This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63FD0D0ABFBC11F0B88C56A5DAE4EC9C.roa
File:                     63FD0D0ABFBC11F0B88C56A5DAE4EC9C.roa (raw, json)
Hash identifier:          kFqyXGTHAfaoL8eRASXLdsALfj6TyXDzVeehIEgWvBY=
Subject key identifier:   65:D1:9A:B3:AA:B3:36:EB:88:3A:4F:57:69:CD:5B:4A:F7:B7:07:C4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0186C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63FD0D0ABFBC11F0B88C56A5DAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 11:40:30 +0000
ROA not before:           Wed 12 Nov 2025 11:40:26 +0000
ROA not after:            Mon 18 May 2026 11:40:26 +0000
asID:                     137951
IP address blocks:        156.224.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100035 (0x186c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 12 11:40:26 2025 GMT
            Not After : May 18 11:40:26 2026 GMT
        Subject: CN=6914722e-9e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:1a:b3:d1:08:cc:f3:b6:92:c3:34:1f:8a:
                    57:4f:69:89:99:d0:47:aa:d4:bf:fb:e9:68:28:aa:
                    f6:4b:8b:43:ac:4f:49:c9:40:23:6e:d8:ab:d1:10:
                    10:24:e4:98:f7:e5:81:50:61:5e:e5:fd:c5:6d:67:
                    ff:dc:57:69:b2:a0:8f:d5:67:02:19:99:0b:fb:6e:
                    56:cd:15:5b:4c:c3:6d:3e:f4:c0:cb:91:95:56:f2:
                    b2:0b:04:b7:45:36:60:b7:df:32:23:49:b5:c8:f9:
                    e9:32:25:3b:f4:8f:0c:25:62:8c:4a:4a:b8:c8:21:
                    41:76:0a:27:cc:f4:2d:8b:84:61:70:72:7d:43:a8:
                    1b:52:99:30:ed:95:f9:b7:75:5b:7d:0c:3c:36:5c:
                    e1:c5:7a:b6:a8:2e:24:e8:c5:1f:1b:29:2f:7f:b9:
                    14:e2:24:36:b9:70:04:1e:8e:f9:a8:83:ec:65:98:
                    f5:b0:a3:11:32:31:be:da:3a:32:c2:d2:09:66:39:
                    6f:a9:49:b5:0c:cd:a2:48:ea:4e:e9:d8:2b:73:b4:
                    ed:73:24:8e:0a:64:fd:4e:7d:3e:75:ba:03:5d:fc:
                    60:60:14:91:84:07:2f:23:6d:42:e9:44:8a:f3:97:
                    a5:04:53:54:07:94:e9:fa:4d:1d:7f:1c:6e:1b:a2:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D1:9A:B3:AA:B3:36:EB:88:3A:4F:57:69:CD:5B:4A:F7:B7:07:C4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63FD0D0ABFBC11F0B88C56A5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:aa:81:92:36:bd:08:4b:bb:d5:62:02:d0:bc:a8:1e:7b:a6:
         54:59:a0:4c:9a:30:b2:1c:c6:53:57:66:a5:fb:54:69:1e:71:
         82:95:04:b9:99:00:1a:5b:2e:6c:55:12:dc:f9:35:52:16:9d:
         f1:01:6b:50:01:29:b5:31:0c:67:c7:c7:c2:f0:63:6e:66:05:
         b2:23:3e:a8:bb:fc:4b:b7:4c:c8:c0:04:2a:64:99:cf:8b:67:
         25:ac:22:7b:03:71:9a:34:6b:a4:83:23:ff:18:99:83:dd:69:
         ca:de:9b:f8:52:c2:85:e4:c9:af:e3:c8:c5:a2:a0:eb:bf:49:
         39:23:4e:4a:4c:50:b0:05:c7:59:8c:cb:31:aa:c3:60:ff:00:
         5c:40:9b:52:cb:23:b7:38:43:c3:92:21:14:51:29:b4:22:99:
         65:ed:79:f6:a8:a0:1d:fb:8e:11:12:3b:9b:2f:cf:61:39:60:
         ae:d6:78:75:c1:14:80:75:b8:31:49:f2:00:ed:49:41:0e:56:
         8a:ee:79:87:30:ae:97:02:40:ea:30:1d:ec:9f:ed:19:f0:b4:
         58:84:9c:02:bd:09:bb:dc:8e:52:cd:50:69:81:b4:ae:e0:f8:
         7a:de:00:2e:00:12:58:ef:26:a9:7d:98:ac:ee:cd:22:83:12:
         04:bf:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:59 2025 by rpki-client