This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41D4BD2ED59511F0857BF882DAE4EC9C.roa
File:                     41D4BD2ED59511F0857BF882DAE4EC9C.roa (raw, json)
Hash identifier:          2bbmkgIRIDS3UK7N5iDdacCXdvPA24XY5tNYNac6JyA=
Subject key identifier:   E1:10:43:D7:20:C7:44:42:A3:9B:9E:38:AD:11:11:6C:79:73:41:3F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018D53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41D4BD2ED59511F0857BF882DAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 06:55:48 +0000
ROA not before:           Wed 10 Dec 2025 06:55:44 +0000
ROA not after:            Thu 08 Jan 2026 06:55:44 +0000
asID:                     134489
IP address blocks:        156.238.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101715 (0x18d53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 10 06:55:44 2025 GMT
            Not After : Jan  8 06:55:44 2026 GMT
        Subject: CN=69391974-5029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:8d:bb:4b:ea:73:89:ea:45:7d:36:ab:b6:
                    7a:36:f4:59:e8:55:b4:37:fa:3d:76:4f:67:df:30:
                    6a:b2:4e:0d:c4:81:4d:9b:21:71:2a:52:f2:5f:37:
                    2e:45:44:37:fb:0b:9e:9c:0e:cf:5b:f6:11:4d:6d:
                    5d:4c:41:1a:8f:12:ea:9d:fd:09:e7:c3:c5:c9:f5:
                    80:f5:db:26:51:20:22:b1:61:9a:59:28:4c:b6:89:
                    d0:cb:24:97:d8:b1:ed:fc:5a:fc:c1:83:26:24:13:
                    84:ee:24:01:d4:72:f5:95:9a:ed:13:35:7d:7d:25:
                    f9:94:71:1e:1f:3a:8e:43:2e:ad:ca:c6:e9:42:7f:
                    c1:71:6a:07:0b:a6:f4:0f:34:2d:17:b8:09:c6:38:
                    e7:f5:e3:3f:81:2a:c0:a5:df:d6:07:ba:ae:75:e3:
                    5a:88:fa:c7:e0:84:1f:13:c4:aa:f0:0e:a0:11:43:
                    0f:c4:96:56:7b:a9:9f:0c:79:86:11:4e:db:7b:46:
                    0f:6a:43:4b:24:2e:7a:0c:0b:e3:e0:ca:a0:68:e8:
                    a2:4f:d5:56:4e:2e:2b:0e:d2:93:21:d2:17:3d:b1:
                    00:73:d2:e1:db:8c:3b:40:65:b6:0f:5b:0d:35:e9:
                    be:eb:a7:c7:97:18:a4:76:7e:3f:f9:72:c6:ce:03:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:10:43:D7:20:C7:44:42:A3:9B:9E:38:AD:11:11:6C:79:73:41:3F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41D4BD2ED59511F0857BF882DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:de:a2:63:b8:47:36:a8:3a:92:5e:e9:68:60:e7:31:c3:c9:
         61:7d:38:cd:98:21:5f:0a:b1:27:63:70:80:56:9f:81:0a:b8:
         e4:51:1a:77:b4:33:20:af:07:74:16:d5:06:88:cd:f6:4d:de:
         be:85:49:15:59:e0:6f:70:30:63:8d:77:c5:b4:3a:62:ec:0c:
         c7:c3:26:4d:c8:27:d1:dd:b0:4e:f0:73:33:12:82:41:71:8b:
         d2:c1:0f:38:27:18:14:65:e2:b1:2f:35:da:81:53:c1:39:14:
         c0:98:21:39:8b:97:c8:3c:83:d6:c0:94:37:86:fe:f2:f8:f8:
         b4:ac:81:01:f6:f0:b6:20:e6:e3:12:7c:ac:d6:ab:46:2a:4f:
         17:1c:d2:7c:63:13:69:e5:30:b8:78:9a:8b:2a:50:91:d6:03:
         7e:f5:5f:53:88:dc:cf:db:9b:56:a1:f5:6b:49:62:7f:0f:03:
         57:ba:8e:77:bf:b7:25:9f:a9:fd:26:f8:d7:e8:0d:b9:7a:4a:
         6b:a3:b4:ff:c2:dc:b4:f7:17:5b:5e:30:dc:ef:a6:29:d2:a0:
         b1:06:db:95:9e:31:dc:70:1b:46:c5:1e:6c:57:96:56:d5:9a:
         4b:30:a1:60:71:73:5d:cd:07:d4:5b:8d:66:0e:7e:4e:10:5a:
         48:03:51:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:41:33 2025 by rpki-client