This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B3756D4C5E911F098FA6796DAE4EC9C.roa
File:                     5B3756D4C5E911F098FA6796DAE4EC9C.roa (raw, json)
Hash identifier:          x/lgVHCIcA2RfEW6eK7sQFSBUut+2F+MkA41v2Zlyoc=
Subject key identifier:   0D:FC:3D:63:A7:9E:4C:EC:6C:15:FD:B0:91:73:D2:D4:A0:88:91:0B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018892
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B3756D4C5E911F098FA6796DAE4EC9C.roa
Signing time:             Thu 20 Nov 2025 08:17:30 +0000
ROA not before:           Thu 20 Nov 2025 08:17:22 +0000
ROA not after:            Fri 26 Dec 2025 08:17:22 +0000
asID:                     274728
IP address blocks:        156.235.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100498 (0x18892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 20 08:17:22 2025 GMT
            Not After : Dec 26 08:17:22 2025 GMT
        Subject: CN=691ece9a-dd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:49:3d:72:72:66:11:25:39:ac:59:6b:ee:
                    74:12:cc:d1:ce:0a:5e:ef:0c:6a:1d:d6:f6:8a:75:
                    02:7d:5f:27:3a:78:cc:58:81:be:79:57:7d:90:04:
                    b1:7e:fb:cf:6a:9c:da:98:a7:ed:58:ae:3e:ea:20:
                    1b:a2:0f:ee:55:18:41:51:ea:a2:4b:3a:5d:ec:7a:
                    ca:c3:79:88:da:30:c4:51:8e:04:d9:26:05:38:42:
                    d4:aa:b1:f0:2a:37:e9:79:63:c3:bf:a1:63:98:85:
                    d2:ba:85:7d:7f:bf:27:d6:22:7b:31:46:df:5b:07:
                    9c:bc:22:b8:19:f3:84:f9:11:19:bd:3d:08:21:8a:
                    2c:46:ef:37:d4:b6:f6:44:d3:a7:1e:8d:4b:83:05:
                    3c:8d:73:d7:8f:31:79:d7:e7:eb:4d:51:ab:8c:81:
                    bd:07:d8:f6:44:57:fe:c1:af:ac:e1:6a:ad:fc:88:
                    fb:f5:33:2c:39:ff:74:1b:22:4c:ac:9b:92:28:36:
                    1e:78:04:c4:8d:a0:05:e4:c2:a6:09:fb:7a:7a:96:
                    e9:f3:a6:57:de:9b:1f:22:bd:03:f8:a4:88:e0:44:
                    84:f9:05:e3:c2:32:9e:cb:32:d3:13:93:97:97:0d:
                    06:1f:bf:dc:4d:cb:ad:02:9b:6d:c1:e2:12:99:8b:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FC:3D:63:A7:9E:4C:EC:6C:15:FD:B0:91:73:D2:D4:A0:88:91:0B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B3756D4C5E911F098FA6796DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:51:68:fe:64:7c:6f:01:6e:16:b8:0f:d9:6f:98:c3:87:76:
         54:1b:d7:8a:8a:36:ec:89:51:5a:6d:bf:c7:90:55:a7:2c:7e:
         ce:d0:5b:e4:e2:f6:b7:b1:c2:84:9c:e6:c7:12:0b:c2:10:27:
         38:78:1d:18:3e:43:79:d6:b3:bb:ea:92:59:bc:7c:41:df:8e:
         9d:d5:39:89:ff:08:cc:88:9e:71:d4:51:e3:39:b4:51:a9:cf:
         83:f0:f8:8f:07:ca:cd:d4:51:93:bf:e0:6f:af:0b:d3:a7:84:
         b8:ae:6e:94:d1:a6:8b:fa:44:37:86:85:fe:6d:23:bf:1c:b2:
         62:b4:5e:5d:c3:94:d8:74:ca:2d:2c:67:dd:f4:30:b3:49:b3:
         b9:1e:b2:aa:30:27:55:52:11:31:f4:ce:80:74:73:e7:69:44:
         67:e9:88:e6:dd:7c:c0:b8:24:89:ae:08:84:b6:5a:94:af:50:
         c1:67:1f:4c:cc:36:36:8f:cb:46:9c:b2:c6:b4:b2:32:3c:ec:
         19:d7:7f:69:0a:f7:93:b5:05:ef:65:68:34:a6:84:8c:fa:f6:
         6a:e7:ea:df:7b:00:79:ae:4f:d9:6f:3b:5d:cb:10:29:b5:0a:
         33:24:c1:f5:8c:18:9a:82:c7:44:79:d2:78:cd:1f:7b:76:91:
         b2:30:9b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:15 2025 by rpki-client