This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1E8EC28BD7A11F09FCD68DEDAE4EC9C.roa
File:                     E1E8EC28BD7A11F09FCD68DEDAE4EC9C.roa (raw, json)
Hash identifier:          w9mxYla61wsc5b2WZ3VmiaqmVNDiFtxAdsXA7vn/YcQ=
Subject key identifier:   28:2B:7F:79:84:C0:F8:1D:E9:5F:49:B6:85:54:CD:82:BB:C5:1E:CA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0185C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1E8EC28BD7A11F09FCD68DEDAE4EC9C.roa
Signing time:             Sun 09 Nov 2025 14:46:33 +0000
ROA not before:           Sun 09 Nov 2025 14:46:22 +0000
ROA not after:            Tue 03 Feb 2026 14:46:22 +0000
asID:                     133748
IP address blocks:        156.225.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99783 (0x185c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  9 14:46:22 2025 GMT
            Not After : Feb  3 14:46:22 2026 GMT
        Subject: CN=6910a948-8529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6d:61:72:de:21:fe:cc:2b:c2:99:00:6c:57:
                    16:3f:a4:ef:2c:ab:43:35:69:a2:51:e2:72:6f:71:
                    62:6c:94:a7:ff:74:3c:af:30:14:f9:6b:63:54:23:
                    55:b3:9b:c8:a0:46:18:b0:e0:ed:68:36:d7:51:9e:
                    2a:47:a4:b2:a8:15:b3:7d:0e:75:92:67:6a:bb:33:
                    53:2d:0b:ab:ae:9d:99:52:1d:be:cd:57:34:68:82:
                    ac:95:ce:01:81:87:60:7f:20:63:6c:bd:ef:c4:56:
                    33:f5:be:88:7f:fd:e7:0f:6d:cd:a5:35:39:29:ff:
                    2b:74:23:58:24:a0:68:cc:9d:e2:e0:f2:09:95:a1:
                    23:b2:45:4c:bc:cb:71:a6:70:a6:fa:72:be:a3:35:
                    47:3a:e6:a7:1b:ef:97:bd:9e:dd:71:4c:9c:70:ba:
                    96:da:4c:63:11:ba:c8:81:4b:d1:67:0b:86:cc:b9:
                    79:6e:7d:c1:fc:e5:c6:74:8f:5f:4d:f7:2a:bf:83:
                    f0:96:b5:95:0c:04:f8:f0:4a:ec:ba:0d:f0:15:3e:
                    6f:ee:12:a2:fa:61:6f:15:32:bf:e6:28:36:46:6d:
                    14:32:2f:a4:43:15:bd:b9:58:f6:c0:fb:96:75:74:
                    b0:54:49:1c:15:f4:02:27:e4:98:cb:7b:43:0b:28:
                    4d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2B:7F:79:84:C0:F8:1D:E9:5F:49:B6:85:54:CD:82:BB:C5:1E:CA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1E8EC28BD7A11F09FCD68DEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:8d:5c:97:6d:28:7f:f5:03:30:50:9d:ac:b9:d6:a2:90:dd:
         94:fa:0b:1d:d6:4a:49:08:c0:34:48:88:68:79:4c:89:ec:ea:
         6b:d0:26:95:21:68:03:c2:f2:2e:0b:cf:3b:93:b1:99:ac:6a:
         8b:5a:7d:59:d0:46:12:66:a7:1a:b4:7e:ea:d4:11:62:5b:f4:
         15:c6:6c:26:6e:5f:75:79:fd:6a:dc:91:89:f6:97:e8:3e:05:
         80:4a:f7:9b:85:d8:0c:4d:84:c1:32:f5:55:38:32:5e:20:d5:
         66:c8:48:68:a9:b8:97:23:52:85:77:30:62:a4:c3:5c:85:70:
         c4:ef:ea:24:00:e7:26:1d:02:03:aa:fe:7f:d5:29:86:26:28:
         e8:70:03:07:34:c6:24:ae:18:c3:3b:2d:46:4b:46:ac:bc:8b:
         40:48:df:b7:b7:87:a1:fa:7a:9a:e1:f5:96:d9:f8:de:cb:0b:
         b2:25:c1:fc:48:4b:41:f2:2a:a2:fd:b1:3b:1b:47:f9:47:00:
         09:3b:1d:35:55:4f:c4:66:3e:cf:0f:7e:80:43:b3:b0:c7:5c:
         1e:fc:94:ee:7f:38:c3:66:b4:9b:1d:b1:89:e2:94:e6:f4:e6:
         68:45:83:05:45:5b:68:2c:f7:5e:9f:99:99:e8:48:21:02:67:
         51:bd:d5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:16 2025 by rpki-client