e:57:61:98:63:d9:a8:87:b4:f6:4e:c3:a2:51:cf:4c:
         ae:5b:62:03:fc:db:ad:84:03:5c:71:8d:6f:d1:5e:b0:7e:e6:
         85:ef:79:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:36 2025 by rpki-client