This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CE7D996C92011F099456BD4DAE4EC9C.roa
File:                     6CE7D996C92011F099456BD4DAE4EC9C.roa (raw, json)
Hash identifier:          /ZrUAyZeu6lkNp91wgeI8DgRgRV2o0iml+Mc9SVl9Tw=
Subject key identifier:   72:45:EB:9F:76:99:A4:32:9B:30:16:16:23:9D:02:EB:BF:80:3E:6B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018933
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CE7D996C92011F099456BD4DAE4EC9C.roa
Signing time:             Mon 24 Nov 2025 10:29:16 +0000
ROA not before:           Mon 24 Nov 2025 10:29:09 +0000
ROA not after:            Mon 29 Dec 2025 10:29:09 +0000
asID:                     57043
IP address blocks:        156.242.82.0/24 maxlen: 24
                          156.242.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100659 (0x18933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 24 10:29:09 2025 GMT
            Not After : Dec 29 10:29:09 2025 GMT
        Subject: CN=6924337b-3d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:a1:49:a3:b7:fb:29:90:f6:67:b1:8b:a2:
                    31:6c:c3:46:ff:8b:71:69:d1:0a:02:d0:53:65:0f:
                    c5:af:ad:26:27:dc:e7:fc:5b:ad:17:4a:c6:2a:7a:
                    ea:ba:9d:17:e0:1a:de:c9:c2:eb:24:1c:61:66:1d:
                    1c:28:b5:a9:f9:61:75:3a:56:c8:b3:61:d8:61:f5:
                    61:68:47:36:ec:45:25:77:1b:85:f5:59:ef:a8:9f:
                    9e:17:29:f3:76:13:52:71:6e:13:5a:75:d9:37:98:
                    1b:84:52:d7:07:00:ba:0e:18:3b:53:b7:8d:9d:66:
                    2b:de:e8:55:7a:b9:36:ad:e0:cf:80:43:74:5d:66:
                    af:65:6e:89:81:8a:47:8f:dd:26:c7:80:7b:87:c2:
                    e1:27:01:0e:98:c0:96:dd:0b:1f:42:72:a6:17:3b:
                    01:47:1f:cd:d1:c6:c1:b6:b6:29:d1:30:54:72:dd:
                    2c:a3:f4:fe:0e:3a:f7:e5:78:da:a5:19:28:35:a8:
                    5e:43:f0:d1:2b:e3:79:e1:c9:4b:68:03:48:d5:d3:
                    3d:f0:a7:bd:47:80:b6:46:90:44:fc:64:10:77:fd:
                    94:51:63:85:f1:68:6d:b3:7b:ab:72:73:01:26:0b:
                    e7:4d:9a:5a:42:ee:cb:91:b1:e8:8d:af:48:c6:1e:
                    3a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:45:EB:9F:76:99:A4:32:9B:30:16:16:23:9D:02:EB:BF:80:3E:6B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CE7D996C92011F099456BD4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:9c:d4:f0:4c:56:2e:33:96:c5:bd:f3:a1:f6:36:62:d7:99:
         ad:18:60:78:9b:7f:be:6f:50:1a:68:ce:02:3e:1f:d0:44:9c:
         15:d8:3f:db:26:6a:75:c7:6f:f3:ea:51:04:70:d8:58:ad:f0:
         b6:8c:1d:6a:00:99:a9:7f:c4:40:75:86:8b:d4:3b:01:93:7e:
         77:fb:e5:7a:ef:dd:72:ee:9a:be:32:1f:8a:8c:2e:69:eb:c1:
         63:dc:2e:47:15:e5:bd:6e:38:fa:ae:ea:d7:95:9a:c6:13:5e:
         fe:b4:95:39:40:4b:09:c7:d0:90:dc:12:e3:09:3b:ab:b9:88:
         d1:f2:97:5c:27:16:40:87:c2:dc:8b:91:d8:56:b3:9f:80:70:
         5b:9c:3d:a2:61:25:fe:af:64:23:4a:cb:ee:3f:70:aa:5a:5d:
         af:5a:a1:5b:0b:5c:55:2e:d4:5a:3c:40:33:95:d7:86:a2:cd:
         ed:fd:e3:83:90:74:28:1b:0b:1b:44:d8:c3:67:e0:86:c3:bb:
         57:5d:f2:36:06:cd:58:dc:1d:21:fe:5b:50:a2:ec:f2:4d:8b:
         0a:49:06:a7:94:d2:29:c7:d1:8b:0d:33:16:79:cc:be:28:f3:
         f3:25:d1:8e:cb:bc:1b:b9:40:4e:fc:f6:f9:b3:a7:6b:be:e1:
         1d:3e:d0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:49:16 2025 by rpki-client