This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A57CAFAD76711F0A72B31E3DAE4EC9C.roa
File:                     2A57CAFAD76711F0A72B31E3DAE4EC9C.roa (raw, json)
Hash identifier:          UgkOpt0QRLYyFJ0SXEXixQge/9DMXgBCTR3HYGDQeFc=
Subject key identifier:   8E:C7:73:D6:5B:AB:10:BE:AA:07:E7:76:25:38:CD:84:0F:E0:30:81
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018E0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A57CAFAD76711F0A72B31E3DAE4EC9C.roa
Signing time:             Fri 12 Dec 2025 14:30:54 +0000
ROA not before:           Fri 12 Dec 2025 14:30:48 +0000
ROA not after:            Wed 14 Jan 2026 14:30:48 +0000
asID:                     213690
IP address blocks:        156.249.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101898 (0x18e0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 12 14:30:48 2025 GMT
            Not After : Jan 14 14:30:48 2026 GMT
        Subject: CN=693c271e-e4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:df:08:e8:28:7c:53:c4:3d:30:33:5d:22:
                    6f:96:74:00:fb:79:d1:28:f8:41:1b:dc:f8:02:43:
                    3f:52:a3:59:52:0d:57:a7:e4:e0:d5:d9:d8:db:f5:
                    e5:e9:6d:f5:ff:5c:c1:66:f9:89:0e:64:e1:40:16:
                    b9:a3:fc:ef:1f:ea:74:d6:57:ea:d5:a4:fb:df:a1:
                    e7:9d:ea:2c:eb:82:d2:70:e7:c8:c2:58:3d:30:aa:
                    3f:c6:b3:8e:12:2a:55:8a:a1:55:cb:1f:5f:8f:b4:
                    5c:6f:5b:a2:46:f9:66:b6:79:87:df:9b:2d:37:45:
                    ed:b4:ed:f0:4e:bb:be:40:54:14:a8:61:1f:fa:bd:
                    d1:62:91:1b:e8:65:32:7b:51:94:19:0d:15:0f:eb:
                    85:a4:e0:3e:cc:83:1b:9b:ce:5d:fb:89:c2:a4:8f:
                    0d:73:0c:66:40:38:5c:ba:91:51:1d:fc:0c:ba:98:
                    3b:06:50:21:73:a2:55:9e:01:ca:5b:ec:4e:9a:51:
                    25:59:3c:8d:bc:45:5a:c1:9a:3d:22:22:41:65:31:
                    8b:49:67:f9:a8:d3:ab:95:0c:05:3f:ee:13:be:a5:
                    7d:e6:cc:44:09:12:5b:3f:07:0c:22:03:23:f9:4f:
                    e3:f4:80:bd:4d:2f:9f:f6:90:18:7e:c4:f3:1c:0e:
                    f0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C7:73:D6:5B:AB:10:BE:AA:07:E7:76:25:38:CD:84:0F:E0:30:81
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A57CAFAD76711F0A72B31E3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:ec:ea:04:d3:54:e7:ef:24:66:6b:86:be:6f:42:b4:f6:b5:
         24:c0:39:15:76:c8:bd:22:6f:08:33:84:74:6b:18:73:12:5d:
         65:c6:4f:4a:a0:c2:b9:15:34:15:94:8a:43:2c:89:55:7e:66:
         95:49:76:f9:c4:af:87:ce:ec:ed:4b:63:d2:a6:32:9d:84:28:
         06:01:94:12:ee:df:41:27:5a:9d:b7:7a:6e:42:3d:b6:65:7c:
         eb:a0:1d:e7:25:d6:22:c0:bf:be:8b:9a:8d:27:26:6e:81:d1:
         fd:02:1e:10:e9:35:e3:52:a5:f5:b9:46:bf:a4:9e:97:c4:13:
         89:5e:9c:28:c5:fb:27:61:c3:bd:51:81:72:e4:e6:b5:5d:76:
         25:20:9e:61:15:d6:70:83:46:6a:07:67:a5:cc:56:81:da:09:
         22:3a:76:f9:d5:61:de:f6:ad:22:6e:9e:b6:2b:29:95:b2:27:
         79:fc:37:45:4c:31:5c:6a:72:81:7f:ad:e7:d6:06:89:86:9b:
         11:f9:07:cb:c2:5d:94:11:e6:0a:f6:fc:48:7f:35:f7:67:45:
         25:74:d0:00:a3:13:e0:25:b1:fa:8f:7a:9d:06:52:42:2b:f0:
         c3:b9:ae:0e:c6:46:cd:e6:1a:c7:d0:4d:5c:76:33:ff:f5:72:
         4c:d8:64:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:34:03 2025 by rpki-client