This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE0AC258BE1C11F099A0BFDFDAE4EC9C.roa
File:                     FE0AC258BE1C11F099A0BFDFDAE4EC9C.roa (raw, json)
Hash identifier:          p03GtpiTp9DBLHUPY8/kGry94WmvbzOd0w6MtvUpvFM=
Subject key identifier:   F4:3E:6A:B0:9A:50:51:37:74:75:0B:2C:86:8D:AA:BD:32:DE:A6:A8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0185E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE0AC258BE1C11F099A0BFDFDAE4EC9C.roa
Signing time:             Mon 10 Nov 2025 10:06:58 +0000
ROA not before:           Mon 10 Nov 2025 10:06:53 +0000
ROA not after:            Wed 11 Nov 2026 10:06:53 +0000
asID:                     328608
IP address blocks:        156.229.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99809 (0x185e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 10 10:06:53 2025 GMT
            Not After : Nov 11 10:06:53 2026 GMT
        Subject: CN=6911b942-9369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:42:3e:e9:df:dd:52:f6:1c:a6:ab:98:3f:ce:
                    c5:3d:6b:42:c9:30:25:4f:80:be:08:3b:4b:c5:d0:
                    23:9e:00:06:60:a5:9b:76:ad:ac:a8:33:57:36:45:
                    d5:26:b5:eb:ea:5a:65:5d:16:21:63:47:dc:ce:e5:
                    c5:5f:f4:e2:7a:1a:40:d1:dd:42:6d:76:b2:cb:b1:
                    a2:66:17:1e:be:8d:07:a9:21:5b:1a:fc:8d:e4:ec:
                    18:c4:07:78:97:2f:20:35:d4:c9:93:33:0c:d1:5e:
                    10:98:49:d7:ad:b0:0c:a3:e4:88:10:0d:a1:21:39:
                    96:bd:94:bf:02:50:40:74:84:7e:be:44:ec:94:80:
                    fa:7c:fb:48:6c:3f:30:10:c1:01:c2:b3:f9:cb:32:
                    85:33:d7:fc:f9:62:bb:81:d1:62:8d:b3:61:02:d2:
                    fd:3f:5d:14:6d:35:97:7e:11:16:6b:26:db:eb:53:
                    29:27:59:a9:ee:a5:d8:a5:d5:9b:9d:c6:81:69:41:
                    52:43:b5:ca:95:96:c4:95:e5:a5:ac:ae:65:9f:9d:
                    20:c0:2a:af:aa:9b:4d:78:68:49:04:02:e2:b0:54:
                    9e:76:12:4d:36:f7:8d:67:21:42:4b:f5:cd:3c:ae:
                    bc:f6:db:fd:6a:37:72:08:0b:5e:bc:55:28:83:88:
                    c0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3E:6A:B0:9A:50:51:37:74:75:0B:2C:86:8D:AA:BD:32:DE:A6:A8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE0AC258BE1C11F099A0BFDFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:bd:0e:98:fd:f1:90:a8:f3:b4:63:3e:f3:e0:d4:d9:07:95:
         3c:a3:bd:f3:8f:6c:1a:f7:b2:8a:87:3e:5c:d0:89:c2:9d:f5:
         32:c7:e7:69:00:9e:62:94:44:79:78:d5:21:91:37:3d:62:ab:
         69:88:99:a4:31:c0:d7:e7:57:2e:bf:82:83:db:b4:13:48:de:
         24:18:47:de:9e:4c:e0:af:29:b9:26:aa:20:00:91:2e:9c:39:
         aa:fa:72:01:a7:4c:9c:10:d3:e2:19:4f:88:b5:fb:21:6a:05:
         b5:d1:ba:87:06:88:66:eb:d3:a2:ce:b2:29:f3:85:fa:0f:5a:
         04:eb:01:b4:f2:8c:a2:50:54:4f:c4:b9:43:59:3d:36:e3:ac:
         0e:15:73:7e:1b:11:d3:e1:e0:58:07:e9:1e:9e:7d:21:5a:ec:
         af:af:06:ba:06:cf:b2:31:d8:ab:64:0b:41:ba:fb:a2:2a:3f:
         f8:53:b0:e2:e2:18:db:bd:87:80:83:66:30:f5:1e:a1:18:10:
         c9:26:d0:17:0a:22:91:c9:2b:0a:88:1e:0e:72:3d:c8:60:66:
         2c:e6:64:3b:d7:25:f3:b6:33:91:7f:b3:d4:ea:2b:0e:db:31:
         35:0d:1e:e6:c1:90:f8:cc:cd:f7:50:c2:11:9a:9d:c0:d4:96:
         96:27:d5:f6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYXhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTEwMTAwNjUzWhcNMjYxMTExMTAwNjUzWjAYMRYw
FAYDVQQDEw02OTExYjk0Mi05MzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1EI+6d/dUvYcpquYP87FPWtCyTAlT4C+CDtLxdAjngAGYKWbdq2sqDNX
NkXVJrXr6lplXRYhY0fczuXFX/TiehpA0d1CbXayy7GiZhcevo0HqSFbGvyN5OwY
xAd4ly8gNdTJkzMM0V4QmEnXrbAMo+SIEA2hITmWvZS/AlBAdIR+vkTslID6fPtI
bD8wEMEBwrP5yzKFM9f8+WK7gdFijbNhAtL9P10UbTWXfhEWaybb61MpJ1mp7qXY
pdWbncaBaUFSQ7XKlZbEleWlrK5ln50gwCqvqptNeGhJBALisFSedhJNNveNZyFC
S/XNPK689tv9ajdyCAtevFUog4jAKQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPQ+
arCaUFE3dHULLIaNqr0y3qaoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GRTBBQzI1OEJFMUMxMUYwOTlBMEJGREZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOVIMA0GCSqGSIb3DQEBCwUA
A4IBAQApvQ6Y/fGQqPO0Yz7z4NTZB5U8o73zj2wa97KKhz5c0InCnfUyx+dpAJ5i
lER5eNUhkTc9YqtpiJmkMcDX51cuv4KD27QTSN4kGEfenkzgrym5JqogAJEunDmq
+nIBp0ycENPiGU+ItfshagW10bqHBohm69OizrIp84X6D1oE6wG08oyiUFRPxLlD
WT0246wOFXN+GxHT4eBYB+kenn0hWuyvrwa6Bs+yMdirZAtBuvuiKj/4U7Di4hjb
vYeAg2Yw9R6hGBDJJtAXCiKRySsKiB4Ocj3IYGYs5mQ71yXztjORf7PU6isO2zE1
DR7mwZD4zM33UMIRmp3A1JaWJ9X2
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:47:56 2025 by rpki-client