This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/132E36A6E22B11F0A55A5D7FDAE4EC9C.roa
File:                     132E36A6E22B11F0A55A5D7FDAE4EC9C.roa (raw, json)
Hash identifier:          lobYchLgwm/pj7A6mh0/8a1/oIrOYedj0uue2NrUJ+U=
Subject key identifier:   49:A0:D7:1E:03:39:F5:7C:CE:5D:C0:05:D3:06:EF:B0:BC:24:52:C6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01922B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/132E36A6E22B11F0A55A5D7FDAE4EC9C.roa
Signing time:             Fri 26 Dec 2025 07:18:28 +0000
ROA not before:           Fri 26 Dec 2025 07:18:24 +0000
ROA not after:            Tue 26 Dec 2028 07:18:24 +0000
asID:                     17561
IP address blocks:        156.240.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102955 (0x1922b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 26 07:18:24 2025 GMT
            Not After : Dec 26 07:18:24 2028 GMT
        Subject: CN=694e36c4-1101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:68:fe:0f:74:a0:7d:44:b7:f6:21:c0:1a:4c:
                    7b:f6:e9:d0:60:75:ed:5f:8b:8b:ce:4f:3a:a8:8a:
                    22:d0:ce:92:67:ea:4e:9e:7c:b9:bc:34:91:7e:14:
                    65:fe:c1:9b:99:0f:ce:14:ed:57:11:ef:7b:5e:78:
                    f8:d0:f6:62:83:08:3a:cc:99:ce:c0:7c:a0:9b:39:
                    41:af:b4:c9:9d:65:dd:61:11:8d:73:57:b8:eb:a9:
                    05:1c:1d:78:ca:77:34:bd:11:15:63:90:0b:8f:65:
                    32:b9:d2:21:97:b6:9b:b6:84:39:eb:cd:97:b1:da:
                    83:c2:b7:d7:dc:c1:60:f7:42:6d:36:55:7f:17:54:
                    57:17:25:f5:0c:16:89:7c:fd:ad:e0:69:eb:4c:3d:
                    0a:1c:42:47:29:0a:11:b0:a2:2f:fd:02:d5:58:b8:
                    29:fa:8a:d1:01:f3:4f:7a:32:d7:34:a6:9f:10:f2:
                    67:a4:e8:d8:5d:63:e1:57:e8:67:d3:93:f1:8a:81:
                    49:16:f9:45:97:e3:1c:68:cd:8d:aa:af:e5:4f:7e:
                    ae:70:06:13:00:0e:5a:3c:31:fb:eb:62:2e:55:90:
                    0e:26:f3:59:8c:ed:61:05:d0:32:c6:38:af:11:08:
                    ef:c1:47:a2:ff:a6:e4:c2:cd:37:7f:ae:5b:b6:2c:
                    6e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A0:D7:1E:03:39:F5:7C:CE:5D:C0:05:D3:06:EF:B0:BC:24:52:C6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/132E36A6E22B11F0A55A5D7FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:03:71:2c:4c:ef:15:36:51:d6:de:76:05:80:78:17:c2:7d:
         ed:7c:6a:0d:2d:91:ec:ff:4a:e3:ca:31:f0:3b:61:ae:1d:fc:
         1a:0d:06:77:d1:c7:25:0b:d5:9e:69:61:64:a8:06:76:be:c3:
         53:31:f2:5b:d7:f7:27:50:72:6d:b2:83:59:f5:f9:a9:95:24:
         f4:32:22:59:4d:6d:b9:70:e2:72:32:2e:fc:7f:f8:2b:9f:d8:
         37:4c:3b:4a:5b:29:f4:ae:98:db:9b:8b:83:26:c6:47:ef:e9:
         98:8a:02:77:50:1b:6f:cf:eb:12:57:88:72:35:75:12:0f:e0:
         f9:68:9a:51:ce:e2:d7:33:2c:58:2a:36:36:2f:c5:d6:d6:3e:
         71:ad:3c:bf:09:12:66:93:6f:52:37:88:ad:3b:96:8f:0e:f1:
         a9:47:e5:70:08:87:0f:1d:c9:8f:f0:f8:7b:7e:f7:94:a5:b5:
         2c:df:59:4c:65:b2:23:d7:84:32:d0:30:c3:64:3a:45:8b:30:
         49:e2:4b:88:86:bb:06:5c:f9:b9:fa:1f:91:3a:2c:b0:a5:9c:
         9f:68:2c:87:16:c2:8b:13:fe:ff:c5:74:4f:c7:c5:da:bf:6e:
         9b:04:3e:78:f4:56:62:85:4c:dc:f3:45:55:54:e8:d8:57:a0:
         e9:55:a9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:28:29 2025 by rpki-client