This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/081FB560DF1411F0ABA4A58EDAE4EC9C.roa
File:                     081FB560DF1411F0ABA4A58EDAE4EC9C.roa (raw, json)
Hash identifier:          YHEW/oQ40d/2+/Fr3fU+Qfhuja5SX/yxny/elgPQWJI=
Subject key identifier:   66:D4:E3:CD:A7:D5:13:02:3C:C7:C8:39:3D:13:4C:97:5E:0E:FA:5E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01904D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/081FB560DF1411F0ABA4A58EDAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 08:55:58 +0000
ROA not before:           Mon 22 Dec 2025 08:55:53 +0000
ROA not after:            Wed 31 Dec 2025 08:55:53 +0000
asID:                     212552
IP address blocks:        156.236.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 08:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102477 (0x1904d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 22 08:55:53 2025 GMT
            Not After : Dec 31 08:55:53 2025 GMT
        Subject: CN=6949079e-fa39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:34:ea:48:7c:73:9e:b2:fd:7d:30:ec:9a:ec:
                    4a:fe:1c:06:78:10:4d:99:26:18:fa:05:eb:5c:ff:
                    59:49:bf:7d:cc:c6:b2:41:b4:8b:62:f1:f5:d3:16:
                    20:94:b9:cd:2a:d8:5b:66:7c:b8:18:98:47:39:03:
                    de:c2:50:34:52:95:c8:10:29:59:50:3e:00:3c:f9:
                    14:33:df:dc:93:12:72:47:2b:60:be:ea:30:45:92:
                    0a:1a:9d:f0:ef:93:0b:61:32:c4:e6:bc:85:c0:fd:
                    61:22:78:4a:d8:a9:9c:15:f9:41:9b:32:49:cd:4e:
                    61:17:fd:92:ee:96:34:55:34:b9:8f:2a:64:e3:d4:
                    a5:3a:b1:40:77:ef:73:01:d8:15:81:48:d0:4b:50:
                    30:4f:77:2c:55:6c:87:d1:73:95:b8:8b:ca:29:86:
                    7f:8a:ec:9f:d2:84:34:df:f7:34:18:92:97:f7:5a:
                    d7:22:5b:68:03:a5:27:ab:11:52:d6:1a:b6:30:b0:
                    4d:ba:f7:7c:cf:ee:de:eb:4e:7b:58:f0:47:c7:8e:
                    47:5a:61:c4:ac:49:11:36:d6:fa:ab:b4:1d:7d:ce:
                    32:08:38:3f:14:3d:75:c0:24:93:14:5b:73:2c:a7:
                    38:29:57:10:6f:21:b8:b9:88:64:4f:df:80:30:e4:
                    2c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D4:E3:CD:A7:D5:13:02:3C:C7:C8:39:3D:13:4C:97:5E:0E:FA:5E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/081FB560DF1411F0ABA4A58EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:32:37:cd:34:0d:6f:4f:e2:cc:ee:c3:74:4f:51:ed:9b:16:
         84:8c:84:8f:a3:89:4b:f9:96:bd:b7:b2:3f:45:90:23:45:25:
         89:a6:3f:a4:ba:77:d5:97:96:2b:fa:0a:1a:cd:e3:7a:71:0d:
         1a:b9:4a:f6:14:cb:f6:ba:ba:59:fb:02:53:51:cb:55:05:44:
         bc:04:36:4f:92:e0:47:0c:65:9e:ba:ef:5d:7c:91:fb:28:05:
         55:a8:95:5f:a0:1f:52:c2:70:00:80:b5:74:d5:57:6f:96:0f:
         8e:8a:17:9d:5a:9c:f5:81:bc:98:13:79:b2:a7:e3:f2:9c:b0:
         65:ad:9f:63:58:9b:04:41:af:64:ac:4c:85:80:4d:26:bd:7a:
         1d:ee:a2:48:2d:84:15:ed:aa:0c:35:12:05:14:f6:91:a8:6d:
         8f:5b:19:84:d6:c1:e6:fd:ef:65:8d:a6:77:3a:e2:28:d3:8e:
         6e:9c:70:24:58:69:f5:3a:f7:52:c1:a0:ef:2b:24:2a:a0:4e:
         44:01:95:e9:3e:0c:9b:12:ed:7f:69:e7:4c:f8:94:80:a1:42:
         ba:04:8f:4b:17:fe:85:8b:ab:48:9e:c4:8a:f1:1e:57:d5:79:
         e8:dc:46:35:09:c8:d2:fe:16:ea:54:0b:61:81:69:e8:d6:eb:
         3c:15:69:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:44 2025 by rpki-client