This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40640056DF4211F0B6811FA9DAE4EC9C.roa
File:                     40640056DF4211F0B6811FA9DAE4EC9C.roa (raw, json)
Hash identifier:          7QJnyOuwm0OMcK5sdo2WC4BS8Pq0evRLgDVutJ2Npbw=
Subject key identifier:   C5:7C:0A:8E:E9:23:DC:FD:8A:D3:C8:AE:08:5D:F4:6F:F3:26:1D:FD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019077
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40640056DF4211F0B6811FA9DAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 14:26:49 +0000
ROA not before:           Mon 22 Dec 2025 14:26:44 +0000
ROA not after:            Wed 28 Jan 2026 14:26:44 +0000
asID:                     44559
IP address blocks:        156.246.161.0/24 maxlen: 24
                          156.246.163.0/24 maxlen: 24
                          156.246.164.0/24 maxlen: 24
                          156.246.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102519 (0x19077)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 22 14:26:44 2025 GMT
            Not After : Jan 28 14:26:44 2026 GMT
        Subject: CN=69495529-6ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:26:73:32:9f:32:19:f1:64:a1:4b:1c:3f:e5:
                    ce:15:e0:8d:e9:03:c7:57:c7:a9:23:68:37:7f:fb:
                    10:2d:4b:5c:ac:7c:7b:ac:71:5a:1a:40:c0:60:86:
                    af:1e:4c:9e:dd:a7:da:1f:d0:49:2e:61:e0:d5:69:
                    d4:ae:5a:87:5f:5b:c6:ff:ee:4c:a2:d2:50:a9:8a:
                    b6:f4:54:34:05:6c:e5:1c:fd:c5:a4:cd:bc:ba:91:
                    a0:ee:35:34:71:d0:e3:f3:69:e3:43:1c:62:85:a8:
                    6a:c4:cc:ef:82:8d:39:23:0c:7d:f6:32:4a:18:30:
                    a7:c7:62:10:d5:71:c2:2e:f8:e8:75:52:4b:f9:74:
                    b7:e5:74:2c:de:d2:37:97:9d:59:e7:c7:55:29:c1:
                    5f:19:4c:ca:d8:15:a8:a6:64:76:9e:ea:bd:04:5d:
                    9e:a6:75:0d:4a:4d:2d:d4:f8:4b:0d:0e:91:7d:6a:
                    ef:48:b5:76:63:ce:38:f2:be:de:b9:cf:ea:5c:97:
                    dc:40:5c:f2:bf:04:63:bb:bd:b0:0b:35:24:bc:9d:
                    4d:f8:18:76:8f:dd:37:0f:b0:de:ce:ff:11:73:49:
                    14:a4:e6:77:f0:5e:bf:73:3a:40:04:93:fe:3e:8b:
                    39:63:c9:09:35:1c:d8:62:01:a7:07:34:89:7e:85:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7C:0A:8E:E9:23:DC:FD:8A:D3:C8:AE:08:5D:F4:6F:F3:26:1D:FD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40640056DF4211F0B6811FA9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.161.0/24
                  156.246.163.0-156.246.164.255
                  156.246.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:68:8b:d9:cc:44:40:09:89:3d:1b:6e:ec:99:b8:d2:96:33:
         db:ad:2b:e7:e0:00:6f:5b:7e:36:a5:f2:13:af:34:68:e2:9c:
         98:f2:a5:1e:83:63:81:60:ae:58:ea:18:ef:cc:a4:fc:fc:cb:
         f4:21:de:79:e8:4f:02:24:3d:df:15:a2:7a:45:4a:ab:53:20:
         4a:66:84:ba:f8:d7:2b:af:47:90:74:35:32:6b:7b:af:6f:9b:
         ab:8a:4a:b9:bd:bd:4f:b4:2b:3c:71:38:48:df:8e:e3:a0:91:
         54:03:e5:d1:ea:ad:03:fd:16:35:5e:8b:ef:46:8b:ef:89:f2:
         cb:1c:a1:af:88:c2:61:39:82:4a:98:0c:76:5c:4b:20:63:13:
         89:4d:eb:68:33:e8:a1:ff:2f:42:27:8a:7f:4b:5e:92:b7:e1:
         de:4a:d5:d7:a5:0c:70:db:10:97:83:c4:ae:d0:56:78:b6:1c:
         74:ca:c2:f1:41:54:0c:b5:c5:28:e2:fb:bc:c7:1e:69:90:50:
         a4:f8:a6:dd:7d:2c:c5:27:f1:06:04:55:f6:e1:e8:c0:ce:a0:
         91:e6:1a:0f:df:86:12:b5:b2:20:9a:87:5e:90:0f:4f:9c:83:
         39:7a:19:f0:51:cd:c0:8c:e1:25:02:74:67:89:e6:73:5e:79:
         19:66:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:01 2025 by rpki-client