This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78B6AA58BFCB11F0BF57EA81DAE4EC9C.roa
File:                     78B6AA58BFCB11F0BF57EA81DAE4EC9C.roa (raw, json)
Hash identifier:          MLBlqpgpZyuyjCBb/5mz7wK+3Zbeg89ti6C0WbFnFUs=
Subject key identifier:   20:5F:FF:2B:B4:B5:35:F6:39:42:99:FA:99:81:65:D5:89:FB:E4:92
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0186E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78B6AA58BFCB11F0BF57EA81DAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 13:28:28 +0000
ROA not before:           Wed 12 Nov 2025 13:28:22 +0000
ROA not after:            Mon 18 May 2026 13:28:22 +0000
asID:                     134365
IP address blocks:        156.224.18.0/23 maxlen: 24
                          156.224.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100069 (0x186e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 12 13:28:22 2025 GMT
            Not After : May 18 13:28:22 2026 GMT
        Subject: CN=69148b7c-9a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:cd:24:5f:de:0e:0e:08:6f:a9:87:99:c8:
                    74:6e:93:12:06:6e:14:67:fe:da:26:15:71:3e:9d:
                    a9:54:13:1a:e4:73:ee:87:5c:db:8d:ce:b7:33:ae:
                    a0:f0:9d:99:bd:b2:65:b8:a0:d4:6b:d5:75:13:c8:
                    87:17:14:00:7a:e4:85:a6:a4:55:dc:5e:c9:00:09:
                    e3:5f:92:16:56:9c:3c:1e:e8:ec:0c:37:7b:88:43:
                    f9:06:18:e2:58:c2:d4:c9:d9:d2:ad:41:86:fd:ba:
                    f5:52:d0:7e:12:51:62:12:2f:ac:af:26:89:98:b0:
                    5b:f4:07:09:5b:03:57:bf:af:e3:97:70:14:4f:af:
                    9f:eb:47:e1:50:c3:4f:31:ca:7a:f2:c3:61:ea:45:
                    e4:21:d4:5c:a6:95:9d:9d:58:97:3b:e7:d7:89:61:
                    48:41:a5:6a:2d:98:96:bc:4b:f7:cb:fe:03:bb:ff:
                    4f:94:5c:1b:65:08:0a:7c:9d:6b:ca:69:0a:2b:05:
                    f8:4c:b9:44:2b:98:d2:8c:3e:d6:ac:df:4b:fb:4e:
                    d8:e0:8e:9b:3d:69:4b:a7:09:6e:9e:53:d9:b1:b3:
                    cb:d4:8b:83:3b:8c:c4:2e:93:eb:38:7c:a6:05:2d:
                    c4:64:66:74:11:5c:5b:1a:f2:68:e7:21:10:5b:8b:
                    14:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5F:FF:2B:B4:B5:35:F6:39:42:99:FA:99:81:65:D5:89:FB:E4:92
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78B6AA58BFCB11F0BF57EA81DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.18.0/23
                  156.224.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:92:58:99:6c:f8:1f:74:2f:92:d3:d5:bc:a0:be:5d:65:24:
         06:e8:c1:be:ac:da:50:2c:15:b3:1c:ac:93:b3:bc:53:b2:e0:
         51:9c:50:cd:1a:3b:50:d7:4b:50:f6:f0:46:fb:ac:48:ff:a2:
         80:f5:8b:30:08:d1:b3:d4:7a:a9:61:d0:26:39:cb:1f:5e:c1:
         0e:70:72:d7:ab:69:ac:df:de:b9:c3:d8:0c:7e:23:f2:07:2a:
         04:87:01:32:32:f0:28:e9:7d:ce:6a:f5:f3:2a:a3:ba:b9:53:
         73:07:86:bb:6d:f4:f8:da:7f:dc:68:41:49:5e:dc:ce:60:c2:
         ff:25:6c:71:c5:3e:50:1f:4b:c8:c1:b3:10:84:ec:40:9f:fa:
         cc:2e:4c:59:fc:8b:c0:66:21:4c:36:90:14:31:bc:57:4c:96:
         fa:f5:b5:d6:a4:ca:c8:4c:f3:82:90:b0:a0:a2:50:db:62:2f:
         9b:82:3d:2d:f9:e6:2a:6e:3a:01:d0:c8:1e:82:3e:ce:7f:9c:
         29:86:f0:29:e3:fe:c5:ab:f6:46:07:7a:15:40:dd:17:c6:89:
         1c:1d:fa:8e:25:90:b3:c5:0f:9e:ef:14:63:f3:f7:95:76:55:
         13:8c:98:5b:0b:59:33:93:7f:20:bf:ff:d7:47:4c:d7:7c:12:
         33:c8:f1:55
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAYblMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTEyMTMyODIyWhcNMjYwNTE4MTMyODIyWjAYMRYw
FAYDVQQDEw02OTE0OGI3Yy05YTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxdfNJF/eDg4Ib6mHmch0bpMSBm4UZ/7aJhVxPp2pVBMa5HPuh1zbjc63
M66g8J2ZvbJluKDUa9V1E8iHFxQAeuSFpqRV3F7JAAnjX5IWVpw8HujsDDd7iEP5
BhjiWMLUydnSrUGG/br1UtB+ElFiEi+sryaJmLBb9AcJWwNXv6/jl3AUT6+f60fh
UMNPMcp68sNh6kXkIdRcppWdnViXO+fXiWFIQaVqLZiWvEv3y/4Du/9PlFwbZQgK
fJ1rymkKKwX4TLlEK5jSjD7WrN9L+07Y4I6bPWlLpwlunlPZsbPL1IuDO4zELpPr
OHymBS3EZGZ0EVxbGvJo5yEQW4sUJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBf
/yu0tTX2OUKZ+pmBZdWJ++SSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83OEI2QUE1OEJGQ0IxMUYwQkY1N0VBODFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnOASAwQBnOAcMA0GCSqGSIb3
DQEBCwUAA4IBAQCskliZbPgfdC+S09W8oL5dZSQG6MG+rNpQLBWzHKyTs7xTsuBR
nFDNGjtQ10tQ9vBG+6xI/6KA9YswCNGz1HqpYdAmOcsfXsEOcHLXq2ms3965w9gM
fiPyByoEhwEyMvAo6X3OavXzKqO6uVNzB4a7bfT42n/caEFJXtzOYML/JWxxxT5Q
H0vIwbMQhOxAn/rMLkxZ/IvAZiFMNpAUMbxXTJb69bXWpMrITPOCkLCgolDbYi+b
gj0t+eYqbjoB0Mgegj7Of5wphvAp4/7Fq/ZGB3oVQN0XxokcHfqOJZCzxQ+e7xRj
8/eVdlUTjJhbC1kzk38gv//XR0zXfBIzyPFV
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:00 2025 by rpki-client