This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D37950ECC3A111F0996369BFDAE4EC9C.roa
File:                     D37950ECC3A111F0996369BFDAE4EC9C.roa (raw, json)
Hash identifier:          D3xiVqaNbPaPgvxu3tj555+TZF0kkkAFED69enV6hOs=
Subject key identifier:   9A:A1:55:AD:21:EC:94:C9:FA:1C:47:46:29:82:11:12:5A:4F:76:87
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0187E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D37950ECC3A111F0996369BFDAE4EC9C.roa
Signing time:             Mon 17 Nov 2025 10:40:26 +0000
ROA not before:           Mon 17 Nov 2025 10:40:21 +0000
ROA not after:            Sun 21 Dec 2025 10:40:21 +0000
asID:                     153656
IP address blocks:        156.254.32.0/19 maxlen: 24
                          156.254.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100323 (0x187e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 17 10:40:21 2025 GMT
            Not After : Dec 21 10:40:21 2025 GMT
        Subject: CN=691afb9a-8658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:6f:e5:9e:63:5f:ba:2f:df:93:4b:03:47:
                    3e:e1:66:44:7f:90:17:06:15:c6:71:d3:ce:ab:c5:
                    30:86:ae:3b:2e:5a:9b:4c:95:9f:9b:32:23:1c:0d:
                    a6:38:3a:ac:12:aa:89:06:76:2b:2f:63:27:4d:73:
                    2e:eb:85:8b:f8:86:33:e5:8c:74:be:56:68:f4:aa:
                    a4:e0:aa:a7:cf:df:13:0e:61:03:41:52:2e:74:0a:
                    e5:27:f4:62:44:40:19:ea:82:c9:93:85:a1:2c:aa:
                    d0:db:35:67:08:23:60:73:01:64:e3:36:aa:12:d2:
                    e8:f9:69:18:62:f5:6b:9f:62:f8:ba:54:5b:cf:1c:
                    07:dd:40:d7:c5:a5:a4:ff:d9:97:05:85:9c:e5:97:
                    67:d4:3f:25:cf:24:e4:f2:49:40:39:e0:a8:57:a2:
                    b4:d7:49:ef:6d:0f:13:92:f7:20:de:b4:e7:04:ed:
                    3b:b9:7b:7c:b8:3d:7a:e3:1c:b8:9b:af:37:7d:73:
                    e3:6a:9b:fc:20:4a:47:02:9f:e0:7b:3e:bb:a7:19:
                    f8:bb:68:31:17:0d:ba:db:0e:de:84:2c:c6:6a:51:
                    bd:b5:c3:7a:b6:ae:db:6b:91:3e:6a:8e:c3:4b:4a:
                    93:5a:30:85:ff:bb:02:b7:12:40:7a:ac:44:91:86:
                    50:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A1:55:AD:21:EC:94:C9:FA:1C:47:46:29:82:11:12:5A:4F:76:87
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D37950ECC3A111F0996369BFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.32.0-156.254.95.255

    Signature Algorithm: sha256WithRSAEncryption
         28:d6:13:62:e1:ad:83:be:60:cb:25:3b:37:3d:50:48:15:f9:
         aa:47:3e:7d:e6:d1:8e:b8:49:0b:05:67:f7:d3:40:ec:6b:b9:
         c2:20:90:b3:b3:ed:ee:a9:3c:15:fa:0e:0f:3b:fa:03:de:b0:
         c4:08:c5:42:57:b8:2c:da:1a:7d:f6:8e:0f:11:4c:c7:ad:5a:
         56:8c:c9:15:68:cc:c6:16:21:41:6d:61:8d:a3:b7:63:26:46:
         dd:b4:cc:1f:dd:5e:a9:89:e5:c3:fb:06:25:bd:23:2f:08:3c:
         d3:f5:34:3c:b6:0b:71:b5:69:80:3b:f6:53:6d:58:03:a4:00:
         93:98:1d:f1:33:d6:7d:02:66:e4:1f:e7:be:ff:0b:c4:f1:7f:
         4a:1e:9a:a7:22:47:0d:b3:13:13:84:e0:e3:a9:5a:3e:19:c2:
         2b:7d:d9:f8:d2:95:50:f1:45:88:ef:3b:73:c0:2f:0a:56:33:
         37:e5:e6:27:99:e7:cd:2a:55:82:a4:46:2f:05:3a:0a:46:99:
         0a:98:1c:6a:9b:2a:83:10:1f:7b:3f:37:27:31:8b:46:ef:fb:
         90:fc:f3:fb:87:8e:74:87:fa:92:8b:4e:06:04:08:f1:00:9d:
         f4:5f:0d:a1:eb:5e:0d:a9:83:46:2d:39:49:36:59:b2:78:60:
         bf:05:06:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:13 2025 by rpki-client