This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/112208EAD59911F0A81B909BDAE4EC9C.roa
File:                     112208EAD59911F0A81B909BDAE4EC9C.roa (raw, json)
Hash identifier:          Bn0P6osOXhvMWJ/wEEesHYKZMZXr1MlXRhq6bdy/aAk=
Subject key identifier:   96:25:BF:22:58:03:DB:89:BF:20:FA:7E:C0:5F:34:0E:12:A5:7C:9F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018D65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/112208EAD59911F0A81B909BDAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 07:23:05 +0000
ROA not before:           Wed 10 Dec 2025 07:23:00 +0000
ROA not after:            Thu 08 Jan 2026 07:23:00 +0000
asID:                     206283
IP address blocks:        156.238.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101733 (0x18d65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 10 07:23:00 2025 GMT
            Not After : Jan  8 07:23:00 2026 GMT
        Subject: CN=69391fd8-f616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2b:ae:fd:05:ab:4e:ba:51:2e:56:c2:26:dd:
                    c6:56:2e:0e:9d:d9:57:86:08:69:18:5d:d7:0c:23:
                    7b:a9:88:cf:55:f9:f5:b2:95:85:22:07:d6:18:fe:
                    1f:3c:32:20:4c:f4:46:e5:17:53:ac:7b:39:75:94:
                    be:a5:64:ed:89:5f:ba:1c:1e:21:49:01:4e:6e:33:
                    af:eb:3d:2d:e5:6d:43:4f:44:20:b5:63:d2:d3:7d:
                    8a:65:f2:88:18:35:8e:5f:06:e1:eb:d1:f5:51:51:
                    6b:d4:a1:cc:c5:3b:15:a7:1a:17:96:b2:ef:93:11:
                    66:f5:bc:27:5f:17:98:1f:17:99:d0:5b:81:a4:3b:
                    75:9f:d4:25:5e:bf:5b:1b:a0:12:ca:52:25:dc:a5:
                    fb:a1:76:bb:b2:80:ab:72:7f:7e:6a:c5:53:5a:e6:
                    a5:29:f1:26:9a:46:99:e8:52:88:80:22:b9:15:c6:
                    3c:c0:fd:7c:7d:b6:c1:89:6e:80:ad:0d:34:0e:9c:
                    00:59:2f:a1:65:7a:f7:66:12:ed:66:ad:f2:ec:09:
                    7f:b1:96:52:0b:9c:c5:51:61:7f:ea:c3:2e:ee:d7:
                    76:17:19:56:9a:18:8b:13:95:94:59:0f:b6:b9:b6:
                    04:72:09:87:d3:30:a3:d5:94:17:9c:ca:1c:f1:20:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:25:BF:22:58:03:DB:89:BF:20:FA:7E:C0:5F:34:0E:12:A5:7C:9F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/112208EAD59911F0A81B909BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:10:c9:af:ee:f6:7b:1f:6b:74:00:c1:5a:e0:4a:32:72:c2:
         d0:73:13:d4:53:88:42:bd:eb:38:42:6c:8f:87:d5:15:49:82:
         80:cc:49:d3:a1:49:8d:7c:05:dd:3a:92:27:9f:ad:db:a5:13:
         db:f9:79:b8:09:a7:47:38:fa:41:42:0e:98:27:f8:68:08:e3:
         c5:25:86:4d:6c:85:2e:4f:5a:66:f8:19:19:57:c8:d7:81:27:
         53:93:e7:f5:42:f3:6e:ca:a1:e1:dd:d5:99:2e:d3:b7:7b:f2:
         3f:39:09:fc:9e:cf:f9:da:49:d5:ae:74:d7:33:82:b4:3d:b5:
         3e:88:eb:0f:bc:05:00:60:88:f0:4e:32:1b:b0:bd:8e:47:d7:
         7a:ff:bb:e3:c2:c0:5a:5e:3b:79:3b:18:1d:f6:a7:1c:07:71:
         e4:db:5d:d7:7a:6b:c9:74:4e:16:60:3c:73:18:b1:56:16:b6:
         a4:ed:ac:8a:a7:c0:30:ff:0a:d7:12:5f:1e:d6:9c:00:75:a2:
         e1:be:a1:75:79:4c:ae:a8:8f:18:97:b5:7a:c5:9d:e7:54:95:
         56:76:6d:bf:9c:1a:d9:a8:89:e1:3a:a2:27:49:4d:d1:0d:11:
         6b:c8:e8:ef:fb:ad:b4:03:e3:de:7d:5f:9c:81:e9:b7:42:c7:
         61:d7:4e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:00 2025 by rpki-client