This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E078DBCE01611F0B4F242DADAE4EC9C.roa
File:                     3E078DBCE01611F0B4F242DADAE4EC9C.roa (raw, json)
Hash identifier:          w0H2gPU64fYF2HQspCZ96i5bBA0vHXPE8giRi9uuEU0=
Subject key identifier:   F7:57:BA:A8:4E:E0:99:69:C0:17:D3:10:98:57:35:1A:24:2A:4D:12
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0190D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E078DBCE01611F0B4F242DADAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 15:44:19 +0000
ROA not before:           Tue 23 Dec 2025 15:44:14 +0000
ROA not after:            Thu 29 Jan 2026 15:44:14 +0000
asID:                     3257
IP address blocks:        156.225.15.0/24 maxlen: 24
                          156.228.7.0/24 maxlen: 24
                          156.228.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102611 (0x190d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 15:44:14 2025 GMT
            Not After : Jan 29 15:44:14 2026 GMT
        Subject: CN=694ab8d2-7cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:40:6c:1d:78:96:40:82:84:60:3e:12:05:
                    35:bf:35:9d:93:24:a1:e1:b6:1d:11:e1:b2:8a:bc:
                    ff:7f:fa:28:1b:b1:46:93:5b:f3:27:e1:ac:60:3f:
                    c0:e6:ca:99:18:3a:15:e8:94:3f:91:c2:e4:19:8e:
                    d5:08:86:91:f0:0e:d8:c3:81:08:d4:64:97:31:05:
                    f3:6e:9f:86:35:7f:d8:0e:fe:24:a7:45:46:e1:7f:
                    6d:32:0b:16:38:9b:56:5c:23:14:4f:d4:51:3c:1a:
                    05:37:29:b0:3f:8e:68:7a:58:0a:ca:0a:e7:43:0b:
                    c2:ba:91:35:c7:a5:64:89:81:14:ef:ae:e1:9b:58:
                    d5:e2:17:75:85:3a:0e:b3:58:da:93:8a:75:c2:9d:
                    19:fb:de:2d:1d:d4:08:d2:92:42:b1:f8:e3:e2:7a:
                    48:33:13:fa:d1:3f:3f:17:8f:f6:b2:a5:76:31:3b:
                    27:cc:32:60:db:d7:09:00:48:b2:ec:1e:6e:50:4f:
                    61:15:cd:1d:53:80:b9:62:b3:e4:4d:c7:1c:e8:97:
                    e2:02:f5:89:40:02:9c:51:ef:1c:3a:a4:07:a4:09:
                    2e:e2:97:d9:81:dc:91:c7:83:50:7b:39:24:b4:3d:
                    bc:dd:ad:14:93:7c:cf:68:f1:4f:31:39:10:4a:c4:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:57:BA:A8:4E:E0:99:69:C0:17:D3:10:98:57:35:1A:24:2A:4D:12
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E078DBCE01611F0B4F242DADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.15.0/24
                  156.228.7.0/24
                  156.228.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:01:9e:1d:04:88:4f:1e:5c:d4:f6:61:53:7d:89:b2:64:73:
         eb:b2:61:52:a3:f4:4f:9e:7f:2b:4b:5e:5a:6a:7c:6a:25:5f:
         82:ee:cf:e7:56:f7:8a:96:b0:7b:bf:db:aa:9d:14:5b:28:b2:
         13:f0:01:2a:95:b0:ac:7a:61:54:e1:40:b6:52:be:ec:57:25:
         97:94:3a:07:09:1e:34:5d:ec:0b:6e:b2:a6:12:a6:5a:30:f7:
         cc:fc:92:3a:92:39:13:1b:f6:48:2a:66:d2:9a:8c:83:a4:15:
         68:00:46:b7:26:2a:9c:94:b6:f6:4d:36:fd:47:22:f0:81:a7:
         99:1b:49:f4:18:78:64:f3:39:a8:5b:27:f9:98:8a:3a:d6:40:
         84:30:c5:0f:ab:29:23:ed:d7:74:99:4f:c5:39:02:33:e3:3f:
         37:32:1a:cd:d9:ae:91:dc:0b:c7:de:4d:05:b3:31:66:71:ba:
         e0:a9:d9:4e:ef:d2:8b:a6:2f:76:b7:61:20:0e:12:e4:30:44:
         a0:51:76:ad:83:75:85:5f:72:2f:a7:be:bf:79:6f:23:ee:d7:
         ed:fc:a4:37:06:91:bf:d2:74:a3:fc:f0:6a:52:39:1d:93:e7:
         10:f7:42:fc:5b:b3:e9:c6:d5:82:ae:b1:47:9b:70:9d:ef:85:
         46:f9:be:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:32 2025 by rpki-client