This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFF2B89AE61811F0A5BFFFE2DAE4EC9C.roa
File:                     AFF2B89AE61811F0A5BFFFE2DAE4EC9C.roa (raw, json)
Hash identifier:          PyYnZV5rnKH8XAUAPMrgwlfrrbBxhZ2+TPfG+e6K8iA=
Subject key identifier:   75:DF:B8:41:46:40:C4:23:F2:B6:31:4A:B6:D8:DE:62:AF:15:BF:88
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019324
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFF2B89AE61811F0A5BFFFE2DAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 07:16:56 +0000
ROA not before:           Wed 31 Dec 2025 07:16:51 +0000
ROA not after:            Wed 16 Dec 2026 07:16:51 +0000
asID:                     23764
IP address blocks:        156.242.4.0/24 maxlen: 24
                          156.242.6.0/24 maxlen: 24
                          156.242.7.0/24 maxlen: 24
                          156.242.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103204 (0x19324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 31 07:16:51 2025 GMT
            Not After : Dec 16 07:16:51 2026 GMT
        Subject: CN=6954cde8-ccc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:18:37:99:e0:34:d0:94:d8:15:6f:26:7d:
                    0e:3c:4a:ee:a9:83:a5:39:a0:af:34:9e:30:a7:a0:
                    f5:80:8a:c8:32:bb:c6:ca:79:e1:a4:ed:40:5f:82:
                    db:05:d0:0e:e6:44:60:2a:32:19:a6:67:e7:09:b0:
                    7b:b1:9f:d9:46:38:98:37:cb:41:40:ae:b5:5d:b6:
                    f3:c2:af:39:c0:b7:04:b0:ef:3d:72:07:43:ae:1e:
                    e7:fc:e7:a3:cd:05:83:fe:d2:b2:0f:bd:ef:f6:cf:
                    19:5a:d0:17:e8:a7:fa:be:71:1e:81:8b:c3:8c:07:
                    17:ab:07:bc:06:46:c0:24:b5:a3:8f:ae:03:d9:cc:
                    c9:24:6d:1b:bf:1a:d4:49:50:5a:b8:e9:c2:fe:40:
                    d7:5c:43:cb:db:3f:9f:e2:e0:f9:07:d8:55:9c:18:
                    ed:83:8c:fa:22:82:43:3d:28:98:fd:23:a5:ec:34:
                    b9:37:d2:bb:12:d6:c1:4d:32:a6:c1:b9:13:f0:ec:
                    9e:d4:9b:01:f9:c5:f7:b5:20:53:79:4c:94:d1:67:
                    e6:9d:b7:23:00:f1:a9:62:fb:b5:23:93:48:6b:48:
                    fe:dc:40:24:bf:a8:9c:28:29:ca:c7:cc:ea:35:e8:
                    fd:86:ac:35:85:0d:b5:1f:de:91:91:1a:03:66:e5:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DF:B8:41:46:40:C4:23:F2:B6:31:4A:B6:D8:DE:62:AF:15:BF:88
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFF2B89AE61811F0A5BFFFE2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.4.0/24
                  156.242.6.0-156.242.8.255

    Signature Algorithm: sha256WithRSAEncryption
         0d:cd:42:b9:59:1f:bb:be:6e:fc:2d:35:c0:f8:1d:3e:d3:44:
         d4:22:62:d6:e6:1d:46:8d:c7:35:3d:cf:ca:22:54:c0:4a:2b:
         0e:22:ea:8f:61:a6:c2:c8:16:12:7a:41:72:da:9f:4f:c0:04:
         73:e8:75:14:22:69:b6:d9:81:25:31:e5:3d:98:37:1f:e9:c7:
         c5:2e:7e:02:8d:86:23:13:75:57:f9:37:d9:fd:4e:67:30:24:
         37:8d:56:ca:4e:df:49:e7:5e:27:00:b0:98:05:8d:12:73:ab:
         5b:21:b4:40:11:11:52:e9:f0:83:f6:ec:fb:f3:6e:bb:f7:8a:
         7a:ee:83:fa:30:44:f6:64:8e:a4:3d:48:f4:b8:e3:68:02:9f:
         b3:0c:d9:4c:e1:4a:79:e1:0f:ad:ee:1e:a9:3d:2c:35:76:bd:
         0c:ef:b6:c0:cf:c0:d2:46:e5:e7:4f:a1:9d:00:4e:9f:9b:0e:
         0c:b5:f4:f6:e7:ae:47:53:34:b4:c9:55:9c:2b:82:b9:62:51:
         99:ed:23:f4:a9:c1:67:25:25:6d:2b:ba:f1:66:53:db:03:5e:
         b0:83:16:7c:19:75:1b:93:32:0f:b2:b1:53:47:a1:7e:7e:d6:
         90:0f:b1:01:21:19:15:8e:05:2c:fe:07:b3:b1:81:c5:84:f1:
         0e:3d:16:59
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAZMkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjMxMDcxNjUxWhcNMjYxMjE2MDcxNjUxWjAYMRYw
FAYDVQQDEw02OTU0Y2RlOC1jY2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvWYYN5ngNNCU2BVvJn0OPEruqYOlOaCvNJ4wp6D1gIrIMrvGynnhpO1A
X4LbBdAO5kRgKjIZpmfnCbB7sZ/ZRjiYN8tBQK61Xbbzwq85wLcEsO89cgdDrh7n
/OejzQWD/tKyD73v9s8ZWtAX6Kf6vnEegYvDjAcXqwe8BkbAJLWjj64D2czJJG0b
vxrUSVBauOnC/kDXXEPL2z+f4uD5B9hVnBjtg4z6IoJDPSiY/SOl7DS5N9K7EtbB
TTKmwbkT8Oye1JsB+cX3tSBTeUyU0WfmnbcjAPGpYvu1I5NIa0j+3EAkv6icKCnK
x8zqNej9hqw1hQ21H96RkRoDZuUfNQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHXf
uEFGQMQj8rYxSrbY3mKvFb+IMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRkYyQjg5QUU2MTgxMUYwQTVCRkZGRTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAnPIEMAwDBAGc8gYDBACc8ggw
DQYJKoZIhvcNAQELBQADggEBAA3NQrlZH7u+bvwtNcD4HT7TRNQiYtbmHUaNxzU9
z8oiVMBKKw4i6o9hpsLIFhJ6QXLan0/ABHPodRQiabbZgSUx5T2YNx/px8UufgKN
hiMTdVf5N9n9TmcwJDeNVspO30nnXicAsJgFjRJzq1shtEAREVLp8IP27Pvzbrv3
inrug/owRPZkjqQ9SPS442gCn7MM2UzhSnnhD63uHqk9LDV2vQzvtsDPwNJG5edP
oZ0ATp+bDgy19PbnrkdTNLTJVZwrgrliUZntI/SpwWclJW0ruvFmU9sDXrCDFnwZ
dRuTMg+ysVNHoX5+1pAPsQEhGRWOBSz+B7OxgcWE8Q49Flk=
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:27 2026 by rpki-client