This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B95FC514C93811F090CF64E9DAE4EC9C.roa
File:                     B95FC514C93811F090CF64E9DAE4EC9C.roa (raw, json)
Hash identifier:          ecuyNtXPvBtN0Aziyh4SgtS8dB28raGEBmmKH/Yb5Pc=
Subject key identifier:   79:16:F6:A6:F2:48:26:41:F2:FA:33:C5:EA:8A:E9:85:E9:0C:84:95
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01895F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B95FC514C93811F090CF64E9DAE4EC9C.roa
Signing time:             Mon 24 Nov 2025 13:23:12 +0000
ROA not before:           Mon 24 Nov 2025 13:23:07 +0000
ROA not after:            Tue 30 Dec 2025 13:23:07 +0000
asID:                     398443
IP address blocks:        156.229.176.0/20 maxlen: 24
                          156.229.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100703 (0x1895f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 24 13:23:07 2025 GMT
            Not After : Dec 30 13:23:07 2025 GMT
        Subject: CN=69245c40-8f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:c0:d8:98:6f:1f:c0:1e:71:e1:d2:9c:82:
                    51:b1:b6:59:d9:aa:8e:63:f2:0f:f5:cd:e6:1d:a4:
                    71:1c:b4:46:59:27:22:6a:80:54:b1:2e:f9:96:2f:
                    b2:a7:bd:7a:75:25:80:b2:d8:b0:5d:8d:85:82:0e:
                    fa:b8:7f:ab:30:3d:93:07:02:c1:2b:40:4a:fd:b0:
                    21:92:72:e0:6d:fa:c6:42:e2:1b:8c:22:79:4b:81:
                    e7:f3:27:58:a1:bd:60:90:8f:16:b9:1d:48:ed:9e:
                    c7:e8:e6:44:18:cb:4e:6b:5d:67:fa:ce:4a:c0:35:
                    90:2b:06:3f:37:c9:06:d7:bd:06:63:7e:07:5c:d4:
                    28:3d:80:44:0a:e8:cf:52:92:2f:9e:ae:95:12:25:
                    64:70:c5:64:ff:d8:4e:ac:dc:c1:c4:a3:4b:eb:c1:
                    13:ad:15:90:3e:90:fd:e3:b1:cd:92:a3:31:9f:63:
                    71:14:3c:bf:e3:3e:c3:8b:72:26:1b:82:d0:9d:8a:
                    c3:8b:16:29:08:4f:69:b6:92:75:72:95:2d:04:7e:
                    de:51:61:3c:8b:22:da:e2:e8:e6:c1:d1:eb:24:12:
                    06:f8:35:e4:68:38:83:6f:a6:42:9f:08:41:dd:3d:
                    c2:1b:7e:b4:46:a8:cc:ec:a5:ab:df:bc:99:cf:fe:
                    1b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:16:F6:A6:F2:48:26:41:F2:FA:33:C5:EA:8A:E9:85:E9:0C:84:95
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B95FC514C93811F090CF64E9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.176.0-156.229.223.255

    Signature Algorithm: sha256WithRSAEncryption
         9e:ed:ff:b8:cf:79:f1:f4:d9:80:f1:5c:bf:c0:ab:c9:dc:e1:
         6c:c6:2b:f4:70:e5:8e:9c:81:9b:ef:96:fc:e2:54:e2:00:4b:
         59:b0:2f:2a:ce:e2:f3:c8:21:20:6b:f7:19:8b:a1:1c:9c:6b:
         95:d3:33:87:fa:67:59:f7:e1:84:fd:f1:cb:f1:1c:92:2d:a8:
         0e:07:f9:27:fb:43:06:04:10:10:56:b6:fb:4e:6e:f8:88:db:
         26:e1:71:c1:86:d1:c1:1c:c4:47:88:93:5f:d2:74:db:27:f3:
         08:41:54:80:d9:22:85:b6:95:c1:8f:56:4b:5a:75:a2:85:34:
         6c:de:19:55:b1:f5:a6:f3:74:a9:58:27:6f:2b:ae:d8:20:ea:
         93:7a:04:80:71:63:5f:59:fc:f7:1a:0e:79:78:d8:7e:3a:83:
         15:cd:cf:81:da:a4:c2:37:94:6e:0b:c5:b2:b4:92:16:69:b5:
         6e:5d:4b:fd:20:8b:81:c8:01:90:9a:1d:d6:b1:d9:b2:78:30:
         f7:f2:6f:a0:e8:bd:a0:46:90:1d:f8:30:c5:08:0b:86:09:dc:
         f8:5a:fd:1d:52:5e:2d:7b:3c:8f:65:a9:71:49:10:a8:93:39:
         58:a3:43:42:58:74:3a:7f:14:e6:6b:65:ef:04:ce:f4:42:cf:
         e3:53:98:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:16 2025 by rpki-client