This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/504B835CE55C11F08FFE41DDDAE4EC9C.roa
File:                     504B835CE55C11F08FFE41DDDAE4EC9C.roa (raw, json)
Hash identifier:          X5ae92+ZCi4CxvAqwbmOIdp6M8ySOqhiFpnyMaLp1bI=
Subject key identifier:   0B:B0:00:E3:CE:0C:61:DB:7D:B1:63:C3:70:62:BD:26:34:60:D2:A7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0192ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/504B835CE55C11F08FFE41DDDAE4EC9C.roa
Signing time:             Tue 30 Dec 2025 08:48:30 +0000
ROA not before:           Tue 30 Dec 2025 08:48:25 +0000
ROA not after:            Fri 06 Feb 2026 08:48:25 +0000
asID:                     25198
IP address blocks:        156.252.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103149 (0x192ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 30 08:48:25 2025 GMT
            Not After : Feb  6 08:48:25 2026 GMT
        Subject: CN=695391de-dc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2d:94:f9:fe:83:2d:f2:a8:c8:65:9e:89:68:
                    57:eb:13:e3:58:b2:04:43:b6:cb:b6:1d:b4:4a:e2:
                    98:92:da:6d:83:56:b2:82:f4:f0:73:2a:df:0a:77:
                    b2:8e:1c:5f:b4:ec:82:e2:6d:c0:61:4f:49:40:7d:
                    6a:16:a9:fa:f1:bb:d3:67:22:99:5d:d4:b3:b8:68:
                    15:71:8d:ef:5e:e5:1a:d3:5c:b8:0e:b3:af:75:fd:
                    94:1d:cf:94:99:29:2c:d4:36:31:91:e8:3b:16:91:
                    32:77:f6:af:02:8d:da:2c:fd:69:b6:3e:c5:62:80:
                    6c:d9:97:7c:31:37:9d:38:1c:13:c1:84:44:e4:e1:
                    ef:fb:5f:38:3c:e7:4f:22:68:a6:70:e1:fa:da:66:
                    e9:85:3e:0e:71:67:36:5f:5d:36:71:75:bf:90:73:
                    e8:8d:ea:04:d3:2a:8b:61:e3:c1:80:22:56:42:55:
                    36:0d:2a:7e:8e:b9:67:5c:6b:ee:cf:56:9c:b3:54:
                    4d:a7:f7:7a:25:b1:37:4a:09:ba:a2:47:14:03:dd:
                    6e:69:02:36:43:4f:6d:94:e0:3d:ea:0f:60:1d:bf:
                    7a:b3:87:be:67:69:c4:97:c9:58:99:d6:24:7c:72:
                    f8:7f:6f:42:c8:a0:c3:ea:45:f4:3a:8b:34:87:9a:
                    8c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B0:00:E3:CE:0C:61:DB:7D:B1:63:C3:70:62:BD:26:34:60:D2:A7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/504B835CE55C11F08FFE41DDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:51:b5:dd:42:45:b8:d8:12:26:d9:03:4e:30:16:3d:5e:3d:
         f3:c1:ba:d0:15:83:a1:84:46:b0:c4:db:55:c4:84:98:f8:fd:
         49:18:da:81:1f:6a:8e:ba:9f:53:f2:43:7a:f0:60:48:f0:a5:
         53:d9:2c:82:a6:28:c6:20:00:05:ca:59:86:86:9e:3a:d5:3b:
         90:0a:2c:ba:4a:d2:36:8c:21:58:79:c2:02:68:94:5c:4a:cb:
         1a:78:f8:0c:bf:57:21:90:85:8b:b4:6a:1f:da:38:01:c3:0f:
         8e:9a:a6:e0:85:4b:9a:e9:26:61:fd:20:10:07:e4:40:2f:fe:
         da:bc:bd:c9:2e:dc:86:95:b8:bc:cd:02:a8:73:7f:3c:52:6e:
         82:b8:fb:3d:3a:18:99:79:4a:2a:57:c6:c9:2d:07:aa:19:dd:
         0b:1f:ae:6d:c2:1b:23:79:6e:ac:28:fd:69:89:60:4f:7d:61:
         b8:5f:49:2d:ab:9b:88:00:5e:d0:89:15:f6:1d:ec:a5:73:69:
         56:dc:a9:6c:ff:8b:69:fa:6a:64:42:5a:d3:0e:b2:2b:c0:dd:
         b0:5f:e4:96:5f:37:0b:4b:a2:15:a6:9d:2e:5c:c0:e9:73:86:
         a5:3f:c1:89:75:3b:e1:c6:9c:66:5e:36:00:f5:a0:15:19:31:
         e1:d2:5c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:42 2025 by rpki-client