This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5260DBF0E01C11F08C6BFD80DAE4EC9C.roa
File:                     5260DBF0E01C11F08C6BFD80DAE4EC9C.roa (raw, json)
Hash identifier:          Wqdl2TcRW8MvNsWXSzWHEPgkBrQl7uJ6gJBJFFWtp4A=
Subject key identifier:   3E:D5:69:AD:33:AD:D5:B0:22:A9:87:67:89:83:B9:2E:EF:CB:D3:F4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0190DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5260DBF0E01C11F08C6BFD80DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 16:27:50 +0000
ROA not before:           Tue 23 Dec 2025 16:27:45 +0000
ROA not after:            Fri 30 Jan 2026 16:27:45 +0000
asID:                     401783
IP address blocks:        156.227.132.0/24 maxlen: 24
                          156.227.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102621 (0x190dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 16:27:45 2025 GMT
            Not After : Jan 30 16:27:45 2026 GMT
        Subject: CN=694ac306-018d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:f5:b0:db:54:d6:74:ed:a2:4a:ce:2a:e4:
                    a6:10:9a:7f:e0:08:b9:0c:15:32:8a:99:bb:97:bb:
                    e6:32:71:02:3c:46:43:cc:93:17:04:fb:94:a3:5d:
                    c8:da:37:be:24:b9:c8:b9:4c:f8:82:9f:02:28:59:
                    27:e6:39:a1:f9:00:d9:ad:04:3f:e1:c4:7c:3b:ec:
                    3a:1e:4d:73:f0:cd:98:c0:0a:86:39:7e:49:ee:a8:
                    ef:47:3f:65:ca:e1:86:a3:32:b6:75:31:3a:0d:2c:
                    aa:6a:3d:3a:70:e7:09:a8:2d:7d:e9:ee:5b:ea:9b:
                    8d:bf:a7:fb:a2:d2:91:17:81:67:48:bd:3c:56:e6:
                    93:00:6d:1a:da:92:a4:67:46:a3:52:f8:92:ed:60:
                    f8:b6:cb:a3:bc:8b:e0:5f:72:91:82:17:d5:3d:f8:
                    7c:c2:45:d7:64:b5:d9:e8:51:3e:fb:42:9c:7b:79:
                    58:ba:c8:a8:4f:68:a0:5b:c4:9d:96:1f:16:a6:e3:
                    02:f2:66:1d:0a:bd:85:2f:c1:35:14:48:34:27:7d:
                    77:3a:87:f2:b2:34:e3:26:ad:ec:3f:c4:7b:9d:b3:
                    ef:1f:ea:bf:e1:b8:d1:17:a0:54:aa:67:7e:e2:c0:
                    a3:12:ea:a9:d4:ed:34:8f:dc:be:79:34:36:de:0d:
                    4e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D5:69:AD:33:AD:D5:B0:22:A9:87:67:89:83:B9:2E:EF:CB:D3:F4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5260DBF0E01C11F08C6BFD80DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.132.0/24
                  156.227.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:e9:1d:b6:de:a8:17:cd:47:33:30:2e:a8:1c:e1:0e:91:67:
         07:77:82:4f:d8:2e:49:43:6f:53:ad:11:79:1f:61:8e:66:9c:
         9b:dc:b9:e6:c0:3d:66:f7:37:d6:d1:7c:00:a5:4a:ff:44:88:
         ef:db:03:45:24:f3:eb:c4:dd:86:d7:8a:ab:11:54:d0:ba:07:
         07:b1:81:1e:07:06:7d:61:dd:7d:fd:85:5b:7d:f9:44:f9:02:
         8a:41:a7:99:2d:27:3a:e7:18:c7:30:13:d8:e2:b2:8c:23:d7:
         4b:88:a7:6d:6a:17:a2:f9:aa:08:c5:42:e5:f9:6b:82:e3:bb:
         9d:96:15:f4:d8:64:7e:15:bf:68:59:6a:00:dd:5c:7c:45:70:
         6f:6a:34:ef:98:2f:60:c4:2d:b1:25:6e:b6:49:b0:31:fd:19:
         f3:fc:de:14:34:06:94:cf:43:a6:e1:16:85:d7:14:3d:36:74:
         e1:be:e5:af:b4:40:3a:1b:ef:b5:e6:b2:72:71:b1:a7:43:8b:
         32:66:71:97:db:e6:bd:d0:e1:e1:ca:b3:a3:5e:8a:16:29:31:
         f7:1e:5c:8c:39:47:7f:d3:c4:af:ec:8f:a1:dd:de:1a:b7:85:
         0a:2d:5a:c8:a1:b3:07:35:32:c6:23:96:c8:ea:14:bc:8c:3f:
         67:1e:d8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:03 2025 by rpki-client