This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86A39D3CCA0D11F08DC551B8DAE4EC9C.roa
File:                     86A39D3CCA0D11F08DC551B8DAE4EC9C.roa (raw, json)
Hash identifier:          XiOvBLsoE/GVj+U+bpY10UC8BRPwR7X5MA7WPVWFiAY=
Subject key identifier:   A6:70:4A:3F:D5:4C:5A:F9:4F:14:52:94:CE:90:33:0A:7D:E2:45:02
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0189B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86A39D3CCA0D11F08DC551B8DAE4EC9C.roa
Signing time:             Tue 25 Nov 2025 14:46:29 +0000
ROA not before:           Tue 25 Nov 2025 14:46:25 +0000
ROA not after:            Fri 26 Feb 2027 14:46:25 +0000
asID:                     51601
IP address blocks:        156.253.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100784 (0x189b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 25 14:46:25 2025 GMT
            Not After : Feb 26 14:46:25 2027 GMT
        Subject: CN=6925c145-a242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:fd:d1:98:cf:9f:dc:48:17:6d:61:d3:ff:
                    02:43:9b:6d:13:67:0c:da:a3:16:94:1e:43:d2:31:
                    37:8a:57:4d:f9:30:84:6f:6d:3d:0c:6a:42:f1:06:
                    ed:57:5c:2b:8a:0d:2e:08:d5:ac:c6:2e:1e:c2:be:
                    59:28:ca:5f:f9:79:ec:f7:de:23:2b:8a:67:57:d3:
                    8c:8c:c6:7d:d4:82:ae:38:43:4e:91:17:54:3d:57:
                    9c:bf:08:d5:b2:e1:95:61:3d:71:89:2d:c1:fc:df:
                    1b:d8:34:05:74:48:a0:50:0f:20:0f:d0:7e:dd:2c:
                    84:8e:11:cd:11:20:5d:8a:f8:51:dd:33:0f:88:d3:
                    2f:e7:cb:84:77:1c:c3:1e:35:05:0e:00:b4:d4:d2:
                    25:65:06:10:63:a7:c3:cc:91:28:8a:94:3b:b0:f0:
                    84:f5:57:1c:35:8b:67:9d:a7:b5:38:aa:13:08:f1:
                    4f:a7:35:b0:bd:ad:bf:3b:95:d1:82:42:6f:04:78:
                    24:77:7b:2b:ce:7b:7a:f2:46:3b:66:ab:75:bf:e6:
                    9b:08:da:7a:b3:23:c0:dd:7c:f5:13:79:0b:f3:2c:
                    eb:71:96:c6:06:f3:04:17:98:c5:c3:59:68:75:3b:
                    9e:b2:b7:7b:0d:31:69:86:28:7d:b8:1c:c5:29:25:
                    ae:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:70:4A:3F:D5:4C:5A:F9:4F:14:52:94:CE:90:33:0A:7D:E2:45:02
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86A39D3CCA0D11F08DC551B8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:9d:aa:3a:65:00:dd:4d:da:11:e5:2c:79:ed:d6:68:e6:fb:
         55:62:c7:e2:35:13:e4:ed:70:2d:5d:2c:8c:3d:fb:c0:e2:0e:
         75:da:db:6c:ad:4c:71:be:cd:c5:32:57:12:21:4b:1a:87:a2:
         aa:26:1e:8a:69:e5:78:6b:60:87:29:b5:ac:03:87:36:7e:97:
         01:8e:7a:0a:30:13:5e:ef:65:a8:05:40:f0:4f:f2:48:a9:4b:
         f5:c9:84:d3:24:55:58:7a:10:5f:6a:e4:43:fe:ec:48:83:de:
         83:72:f3:fe:2a:93:a3:79:4b:36:5b:f4:a0:f4:9c:10:c2:3f:
         a1:f7:be:a2:84:f5:3a:9c:0c:b3:fd:3c:6c:fb:2e:87:8f:fe:
         b9:9e:4f:2a:49:25:55:a6:14:cd:49:aa:ee:8e:63:fa:c5:cf:
         8b:13:34:37:6d:84:06:2a:0a:d3:45:10:6d:bd:21:eb:17:03:
         c5:aa:79:e6:3d:c8:9c:38:de:5d:07:9a:69:bd:47:7a:94:1b:
         9c:c8:a1:e9:9b:c4:82:4d:6f:cb:cd:5a:ad:28:8a:a7:b4:2e:
         d3:8c:c4:82:78:15:78:89:e3:7d:2e:e0:8b:ef:04:a0:f7:75:
         7a:a8:c4:e7:39:8e:39:6c:d5:4c:4d:12:82:19:da:7c:7e:53:
         aa:55:1a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:47:53 2025 by rpki-client