This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99AA3EDEBB0011F09DD4BCC4DAE4EC9C.roa
File:                     99AA3EDEBB0011F09DD4BCC4DAE4EC9C.roa (raw, json)
Hash identifier:          TBwrG+OfXsdutZnA0jN6gF1hA1lZkGtv1ls1/qPRnyo=
Subject key identifier:   8A:8A:0A:2D:37:87:3B:4F:7C:37:9E:FE:7E:8D:A9:1C:7E:36:5F:EF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018531
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99AA3EDEBB0011F09DD4BCC4DAE4EC9C.roa
Signing time:             Thu 06 Nov 2025 11:06:10 +0000
ROA not before:           Thu 06 Nov 2025 11:06:06 +0000
ROA not after:            Sat 03 Jan 2026 11:06:06 +0000
asID:                     138195
IP address blocks:        156.234.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99633 (0x18531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  6 11:06:06 2025 GMT
            Not After : Jan  3 11:06:06 2026 GMT
        Subject: CN=690c8122-3f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:90:44:76:b7:6d:d1:df:99:d4:0e:4c:17:
                    54:85:b0:57:a6:bd:89:3b:56:84:1d:31:04:02:ff:
                    2a:6c:7b:ee:62:8c:76:07:1b:34:ef:49:73:45:ab:
                    e2:2f:58:92:00:a5:8d:86:04:5f:b6:de:11:97:93:
                    5b:46:bf:a0:2d:9c:e9:4e:c7:41:a1:38:72:7c:c7:
                    2a:6a:90:82:77:ce:4a:6e:9f:6e:eb:ae:a8:a6:d6:
                    17:5e:ce:7d:81:6e:48:e4:e7:07:4f:3f:e0:a8:e7:
                    93:69:22:ce:b1:3b:8d:3e:70:e9:93:71:a5:5c:fd:
                    3d:06:24:90:9c:0b:6f:40:f5:bc:ca:2e:fe:36:08:
                    17:ea:cf:f7:37:60:53:cc:9f:04:80:7b:5b:db:ad:
                    bb:da:bc:18:61:a9:fe:37:3e:9e:d7:3c:3d:73:49:
                    ed:7a:2e:48:63:6c:62:8c:06:30:c7:6e:b5:a7:3b:
                    28:8c:54:90:fa:50:05:16:87:74:5c:52:ca:74:20:
                    fb:dc:f8:e1:e5:ad:06:94:0c:0a:8b:c7:00:ea:cd:
                    e5:00:27:fc:9e:04:5f:5b:20:3c:65:1b:b7:f0:b8:
                    33:44:b8:6b:0f:39:ed:30:e7:f5:d4:38:02:32:5f:
                    af:4b:d9:44:e3:14:bd:95:d8:70:de:4a:80:57:6e:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8A:0A:2D:37:87:3B:4F:7C:37:9E:FE:7E:8D:A9:1C:7E:36:5F:EF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99AA3EDEBB0011F09DD4BCC4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:21:62:e2:15:42:5b:73:a6:20:fa:66:58:aa:7c:66:20:01:
         5a:10:60:bf:22:33:26:76:da:8a:d5:cf:d6:e7:17:9b:a2:52:
         95:bc:ca:7e:46:50:c8:8f:a3:e0:98:fa:04:14:ca:0b:1e:75:
         e6:d1:34:36:33:14:4c:39:6a:14:0e:a5:53:ad:42:6f:7d:3c:
         d9:ee:7e:1a:7e:95:40:72:ee:c3:7f:5c:ba:fd:a8:51:c2:98:
         11:a0:7a:a4:a7:00:89:94:c6:9a:f2:a1:30:02:16:89:a3:df:
         a9:f2:4c:52:ce:82:13:3f:dc:f7:33:29:c2:c9:40:c8:ac:06:
         88:85:1d:c2:c2:e4:e6:0b:3b:ec:70:00:9c:42:70:68:57:c8:
         f9:a8:0d:8a:27:eb:4a:98:27:da:81:bd:03:da:29:8e:23:ab:
         54:bb:c2:21:b4:7c:42:d7:52:80:6f:8f:cf:30:75:29:82:b5:
         40:76:75:98:73:3b:94:4c:f1:20:eb:76:1a:21:62:d0:51:14:
         5a:e9:cd:f8:54:80:b7:63:dd:24:05:56:91:8f:8f:72:67:f6:
         16:82:40:ef:5e:95:b0:4b:8f:4a:d2:fa:96:df:e8:77:e2:53:
         ea:98:57:b9:25:41:6f:76:e7:fd:6d:5b:c2:af:7a:fa:d8:0b:
         94:1f:18:1f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIDAYUxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTA2MTEwNjA2WhcNMjYwMTAzMTEwNjA2WjAYMRYw
FAYDVQQDEw02OTBjODEyMi0zZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAl5aQRHa3bdHfmdQOTBdUhbBXpr2JO1aEHTEEAv8qbHvuYox2Bxs070lz
RaviL1iSAKWNhgRftt4Rl5NbRr+gLZzpTsdBoThyfMcqapCCd85Kbp9u666optYX
Xs59gW5I5OcHTz/gqOeTaSLOsTuNPnDpk3GlXP09BiSQnAtvQPW8yi7+NggX6s/3
N2BTzJ8EgHtb26272rwYYan+Nz6e1zw9c0ntei5IY2xijAYwx261pzsojFSQ+lAF
Fod0XFLKdCD73Pjh5a0GlAwKi8cA6s3lACf8ngRfWyA8ZRu38LgzRLhrDzntMOf1
1DgCMl+vS9lE4xS9ldhw3kqAV2755wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIqK
Ci03hztPfDee/n6NqRx+Nl/vMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85OUFBM0VERUJCMDAxMUYwOURENEJDQzREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnOowDQYJKoZIhvcNAQELBQAD
ggEBAHMhYuIVQltzpiD6ZliqfGYgAVoQYL8iMyZ22orVz9bnF5uiUpW8yn5GUMiP
o+CY+gQUygsedebRNDYzFEw5ahQOpVOtQm99PNnufhp+lUBy7sN/XLr9qFHCmBGg
eqSnAImUxpryoTACFomj36nyTFLOghM/3PczKcLJQMisBoiFHcLC5OYLO+xwAJxC
cGhXyPmoDYon60qYJ9qBvQPaKY4jq1S7wiG0fELXUoBvj88wdSmCtUB2dZhzO5RM
8SDrdhohYtBRFFrpzfhUgLdj3SQFVpGPj3Jn9haCQO9elbBLj0rS+pbf6HfiU+qY
V7klQW925/1tW8KvevrYC5QfGB8=
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:58 2025 by rpki-client