This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65BAF162BA1611F090E5F283DAE4EC9C.roa
File:                     65BAF162BA1611F090E5F283DAE4EC9C.roa (raw, json)
Hash identifier:          yI2zIaEsNk0wl3A2uF5k4sEuYImDWfbbwaLuA5vWqnw=
Subject key identifier:   61:25:10:FF:1C:61:BD:AB:B6:54:84:AA:E8:C1:D4:32:02:98:8C:69
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0184E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65BAF162BA1611F090E5F283DAE4EC9C.roa
Signing time:             Wed 05 Nov 2025 07:09:41 +0000
ROA not before:           Wed 05 Nov 2025 07:09:36 +0000
ROA not after:            Thu 11 Dec 2025 07:09:36 +0000
asID:                     214143
IP address blocks:        156.231.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99559 (0x184e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  5 07:09:36 2025 GMT
            Not After : Dec 11 07:09:36 2025 GMT
        Subject: CN=690af835-600c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:97:4b:ae:c2:7c:46:91:3d:b5:49:dc:4c:
                    94:eb:c1:73:47:2b:69:fe:b4:27:15:63:5c:c0:db:
                    c3:57:ef:94:4c:17:ab:09:3c:e3:a1:b6:3c:62:2e:
                    97:0a:ca:1f:36:cf:d1:50:1e:1f:25:04:32:0a:0d:
                    75:8b:47:37:2e:41:ec:94:e9:92:e7:09:2e:89:29:
                    10:6d:f3:53:82:a3:12:8e:46:ed:fc:bf:b4:65:30:
                    de:47:d3:c5:0a:3a:24:f7:23:f8:4a:17:d8:03:54:
                    f2:0a:dc:f0:78:d6:05:17:00:42:15:31:1b:d6:49:
                    46:90:d5:7c:0c:d5:1f:1a:dd:26:45:90:34:d5:7b:
                    08:02:02:6e:12:b2:d7:22:70:8c:76:0c:29:d3:78:
                    f8:a4:7a:4c:0b:de:d3:0e:c5:d4:8b:96:0e:c3:b1:
                    d6:bf:1d:54:80:b2:85:5f:ed:be:56:f6:f9:4d:7e:
                    24:ee:86:42:16:35:71:21:12:7e:91:69:ed:f3:49:
                    c6:ed:d9:c7:4b:52:98:bc:28:08:28:97:46:9b:c2:
                    af:45:5f:83:b5:4c:35:2d:f3:45:dc:2d:34:bc:ad:
                    98:6c:0e:8f:ac:03:2b:bb:a1:51:8a:35:0e:5e:a5:
                    3e:ad:ca:36:5d:e1:d6:3b:8c:f7:ca:e6:d1:6e:ed:
                    71:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:25:10:FF:1C:61:BD:AB:B6:54:84:AA:E8:C1:D4:32:02:98:8C:69
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65BAF162BA1611F090E5F283DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:12:26:25:a6:fd:6c:a7:89:ce:08:0e:cd:1f:e3:4a:8f:
         08:96:51:45:44:02:2b:e9:6f:67:81:21:8d:fa:12:23:af:cd:
         68:c7:2a:1b:d2:c4:d5:4a:ea:97:53:17:01:61:a2:e9:55:da:
         a3:b7:7b:5f:aa:5b:e0:5d:ab:7f:43:6b:38:16:3a:19:da:9f:
         b4:f1:55:19:7e:83:f8:70:79:dc:61:41:0e:2f:ae:03:33:04:
         5a:d1:65:ab:df:67:ea:05:87:bf:40:84:2c:59:d2:c6:94:e9:
         67:60:64:07:f6:a5:b8:d6:ec:45:66:1e:34:7a:80:7a:9f:10:
         66:16:d5:17:5c:14:df:6a:b7:36:97:e6:f2:7d:57:29:fd:6d:
         6c:2b:f7:db:a8:ee:d6:23:d9:18:ff:33:90:05:ed:32:94:f3:
         7b:c5:15:a9:27:da:c8:84:35:02:6d:7c:a5:c2:3b:2f:20:de:
         75:e7:dd:6d:14:19:ec:a1:f8:d6:fb:ef:92:fb:af:37:26:b0:
         d3:22:55:f2:f4:22:59:20:e9:70:ab:ab:ce:b3:d6:79:4e:19:
         a3:f8:2d:1e:b6:03:0c:4f:1d:87:e6:51:e7:7b:8e:67:4c:00:
         ba:8c:5d:83:8c:06:c8:5e:16:29:c6:59:31:62:dc:7a:74:a3:
         3d:cc:65:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:10 2025 by rpki-client