This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C115219EC61011F097E3568ADAE4EC9C.roa
File:                     C115219EC61011F097E3568ADAE4EC9C.roa (raw, json)
Hash identifier:          eJpAAT2iH6A+Zg4kXvp9UTjsIammQammwkGPas4nNio=
Subject key identifier:   CB:B9:4A:4D:DE:91:90:2E:2E:06:89:2C:97:AC:55:DA:C2:1D:E8:7D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0188A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C115219EC61011F097E3568ADAE4EC9C.roa
Signing time:             Thu 20 Nov 2025 12:59:31 +0000
ROA not before:           Thu 20 Nov 2025 12:59:24 +0000
ROA not after:            Sun 04 Jan 2026 12:59:24 +0000
asID:                     142032
IP address blocks:        156.238.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100518 (0x188a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 20 12:59:24 2025 GMT
            Not After : Jan  4 12:59:24 2026 GMT
        Subject: CN=691f10b3-6249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:e9:6b:97:0a:b0:d3:1e:79:68:32:fa:39:
                    48:0c:d7:4f:1b:16:bb:ab:ea:a0:48:b3:a9:0a:e4:
                    7e:57:45:0e:8d:88:71:ff:57:d7:8e:34:99:62:52:
                    8a:3e:24:b2:fc:74:10:c4:ef:09:7e:59:bb:0e:e9:
                    f8:38:48:dc:37:f2:26:39:f8:97:39:07:f3:c5:14:
                    b7:9c:7e:d7:7f:8c:77:32:5a:fe:1a:b4:72:de:00:
                    22:1e:32:f7:0c:9b:9e:c4:01:68:6c:09:48:51:ac:
                    b9:4e:d2:8b:d2:9b:a8:df:94:de:8f:ee:1f:26:07:
                    ad:07:5c:70:84:1c:fe:b6:b6:49:63:c0:2f:ce:66:
                    c9:62:24:f5:f2:6b:7b:e9:26:72:45:2a:d2:43:db:
                    fd:ae:83:12:4e:9b:f4:14:1e:2a:f9:92:94:11:b7:
                    a9:7e:75:ae:72:b4:77:81:2c:a5:d5:00:e2:8c:8c:
                    37:c3:a8:02:f4:72:c1:0f:9e:a2:a2:e2:42:13:a6:
                    03:90:d7:2c:99:f2:66:34:59:09:17:d4:bf:95:c5:
                    dc:a7:ed:a2:00:29:05:a0:e3:87:87:3e:99:39:ab:
                    db:af:b3:6a:6b:88:d4:d8:89:7a:65:8a:8b:93:37:
                    52:bf:e9:68:83:87:7b:3b:55:4b:02:5d:43:55:e7:
                    49:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B9:4A:4D:DE:91:90:2E:2E:06:89:2C:97:AC:55:DA:C2:1D:E8:7D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C115219EC61011F097E3568ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:20:04:7d:49:5c:4f:23:7d:ea:c5:55:e6:74:9f:a3:b1:06:
         c9:3d:cb:92:bc:9e:f5:4d:d7:3e:3c:ef:ae:59:47:f8:82:3c:
         d6:f7:0d:6c:32:66:4b:92:6f:ef:e3:37:b1:b8:01:fd:0c:ac:
         15:1c:28:0f:4b:f7:90:86:3c:a3:99:5c:cf:c8:3b:b0:02:41:
         06:50:81:bf:12:6c:bd:3d:c1:03:00:6c:fb:bc:6d:97:4d:80:
         55:ec:33:05:27:9d:53:3b:8a:b4:b8:89:8f:dc:1b:76:91:17:
         2e:47:48:1a:a2:29:61:1f:9f:d2:f9:48:90:4a:23:d7:bf:61:
         4f:a8:2e:02:62:75:cc:f0:87:00:92:b9:9f:c8:26:56:73:cf:
         34:68:a6:5e:a6:89:4e:8d:77:42:cd:8d:17:bd:76:75:c3:f3:
         98:d3:5c:2c:ef:7d:c3:53:03:22:a8:f8:7a:5d:8f:67:84:6c:
         e5:49:93:1f:e1:fa:24:ce:12:e4:35:7c:01:b4:b7:e0:39:ff:
         3e:26:9b:7f:eb:08:8c:46:00:d9:8a:42:6c:c4:0d:dc:a9:2c:
         7a:29:8a:4e:e6:86:fd:50:22:92:c5:2a:a0:cb:15:98:0d:75:
         db:fa:c6:c5:1b:16:4a:90:97:64:9e:42:59:6a:88:a4:b0:18:
         5e:49:55:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:09 2025 by rpki-client