This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22B267ECDF4B11F0A7763ADFDAE4EC9C.roa
File:                     22B267ECDF4B11F0A7763ADFDAE4EC9C.roa (raw, json)
Hash identifier:          dS9w8Ddg8eTW+6yxlXdcQryJ4bq5RiKHPV7GAe4Op2o=
Subject key identifier:   68:0A:1C:1E:A8:96:6D:BC:CD:D5:EB:89:3C:7F:BE:55:D7:B2:8D:C0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019085
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22B267ECDF4B11F0A7763ADFDAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 15:30:25 +0000
ROA not before:           Mon 22 Dec 2025 15:30:19 +0000
ROA not after:            Sat 28 Mar 2026 15:30:19 +0000
asID:                     329278
IP address blocks:        156.232.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102533 (0x19085)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 22 15:30:19 2025 GMT
            Not After : Mar 28 15:30:19 2026 GMT
        Subject: CN=69496411-f12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:94:80:7b:09:7a:8f:a0:57:2b:84:95:df:
                    90:87:ed:a5:81:fb:73:7e:0c:39:18:a7:fa:15:6a:
                    a6:dc:87:f9:0b:54:d9:59:51:5c:91:9b:12:1f:ae:
                    ba:ef:9c:9e:3d:db:6b:b0:82:6c:6e:88:0a:41:d1:
                    9c:73:e4:f4:a4:97:f2:8c:3d:a1:08:b8:11:00:15:
                    83:a4:db:10:e3:7b:d3:4a:b4:f6:f5:c0:e6:f0:6a:
                    5a:76:2b:bd:46:04:75:a7:83:c4:34:6e:9b:c1:17:
                    91:cc:f2:58:19:73:20:c2:e7:a2:36:b4:20:1f:1f:
                    6b:a6:ad:a8:f0:1e:89:87:a9:c3:ce:98:5c:4c:2f:
                    fc:a2:0e:8c:e8:df:32:d0:bc:1f:1d:c2:22:94:33:
                    0c:18:71:a1:f6:93:92:11:37:f6:db:e8:47:ca:a9:
                    4d:4f:07:d0:bc:cc:37:7b:36:bc:8f:b1:61:c0:11:
                    95:6e:7f:60:59:de:7b:33:84:dd:3e:4d:45:41:80:
                    f1:00:f7:da:7a:a9:34:19:84:be:72:38:82:db:e2:
                    da:9b:4b:01:d0:73:2d:6c:bd:32:61:15:1b:c7:70:
                    35:78:e9:90:94:e8:1a:b3:19:0f:c9:bc:9d:fa:22:
                    5f:80:2a:98:94:87:85:7a:31:ca:d8:06:8b:85:cc:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0A:1C:1E:A8:96:6D:BC:CD:D5:EB:89:3C:7F:BE:55:D7:B2:8D:C0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22B267ECDF4B11F0A7763ADFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.232.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:ba:19:31:24:98:8c:08:87:e2:b3:3a:49:23:ae:11:f9:f8:
         5f:dc:06:4c:6e:6e:61:93:8f:20:92:a3:10:49:bd:99:06:22:
         e9:8b:5d:ad:f4:51:46:c5:52:56:bf:b0:71:28:88:15:16:50:
         e3:95:76:6f:2b:13:02:f4:3d:01:3b:1e:0d:f5:07:0e:9d:9f:
         b1:fb:6a:a8:46:fc:1c:61:0b:06:a4:60:f2:9e:27:3b:85:7c:
         b7:5b:e2:d5:93:44:c1:82:dc:96:05:c6:ac:ab:41:05:c3:89:
         91:4c:58:84:b9:81:46:2e:4a:fc:88:ef:15:55:09:2f:64:da:
         55:5c:f2:66:b7:b7:c4:2d:93:bd:83:c4:c3:ea:89:91:42:f2:
         36:c0:ba:1f:19:91:92:5d:86:64:31:36:bc:70:5b:ce:cb:83:
         51:c2:5e:74:9e:dd:89:de:df:88:ef:79:4f:4a:e5:ad:72:c1:
         a6:95:f5:48:68:04:56:f4:a4:b0:39:58:40:d4:83:85:98:65:
         38:fe:fa:56:17:1b:36:84:01:e3:7c:39:4c:a4:cf:65:a0:d4:
         0f:b7:6d:b3:63:d6:c7:59:65:00:d5:f8:79:a8:87:6e:0a:b5:
         b9:3f:59:0b:c6:81:9c:46:43:2c:d0:39:cd:7d:19:67:e2:20:
         bf:06:d4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:03 2025 by rpki-client