This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C699DA52BFD411F09B4E0EBCDAE4EC9C.roa
File:                     C699DA52BFD411F09B4E0EBCDAE4EC9C.roa (raw, json)
Hash identifier:          KMLg47Ey3QcMZaN6x5ZzgmhC/Ca3D8aTee7tLJ0iPNY=
Subject key identifier:   76:5B:35:EB:98:5F:AB:EB:DD:CC:B3:BD:B3:E7:92:C7:B5:3E:76:3A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0186F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C699DA52BFD411F09B4E0EBCDAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 14:35:04 +0000
ROA not before:           Wed 12 Nov 2025 14:34:53 +0000
ROA not after:            Mon 18 May 2026 14:34:53 +0000
asID:                     152849
IP address blocks:        156.235.96.0/21 maxlen: 24
                          156.235.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100081 (0x186f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 12 14:34:53 2025 GMT
            Not After : May 18 14:34:53 2026 GMT
        Subject: CN=69149b18-7bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a6:f5:ed:fe:47:a3:ba:1a:89:78:28:2d:3e:
                    98:f9:f8:f0:85:5e:0d:86:3d:87:f1:3a:d9:13:13:
                    42:88:d5:d2:09:5f:5c:9b:0b:99:2b:9a:e1:73:02:
                    7a:99:09:47:a7:3a:52:4c:d9:f5:c0:10:1d:d6:35:
                    7a:21:9d:b3:e2:66:44:79:fc:86:e3:b9:1b:10:b2:
                    4d:10:2d:9a:b2:0c:0c:31:e1:01:8c:d0:15:34:12:
                    3a:5a:47:6a:5e:26:62:5a:83:fa:22:47:59:a0:5e:
                    4c:e9:ba:ea:ba:24:07:79:df:8a:a3:12:aa:3b:24:
                    07:8c:70:60:df:9d:9b:f7:55:a5:21:0a:7f:93:f5:
                    b2:fc:66:72:d0:a7:a0:10:11:72:09:0f:12:22:50:
                    9c:5b:93:56:23:ee:de:6e:27:47:e9:42:8f:31:19:
                    3c:9a:96:f5:1b:69:53:80:af:31:59:b1:ed:7e:85:
                    1b:08:36:09:7f:b9:22:60:23:55:14:74:d1:ba:82:
                    c9:f0:f0:87:4e:db:7c:28:1c:c8:7f:b1:54:30:30:
                    02:1a:59:92:d0:04:59:08:bf:83:d0:6b:d0:d5:45:
                    19:a8:07:b0:d2:99:3f:38:0d:fe:ff:4e:6b:15:97:
                    46:e5:a0:26:e4:95:c4:03:27:85:87:9b:04:0f:36:
                    1c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5B:35:EB:98:5F:AB:EB:DD:CC:B3:BD:B3:E7:92:C7:B5:3E:76:3A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C699DA52BFD411F09B4E0EBCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:60:51:10:d9:6d:bb:6a:d2:74:2f:6c:c1:bd:8f:02:df:6b:
         9f:83:a2:16:f2:e9:54:02:f4:83:83:f7:d5:55:f2:17:b6:10:
         2f:fa:ac:46:3e:92:67:3d:8e:af:61:b9:e8:41:19:5f:b6:95:
         21:a1:6f:4c:13:82:0f:07:16:9d:3b:25:93:04:c9:c7:2e:55:
         b1:a6:5e:35:cd:c9:2e:c3:c1:6e:1b:c6:82:b8:00:73:3e:88:
         6b:3b:a2:78:da:d9:38:81:36:25:7d:2a:bb:77:fb:84:a7:5b:
         42:f2:cf:b8:66:b3:c3:c6:22:4f:17:40:0f:cb:69:9a:c0:61:
         f6:b2:e0:9c:3d:64:09:3c:d6:48:81:8a:a8:85:ca:f9:52:97:
         a9:c4:b5:91:88:ef:2d:e5:7c:e1:c5:73:8c:24:65:2a:06:a3:
         93:99:a5:64:15:61:c6:16:ce:1e:2a:1e:ab:60:d3:cb:45:ce:
         8b:70:f9:90:b1:65:57:47:a8:4f:5d:54:b0:10:a4:4a:68:8a:
         12:8b:28:6a:d9:39:7c:1c:d9:25:ec:08:63:f7:20:11:c3:0c:
         92:75:61:6d:08:fd:34:e9:f4:c9:35:c3:c8:fb:dc:31:d7:c2:
         f9:7a:81:07:45:0d:2b:17:a4:13:5c:96:5e:cb:47:da:b3:ca:
         0b:a0:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:15 2025 by rpki-client