This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D5FE32CE65111F0A10589BCDAE4EC9C.roa
File:                     4D5FE32CE65111F0A10589BCDAE4EC9C.roa (raw, json)
Hash identifier:          MG/+rTle6RVsYk8dhq/oZlk1vhZ7ui/zKP16Bcdl2k0=
Subject key identifier:   7F:FB:F6:6E:2C:90:D5:2E:88:65:54:45:FD:CE:4B:B7:58:59:8F:00
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019378
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D5FE32CE65111F0A10589BCDAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 14:02:12 +0000
ROA not before:           Wed 31 Dec 2025 14:02:06 +0000
ROA not after:            Wed 16 Dec 2026 14:02:06 +0000
asID:                     4809
IP address blocks:        156.242.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103288 (0x19378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 31 14:02:06 2025 GMT
            Not After : Dec 16 14:02:06 2026 GMT
        Subject: CN=69552ce4-13ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:f2:78:9b:22:ba:4e:b4:1b:79:c0:bd:95:
                    11:68:15:a3:ec:1d:5c:ec:4e:fc:bb:0c:b1:2d:65:
                    4c:a4:ba:98:27:2f:92:bd:39:1d:0c:69:45:98:2d:
                    87:d9:24:24:ea:bf:96:5c:40:9b:55:6d:ca:4d:2d:
                    c1:80:20:39:2b:aa:b5:37:e7:1c:ed:52:7c:fd:eb:
                    3a:75:52:43:45:cd:90:43:7d:2d:d2:ad:a5:93:37:
                    8d:38:11:9a:11:8b:00:88:f9:ea:5a:60:60:f0:92:
                    30:54:cc:8b:e5:8e:f4:2d:9c:87:24:bf:05:f4:02:
                    01:d3:2d:b4:42:e2:9a:d6:7c:52:79:06:d8:7e:ab:
                    0f:d1:35:e2:0f:7d:82:26:80:7a:58:75:d7:79:3b:
                    a1:d0:05:c7:be:2c:9f:73:7d:97:ee:70:20:c8:95:
                    69:fb:9a:00:c9:44:63:4b:2d:e6:44:ac:cd:80:17:
                    51:07:99:65:84:92:b8:63:fc:5b:b0:98:b7:c3:cb:
                    a6:57:21:ea:f2:48:50:53:49:81:93:eb:7f:9c:2f:
                    a3:68:8e:98:0a:94:5a:04:80:62:aa:82:71:db:ba:
                    21:e1:33:e4:3d:e0:82:e3:75:7c:ab:cc:6c:b3:17:
                    c5:c7:65:79:86:61:28:45:30:b0:d3:59:97:f9:42:
                    8a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FB:F6:6E:2C:90:D5:2E:88:65:54:45:FD:CE:4B:B7:58:59:8F:00
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D5FE32CE65111F0A10589BCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:a5:dd:2d:04:92:f9:8c:41:69:2b:8f:22:d3:96:a0:f4:15:
         0b:1c:dc:cd:94:48:6d:4d:ab:c8:45:80:59:46:d9:b9:4e:6a:
         91:fe:80:f5:af:e6:08:d5:63:77:db:6b:ad:e2:8e:d1:f0:a9:
         95:97:ab:72:d1:fa:2d:69:c1:ab:d6:f4:51:9f:17:40:b6:b8:
         06:00:c9:9e:8d:d9:96:d8:ce:8d:2c:5b:b7:cf:8e:ef:b3:97:
         00:c8:ac:2f:b4:a6:8f:98:ce:4a:b7:06:f8:be:74:58:48:0a:
         7b:92:d2:ec:50:fa:84:4b:4f:ad:0c:7b:59:19:e8:8b:e7:7b:
         50:a8:c2:79:79:cf:b6:bb:2e:20:12:92:82:e3:81:d5:ff:33:
         d8:a1:fc:01:83:f2:d1:df:50:47:38:4d:e1:ab:3b:5c:60:53:
         ca:e3:65:2d:eb:32:86:63:c9:b7:bb:e2:53:7b:14:49:74:be:
         d4:d4:04:fe:ec:fe:fb:65:24:a3:2f:35:3b:20:26:25:32:9b:
         4a:e9:cd:f6:99:41:5e:31:3b:9e:84:ff:67:22:aa:fd:6d:c6:
         9b:14:2d:03:fd:8c:81:84:bf:7b:47:4d:94:d8:16:a8:5c:a8:
         94:27:c8:82:ff:aa:1d:88:76:07:3b:87:5d:cd:12:3a:cb:f6:
         01:d0:86:84
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZN4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjMxMTQwMjA2WhcNMjYxMjE2MTQwMjA2WjAYMRYw
FAYDVQQDEw02OTU1MmNlNC0xM2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA49ryeJsiuk60G3nAvZURaBWj7B1c7E78uwyxLWVMpLqYJy+SvTkdDGlF
mC2H2SQk6r+WXECbVW3KTS3BgCA5K6q1N+cc7VJ8/es6dVJDRc2QQ30t0q2lkzeN
OBGaEYsAiPnqWmBg8JIwVMyL5Y70LZyHJL8F9AIB0y20QuKa1nxSeQbYfqsP0TXi
D32CJoB6WHXXeTuh0AXHviyfc32X7nAgyJVp+5oAyURjSy3mRKzNgBdRB5llhJK4
Y/xbsJi3w8umVyHq8khQU0mBk+t/nC+jaI6YCpRaBIBiqoJx27oh4TPkPeCC43V8
q8xssxfFx2V5hmEoRTCw01mX+UKK+QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH/7
9m4skNUuiGVURf3OS7dYWY8AMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RDVGRTMyQ0U2NTExMUYwQTEwNTg5QkNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPIIMA0GCSqGSIb3DQEBCwUA
A4IBAQCBpd0tBJL5jEFpK48i05ag9BULHNzNlEhtTavIRYBZRtm5TmqR/oD1r+YI
1WN322ut4o7R8KmVl6ty0fotacGr1vRRnxdAtrgGAMmejdmW2M6NLFu3z47vs5cA
yKwvtKaPmM5Ktwb4vnRYSAp7ktLsUPqES0+tDHtZGeiL53tQqMJ5ec+2uy4gEpKC
44HV/zPYofwBg/LR31BHOE3hqztcYFPK42Ut6zKGY8m3u+JTexRJdL7U1AT+7P77
ZSSjLzU7ICYlMptK6c32mUFeMTuehP9nIqr9bcabFC0D/YyBhL97R02U2BaoXKiU
J8iC/6odiHYHO4ddzRI6y/YB0IaE
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:28 2026 by rpki-client