This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AD9C1A0C48611F09B2CB5E2DAE4EC9C.roa
File:                     4AD9C1A0C48611F09B2CB5E2DAE4EC9C.roa (raw, json)
Hash identifier:          nCDcucFI4aXfwRI0rikmfFyz6eAAmilQSvCHfo87StY=
Subject key identifier:   FE:92:FD:63:54:5A:82:0F:0B:DA:6A:B2:0A:BA:47:0A:AE:0F:0C:82
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018850
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AD9C1A0C48611F09B2CB5E2DAE4EC9C.roa
Signing time:             Tue 18 Nov 2025 13:55:51 +0000
ROA not before:           Tue 18 Nov 2025 13:55:45 +0000
ROA not after:            Sun 15 Mar 2026 13:55:45 +0000
asID:                     139880
IP address blocks:        156.249.224.0/20 maxlen: 24
                          156.253.32.0/20 maxlen: 24
                          156.253.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100432 (0x18850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 18 13:55:45 2025 GMT
            Not After : Mar 15 13:55:45 2026 GMT
        Subject: CN=691c7ae7-3ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:00:21:75:97:28:70:b2:5d:25:31:10:47:
                    17:c5:50:a2:42:6d:14:01:e1:75:a2:43:3a:82:17:
                    75:2b:06:5f:3a:81:75:43:c8:2e:7e:e6:77:f8:8a:
                    d0:d3:f3:6d:71:9a:06:48:c7:cb:dc:14:35:ab:fe:
                    e0:36:c8:a2:60:c4:46:68:7b:28:67:c5:01:b3:37:
                    e6:1b:3d:65:8f:2e:9f:2a:18:8c:1e:bb:f0:92:60:
                    1f:15:95:14:09:d0:e7:65:e4:be:31:ab:d8:64:21:
                    b5:f3:17:62:6c:c3:cd:29:d6:5e:fb:6b:b1:7a:98:
                    f3:0c:07:9f:3f:1d:db:6d:26:2c:0e:bc:4f:b5:f9:
                    2a:f7:79:fe:b7:ac:fe:8e:d4:dc:8d:4c:b0:2f:35:
                    68:13:c0:fc:d9:60:34:f7:ac:19:1d:60:93:80:eb:
                    d4:a2:97:4d:40:a7:c6:42:e0:aa:0e:f1:47:2b:dd:
                    2b:eb:30:3f:1d:2a:73:e8:4b:52:7b:68:16:f2:75:
                    b0:32:81:8b:8a:df:7a:67:87:3c:84:a6:23:b5:9e:
                    99:94:55:e4:be:8d:97:61:41:6f:af:cd:c7:b5:5a:
                    ea:ba:fe:5a:da:a6:90:1d:6d:30:d8:04:45:00:a4:
                    90:f5:c6:a2:07:0d:b9:0e:7e:d7:83:9b:0f:b1:12:
                    10:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:92:FD:63:54:5A:82:0F:0B:DA:6A:B2:0A:BA:47:0A:AE:0F:0C:82
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AD9C1A0C48611F09B2CB5E2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.224.0/20
                  156.253.32.0/20
                  156.253.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:7e:0d:7f:7f:ff:a8:63:1f:12:2a:65:15:b7:5b:05:72:72:
         5d:e7:4a:c7:78:02:ad:46:6c:1e:69:50:76:53:a9:35:22:af:
         01:5e:ed:a3:b0:21:43:81:55:4e:53:c3:2e:1e:d8:a2:32:f2:
         c9:80:ae:1d:7c:bb:68:50:8c:6d:14:bf:b0:4d:e9:32:7b:c4:
         1a:70:37:96:54:c6:e2:01:d0:ed:55:82:57:0d:c5:1a:35:00:
         9c:c5:77:14:fc:5e:96:f0:73:e5:9a:6e:ff:0e:cb:c8:f9:bc:
         df:d8:a6:02:30:fa:9e:92:5e:f3:9e:98:52:ce:73:7f:28:2c:
         95:32:bb:c5:c0:0e:bb:80:15:e3:da:16:46:b6:7f:2c:c3:da:
         97:72:c6:0b:47:49:5f:92:a0:9c:bd:2d:99:59:77:ac:d3:d8:
         ed:3e:93:18:f6:b5:81:1a:b9:d4:6e:f3:b8:11:e2:54:68:c2:
         0c:3b:32:db:15:d7:b8:43:dc:aa:0c:38:59:df:6b:83:0e:25:
         68:1f:7e:d1:7e:51:08:b0:1f:10:38:fb:39:7c:1b:c9:67:68:
         01:19:7e:ec:68:0c:79:f7:f7:c5:5a:93:dd:12:07:b1:15:cb:
         65:69:5b:05:c1:9b:94:bc:fc:d0:00:f7:8e:69:96:c8:ec:ad:
         1e:a7:89:40
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAYhQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTE4MTM1NTQ1WhcNMjYwMzE1MTM1NTQ1WjAYMRYw
FAYDVQQDEw02OTFjN2FlNy0zZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuBUAIXWXKHCyXSUxEEcXxVCiQm0UAeF1okM6ghd1KwZfOoF1Q8gufuZ3
+IrQ0/NtcZoGSMfL3BQ1q/7gNsiiYMRGaHsoZ8UBszfmGz1ljy6fKhiMHrvwkmAf
FZUUCdDnZeS+MavYZCG18xdibMPNKdZe+2uxepjzDAefPx3bbSYsDrxPtfkq93n+
t6z+jtTcjUywLzVoE8D82WA096wZHWCTgOvUopdNQKfGQuCqDvFHK90r6zA/HSpz
6EtSe2gW8nWwMoGLit96Z4c8hKYjtZ6ZlFXkvo2XYUFvr83HtVrquv5a2qaQHW0w
2ARFAKSQ9caiBw25Dn7Xg5sPsRIQOwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFP6S
/WNUWoIPC9pqsgq6RwquDwyCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80QUQ5QzFBMEM0ODYxMUYwOUIyQ0I1RTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEnPngAwQEnP0gAwQEnP2QMA0G
CSqGSIb3DQEBCwUAA4IBAQA1fg1/f/+oYx8SKmUVt1sFcnJd50rHeAKtRmweaVB2
U6k1Iq8BXu2jsCFDgVVOU8MuHtiiMvLJgK4dfLtoUIxtFL+wTekye8QacDeWVMbi
AdDtVYJXDcUaNQCcxXcU/F6W8HPlmm7/DsvI+bzf2KYCMPqekl7znphSznN/KCyV
MrvFwA67gBXj2hZGtn8sw9qXcsYLR0lfkqCcvS2ZWXes09jtPpMY9rWBGrnUbvO4
EeJUaMIMOzLbFde4Q9yqDDhZ32uDDiVoH37RflEIsB8QOPs5fBvJZ2gBGX7saAx5
9/fFWpPdEgexFctlaVsFwZuUvPzQAPeOaZbI7K0ep4lA
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:17 2025 by rpki-client