This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA3A2FE4D12011F080F42E91DAE4EC9C.roa
File:                     FA3A2FE4D12011F080F42E91DAE4EC9C.roa (raw, json)
Hash identifier:          tZSrvCKvAgeH+JMUklTQB45CweG7Je8U99Z0Z+KCVb4=
Subject key identifier:   3C:E6:A9:40:58:84:D9:FC:61:53:64:B5:1A:52:3A:69:78:A8:DA:67
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018C2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA3A2FE4D12011F080F42E91DAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 14:53:22 +0000
ROA not before:           Thu 04 Dec 2025 14:53:17 +0000
ROA not after:            Thu 11 Dec 2025 14:53:17 +0000
asID:                     134489
IP address blocks:        156.238.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101421 (0x18c2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  4 14:53:17 2025 GMT
            Not After : Dec 11 14:53:17 2025 GMT
        Subject: CN=6931a062-ab6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:3e:dd:5f:6e:13:c2:71:f6:c1:72:aa:9e:
                    2d:85:1a:a2:86:0e:e0:18:1c:0e:4e:6c:b2:1e:82:
                    14:5b:39:ea:7b:d0:4d:6f:65:f9:36:d0:f5:a1:97:
                    ee:8c:c6:83:cf:97:8d:92:0f:60:dd:56:75:7f:eb:
                    e9:9c:67:c2:b5:c2:91:7d:25:0e:e3:41:1c:a2:d6:
                    4f:c0:db:88:a3:58:a0:48:10:e0:2a:5d:be:5b:14:
                    1f:4c:0b:99:13:d1:2f:bc:d2:0d:ef:0d:b3:6e:5a:
                    a6:06:05:21:e1:d6:fb:66:4e:72:3b:25:c5:49:e8:
                    c6:1c:b8:29:98:64:87:ee:75:ba:aa:e7:fd:ab:7d:
                    12:31:40:90:de:0f:ad:a4:fe:68:8f:fa:47:6e:37:
                    b1:17:c1:01:ff:1b:87:c4:0b:a9:38:23:b8:e2:7e:
                    d0:ac:27:34:5d:c4:ec:e9:40:62:18:3c:22:8e:39:
                    76:fb:57:be:08:ba:5d:e6:96:dd:7f:d5:0a:b6:8e:
                    88:4b:0d:3e:a2:50:cf:d9:2f:bd:49:45:f4:aa:83:
                    0a:c9:11:0d:c3:28:f0:3b:db:fd:3b:d7:ac:4b:f3:
                    19:68:64:6e:d1:72:53:ea:23:0f:fd:d2:f7:87:01:
                    44:b4:d4:46:4c:d1:8a:8b:c6:53:dc:be:ea:98:75:
                    17:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E6:A9:40:58:84:D9:FC:61:53:64:B5:1A:52:3A:69:78:A8:DA:67
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA3A2FE4D12011F080F42E91DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:38:92:60:4b:de:0a:22:7f:ac:e1:05:36:b7:5d:cc:e7:
         c3:b5:f0:74:e8:4a:7a:92:1b:7e:73:eb:25:50:90:e7:b8:c6:
         5a:57:73:bb:e5:a7:c8:3f:91:db:af:ed:9d:dd:94:22:8a:40:
         5f:64:11:c6:bd:65:4a:c8:6b:93:9f:26:00:bb:9e:64:20:63:
         ac:4f:ca:9a:86:a2:2f:eb:e1:47:32:f2:1e:57:88:3e:40:e9:
         4c:d1:4f:e5:ad:95:2d:8c:94:a4:a3:fd:02:5f:44:f7:45:a0:
         37:d1:ca:bb:67:58:24:84:b6:6d:1b:45:8b:49:3a:90:f5:5d:
         31:c0:43:28:0b:8d:b7:34:17:c7:38:e4:d5:62:f8:24:4e:33:
         40:f9:57:b1:dd:b6:55:56:0a:86:df:90:af:31:24:d6:9b:38:
         e7:8d:62:fc:40:1b:65:93:43:46:b2:50:26:d5:d6:e8:a2:61:
         75:ec:1a:82:ec:72:17:f2:47:72:a2:11:90:e7:f6:6a:16:23:
         d4:82:3c:ab:ff:12:84:bd:72:ed:9c:66:12:25:50:9a:db:30:
         4d:70:99:14:39:86:8b:8a:07:6f:a3:55:0e:47:80:23:2c:94:
         c1:4f:37:4f:5c:a4:88:ab:aa:03:40:40:d8:a4:be:a3:5b:f2:
         77:e4:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 13:25:30 2025 by rpki-client