This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52F395A0C6B111F0AF458685DAE4EC9C.roa
File:                     52F395A0C6B111F0AF458685DAE4EC9C.roa (raw, json)
Hash identifier:          37IUauY+uq62fjZF5lbfHtyZhb1+jp2WtDkyd3MLam0=
Subject key identifier:   F7:A9:FA:07:8D:57:AF:A4:9A:A5:A2:E3:02:4F:9A:DF:EC:18:F2:55
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0188CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52F395A0C6B111F0AF458685DAE4EC9C.roa
Signing time:             Fri 21 Nov 2025 08:08:55 +0000
ROA not before:           Fri 21 Nov 2025 08:08:50 +0000
ROA not after:            Fri 26 Dec 2025 08:08:50 +0000
asID:                     140869
IP address blocks:        156.225.90.0/24 maxlen: 24
                          156.225.91.0/24 maxlen: 24
                          156.225.92.0/24 maxlen: 24
                          156.225.93.0/24 maxlen: 24
                          156.225.94.0/24 maxlen: 24
                          156.225.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100559 (0x188cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 21 08:08:50 2025 GMT
            Not After : Dec 26 08:08:50 2025 GMT
        Subject: CN=69201e17-86bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:00:5a:dc:35:5b:4b:48:ca:67:00:13:ca:
                    f4:3a:2d:e2:e4:41:53:8a:01:67:bc:e4:f2:1b:fb:
                    cc:d3:57:25:ab:0c:c2:72:d4:61:19:79:60:65:e0:
                    5c:5f:7c:7e:7c:bd:aa:36:82:e2:2f:20:46:26:11:
                    1a:83:ec:12:55:fe:f7:ba:89:1a:a1:73:21:b7:bd:
                    26:06:82:bb:ec:54:19:64:48:47:7b:30:5f:06:f1:
                    ef:50:09:db:9e:6c:6f:17:fc:a7:1d:d9:5b:fd:a3:
                    7a:93:39:b7:1c:4b:3a:b5:b8:78:6c:51:60:ec:4f:
                    47:09:c8:b1:e7:66:4d:db:52:ae:59:ac:11:5e:6a:
                    93:89:f1:03:0d:92:e8:0c:f1:35:9d:7a:94:dc:27:
                    fb:30:30:c5:1f:ac:85:79:c1:70:c8:7d:e8:43:e9:
                    0d:78:d6:e0:ed:08:ca:69:dc:3a:5c:c0:c9:cb:ac:
                    d4:59:e3:58:ea:ff:21:fa:b9:91:3b:d2:09:18:a5:
                    3a:2e:b5:24:1a:e3:4a:5a:03:58:2c:e7:db:7e:c6:
                    5d:09:be:b5:0b:ed:fb:be:9e:c1:8f:0d:24:1e:e1:
                    5b:27:3b:f1:11:c7:3c:ed:d6:d3:d2:fa:6b:6f:aa:
                    6f:8e:ea:4e:38:1a:ef:b9:a0:64:64:47:bc:bd:04:
                    43:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A9:FA:07:8D:57:AF:A4:9A:A5:A2:E3:02:4F:9A:DF:EC:18:F2:55
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52F395A0C6B111F0AF458685DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.90.0-156.225.95.255

    Signature Algorithm: sha256WithRSAEncryption
         07:40:9c:de:22:39:de:bf:20:30:c2:a7:3f:27:40:4e:ba:29:
         e3:61:ba:1a:2c:5a:ca:94:7c:46:40:c0:f9:8f:6e:53:a5:48:
         55:5d:de:42:6f:5b:7a:9b:8b:10:d6:f0:05:fc:88:c6:0d:a1:
         64:69:74:e4:ac:04:12:ea:9f:71:63:39:a7:d8:f7:59:51:96:
         40:bc:74:2b:65:c0:7f:f7:11:f6:2b:8e:30:a6:88:bd:28:16:
         32:e4:29:51:5b:a8:88:f7:d1:db:71:bd:1f:25:21:d0:f0:e3:
         3c:01:90:46:7b:f9:fe:a6:42:f3:dc:eb:9d:f6:49:91:47:ea:
         30:e7:f3:f9:bc:79:b1:b7:6c:ef:b3:be:0c:ac:e0:36:3c:35:
         b4:e2:45:a7:79:ca:d3:f7:07:2b:92:85:1b:03:06:fa:55:e8:
         08:35:26:5f:10:09:c7:55:07:9b:2e:c3:b6:5c:45:f9:a1:87:
         7f:44:3d:ae:fb:05:43:fd:91:4a:df:e8:ec:41:26:d9:e7:80:
         00:06:c6:f4:8f:67:db:90:9c:6d:fd:58:af:c3:e7:04:69:56:
         76:0f:f5:80:f5:be:ae:f8:39:74:c9:c6:0d:f4:c9:5e:a4:43:
         1b:1b:b7:ff:d2:0c:33:99:eb:67:f1:bb:d0:70:b3:38:43:c9:
         97:19:3c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:10 2025 by rpki-client