This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C62D760EBFBC11F0A54D41A7DAE4EC9C.roa
File:                     C62D760EBFBC11F0A54D41A7DAE4EC9C.roa (raw, json)
Hash identifier:          hpKnXaXrVUGw4ckGwwwmTTXAs3lDgksJxKbi99VFYE0=
Subject key identifier:   C3:9E:94:77:82:1E:74:C3:9F:20:90:C2:A6:2D:34:15:2F:1D:CB:CB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0186C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C62D760EBFBC11F0A54D41A7DAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 11:43:15 +0000
ROA not before:           Wed 12 Nov 2025 11:43:10 +0000
ROA not after:            Wed 18 Nov 2026 11:43:10 +0000
asID:                     137443
IP address blocks:        156.227.1.0/24 maxlen: 24
                          156.227.24.0/22 maxlen: 24
                          156.227.24.0/24 maxlen: 24
                          156.227.25.0/24 maxlen: 24
                          156.227.26.0/24 maxlen: 24
                          156.227.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100037 (0x186c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 12 11:43:10 2025 GMT
            Not After : Nov 18 11:43:10 2026 GMT
        Subject: CN=691472d3-ac2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:1c:0d:60:02:45:11:16:5a:b8:95:d7:15:
                    e0:19:af:43:04:74:89:08:38:da:aa:3f:e9:2c:20:
                    d5:8c:3e:b2:2d:c7:d8:2d:fe:fb:2b:65:7f:f7:17:
                    b1:9b:e5:ff:c8:b6:65:b9:dc:80:26:2f:95:8c:7b:
                    cb:09:1c:56:99:44:20:da:21:17:73:ce:67:4d:64:
                    1e:d9:0c:6e:6c:b4:1e:95:4f:fa:a2:25:56:aa:79:
                    0b:ea:85:12:1d:e8:76:3d:42:0e:46:00:9b:4e:f9:
                    d5:d7:25:45:d2:e9:5e:30:2c:09:ea:4a:6a:1b:5b:
                    12:99:b0:f5:7d:06:d9:91:25:16:c4:4b:79:e9:20:
                    4e:b7:48:20:0e:69:cc:4e:cf:0d:82:bb:1f:da:dd:
                    c6:44:64:84:1f:4c:ae:82:45:7b:e9:1f:3b:e9:58:
                    85:38:8c:10:a6:bb:ed:80:4d:40:b3:e4:c3:d1:be:
                    8f:75:3b:de:04:78:a5:c7:78:9d:e3:55:b1:fe:b7:
                    13:10:b9:99:06:b6:8c:40:a4:fa:d5:a9:7d:21:f2:
                    0e:77:b9:27:52:af:12:4b:d4:a8:e1:ed:a3:6d:67:
                    e8:cd:4e:97:02:4c:1c:da:40:99:15:42:2e:ca:10:
                    e5:e5:43:69:70:e0:3f:e7:ad:37:b2:4a:79:f8:63:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9E:94:77:82:1E:74:C3:9F:20:90:C2:A6:2D:34:15:2F:1D:CB:CB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C62D760EBFBC11F0A54D41A7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.1.0/24
                  156.227.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:d5:92:29:1a:99:a7:a4:ed:39:d6:e1:48:78:5d:62:be:9a:
         1d:d6:e4:09:84:66:32:5b:28:b8:81:32:99:fa:29:00:d9:f6:
         7c:74:e7:41:37:a4:14:d2:88:51:b4:05:3f:9c:a6:44:02:f1:
         05:91:c5:73:e8:48:d9:2f:4c:4d:21:97:33:4a:af:25:16:f8:
         31:21:ee:f5:10:75:85:80:cb:c1:5a:d4:b8:3b:e7:2e:65:75:
         b7:db:98:52:af:79:de:78:06:41:7d:4f:4c:f6:26:2f:34:0c:
         95:24:c8:99:77:ce:fe:ba:3f:7a:40:d2:0b:3d:7d:e0:3a:e0:
         a2:1b:d1:e9:2c:6f:41:70:bb:7c:3e:7c:4c:15:6a:e4:b7:8a:
         c9:bc:56:97:dc:29:93:e6:ee:9a:a8:a4:5f:25:c6:ed:28:dd:
         89:b8:c8:72:e0:eb:ce:71:d1:87:3c:e3:75:f1:13:55:3c:ce:
         78:b2:a0:54:c6:04:03:42:64:9b:e6:ec:6c:87:af:3e:4c:f4:
         eb:f4:ed:44:b5:b7:e0:3d:84:f3:fe:99:6b:bc:64:67:b3:3c:
         8e:6c:8b:6d:ba:92:40:8f:f0:a2:87:8b:54:51:ce:d4:d2:e7:
         4b:46:03:4c:18:63:2a:ca:5e:08:2a:8d:77:d5:ee:0c:f8:45:
         c3:15:b8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:10 2025 by rpki-client