This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9EBEFE4C00111F0BD9DE0D1DAE4EC9C.roa
File:                     F9EBEFE4C00111F0BD9DE0D1DAE4EC9C.roa (raw, json)
Hash identifier:          RQhTOS0LFB1EFypzewSdfX6YkXP3NUxegwkLxfpybUs=
Subject key identifier:   B9:54:B6:65:9F:8C:7B:F7:E5:A9:22:4C:D7:EA:54:C2:9B:9E:3F:C7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018728
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9EBEFE4C00111F0BD9DE0D1DAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 19:58:37 +0000
ROA not before:           Wed 12 Nov 2025 19:58:32 +0000
ROA not after:            Mon 18 May 2026 19:58:32 +0000
asID:                     134365
IP address blocks:        156.224.18.0/23 maxlen: 24
                          156.224.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100136 (0x18728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 12 19:58:32 2025 GMT
            Not After : May 18 19:58:32 2026 GMT
        Subject: CN=6914e6ed-94b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:50:47:49:be:b4:43:57:0c:d9:29:d5:1e:d0:
                    4f:fc:cd:b7:df:37:8e:4b:f6:fd:6e:e8:03:d6:b9:
                    f8:77:3d:0a:7a:f1:bd:18:7d:91:69:12:09:c0:60:
                    27:23:67:76:c9:c0:b2:4e:45:02:bb:4e:21:d9:17:
                    05:89:56:75:97:72:df:2f:dd:10:bb:66:43:bc:67:
                    dd:1a:32:c7:d2:fd:0c:05:f0:8f:0a:cd:72:1f:e6:
                    8b:14:77:ee:9d:4a:45:08:9d:81:f6:3a:2e:50:d6:
                    c9:fd:d8:4f:c4:09:9f:73:38:c0:da:4a:68:9c:ff:
                    8b:c3:c4:ad:1a:1d:87:29:7c:be:7b:c3:97:6e:cd:
                    50:49:05:ec:c1:f3:18:c9:b7:8e:bf:bc:7d:71:94:
                    b5:70:29:3f:5f:a4:fe:fa:fa:a6:a4:ca:4a:1c:bb:
                    d2:ad:ca:04:42:64:20:48:c4:d3:d8:be:0d:86:07:
                    05:f1:11:4d:d0:49:4d:93:0a:89:41:00:3f:0d:40:
                    7c:68:31:57:5d:c2:e2:0c:9a:00:f9:03:ed:76:16:
                    d0:71:7c:43:0c:c2:6e:35:5a:54:e1:30:3a:8c:5e:
                    02:a4:69:54:47:e1:ad:eb:0c:d1:34:ab:8b:c0:2e:
                    d6:ef:5f:3f:6b:2b:f6:e3:a4:ce:5e:ad:33:91:73:
                    d5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:54:B6:65:9F:8C:7B:F7:E5:A9:22:4C:D7:EA:54:C2:9B:9E:3F:C7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9EBEFE4C00111F0BD9DE0D1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.18.0/23
                  156.224.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:15:c8:30:0d:77:77:05:c5:5f:4d:b6:93:63:46:74:c3:32:
         c5:5c:cd:c8:29:e4:f0:5b:a7:db:72:bc:48:07:04:10:4c:66:
         b6:52:35:5b:a7:7b:07:08:47:b3:45:19:7b:11:be:05:a3:6d:
         9a:d3:2c:bb:cc:f7:e1:e9:9b:fc:c8:f6:73:2f:48:b9:c1:b7:
         17:2f:33:f4:2c:11:e2:c3:99:7f:5f:33:74:8e:33:4b:53:c3:
         69:82:d0:58:af:dd:36:b6:ac:5d:f5:04:3b:50:68:a0:17:e2:
         4f:fd:bb:9e:81:fe:fe:f3:0f:ad:b5:f4:af:72:27:c8:94:dd:
         07:64:8a:f9:2d:84:00:d8:e9:06:b6:c1:9d:32:31:0c:ff:ac:
         b9:d7:88:4d:c8:a7:78:7d:b1:6c:b1:ad:03:66:2f:e4:ea:17:
         f9:8e:a0:b0:f9:bb:09:de:99:2f:cd:b8:7d:76:ff:6a:7e:88:
         8d:a1:11:e3:bd:3a:bc:3c:8c:c1:8c:3c:65:fb:d6:0d:ae:9a:
         d8:ab:17:7b:ce:11:d9:1b:d1:d0:f2:95:b7:36:0b:62:24:38:
         02:cb:5f:a6:83:c2:ae:81:62:3e:72:e6:38:3f:e8:c7:cf:d6:
         ba:05:c0:d1:c7:56:62:7c:e6:5b:27:53:69:50:4a:c5:7c:78:
         25:7f:f6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:49 2025 by rpki-client