This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABC83BB6BBD211F08DC05CEDDAE4EC9C.roa
File:                     ABC83BB6BBD211F08DC05CEDDAE4EC9C.roa (raw, json)
Hash identifier:          TqPWXFquPwV3snPZdq+dvPLQixOWM3lT9fUAI4WWZ8Y=
Subject key identifier:   B5:B0:11:85:BE:D1:FA:01:A5:25:B6:9F:44:D2:FF:26:B6:CE:65:11
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0185B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABC83BB6BBD211F08DC05CEDDAE4EC9C.roa
Signing time:             Fri 07 Nov 2025 12:09:55 +0000
ROA not before:           Fri 07 Nov 2025 12:09:50 +0000
ROA not after:            Wed 02 Dec 2026 12:09:50 +0000
asID:                     152450
IP address blocks:        156.253.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99763 (0x185b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  7 12:09:50 2025 GMT
            Not After : Dec  2 12:09:50 2026 GMT
        Subject: CN=690de193-5158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:8d:fd:b1:73:29:58:60:cd:6e:bd:0c:58:
                    da:bc:09:b6:7e:20:2c:cc:c8:e2:84:19:ab:3b:58:
                    e9:93:52:76:4c:80:ec:bf:50:21:05:8c:67:56:61:
                    b5:3f:84:69:e3:5e:20:28:c9:e4:94:0d:a7:c6:13:
                    01:15:0d:76:42:b2:75:99:d4:75:44:08:e0:e7:6a:
                    9d:ae:34:ff:2a:61:85:4d:54:ac:15:04:af:a6:3b:
                    6d:38:5f:ac:94:26:73:8e:75:b0:e3:b2:4b:f1:97:
                    f2:88:5e:94:90:20:95:f8:dd:71:f3:36:8a:db:e7:
                    bb:b9:6f:db:a8:c3:cc:6c:4a:6b:ef:ac:4b:c5:7a:
                    eb:f5:ef:3d:f2:df:8e:a3:58:77:4a:57:d3:d2:eb:
                    51:cb:24:05:36:2b:38:6d:31:6e:0d:50:20:37:e4:
                    17:ec:91:a0:9b:48:96:3b:68:19:28:85:27:30:b6:
                    24:83:08:db:58:82:c2:35:d5:8d:8d:19:2b:c5:11:
                    c4:c1:4e:ab:f0:49:89:88:d1:16:23:99:37:ec:50:
                    4f:60:e2:c6:90:70:1d:53:1d:80:99:a9:3c:4c:17:
                    d5:b5:24:1f:bf:54:16:c6:f7:d9:83:eb:40:2b:6d:
                    c5:45:c7:13:9b:a0:4a:41:0b:e5:d2:f2:5f:3f:0c:
                    44:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B0:11:85:BE:D1:FA:01:A5:25:B6:9F:44:D2:FF:26:B6:CE:65:11
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABC83BB6BBD211F08DC05CEDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:4b:c9:10:49:18:6e:d2:3d:37:3e:af:14:14:b4:2a:10:ff:
         f6:0d:e7:dc:58:4f:b9:9b:0c:c7:8e:8a:d8:1c:50:fd:f3:5e:
         5b:77:b7:c1:93:07:41:16:8b:e7:ce:bf:61:ce:ae:65:82:f9:
         e3:87:9a:2d:6b:32:2b:bf:04:56:8d:b8:a7:55:3b:97:eb:ac:
         92:21:ed:d5:88:0f:8e:2d:4e:68:3b:21:cb:82:f5:1d:1e:dc:
         5d:79:8a:d6:ca:e3:ac:03:83:05:bd:ff:d2:70:e1:6f:a6:53:
         00:cb:97:39:4c:e4:ba:33:20:4b:e7:62:13:ad:40:30:6d:f8:
         e8:a2:ec:14:f9:90:63:27:a4:c5:2a:7e:0f:02:21:4e:8f:ad:
         fc:ef:29:f1:19:28:fb:ae:99:ee:68:dc:1f:70:d8:0b:8e:9e:
         86:9b:70:8e:bf:81:f0:40:6e:0b:b9:06:2a:bd:20:b5:1b:e1:
         6a:af:e4:4f:70:54:16:3d:6f:4c:32:ef:a0:10:bf:c4:fd:7c:
         f2:05:02:f9:00:32:09:e7:f0:f4:66:c8:c6:f9:79:91:94:ad:
         93:01:9a:11:5d:5e:90:4c:50:d2:d2:a4:ab:dc:03:f7:aa:a2:
         66:be:b0:bd:18:49:24:c1:bc:28:5c:46:20:62:54:7f:ad:2f:
         46:2d:9f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:03 2025 by rpki-client