This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/575E24DCE0FD11F0AAFDB288DAE4EC9C.roa
File:                     575E24DCE0FD11F0AAFDB288DAE4EC9C.roa (raw, json)
Hash identifier:          2v7iV+y4Hvf+W8hWFqM5ET+lxBdbCQ6hGsVIIkW3RS4=
Subject key identifier:   C7:AE:38:F7:20:29:8D:FC:11:24:76:45:8A:B5:F7:58:68:5A:32:3A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0191EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/575E24DCE0FD11F0AAFDB288DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 19:18:35 +0000
ROA not before:           Wed 24 Dec 2025 19:18:30 +0000
ROA not after:            Mon 09 Feb 2026 19:18:30 +0000
asID:                     401783
IP address blocks:        156.254.116.0/24 maxlen: 24
                          156.254.117.0/24 maxlen: 24
                          156.254.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102892 (0x191ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 19:18:30 2025 GMT
            Not After : Feb  9 19:18:30 2026 GMT
        Subject: CN=694c3c8b-fbe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:57:07:0d:9d:2e:4e:91:a3:3d:af:7e:ba:
                    d0:c7:41:f6:3a:3b:99:12:47:75:8e:4b:c3:30:61:
                    39:19:33:3e:9b:7e:05:82:df:bd:ce:2a:bd:f8:14:
                    7d:d7:cd:29:07:7b:ae:21:1e:4a:34:88:76:0c:85:
                    3f:54:a8:a8:23:8e:aa:a6:f2:4c:f2:4e:9e:df:20:
                    eb:72:14:ff:c6:ec:3b:d2:69:50:30:a9:06:9d:45:
                    12:45:00:6b:27:97:b0:6f:3e:ef:6d:b5:be:21:1e:
                    d4:5d:c2:90:5a:ba:db:e7:bd:72:63:b0:15:27:24:
                    61:84:94:85:9c:8b:a1:6f:94:88:1d:d9:48:85:10:
                    d4:cb:ad:92:97:2d:4a:77:be:04:cf:3e:e6:b0:26:
                    e8:c6:39:55:3b:fd:b5:fe:b9:d6:ed:92:8c:3f:a8:
                    6e:d1:b3:45:64:d8:20:51:77:ec:a1:0c:7b:a6:3a:
                    b4:e6:6b:cf:4a:65:d3:b5:4e:b5:90:8b:ac:08:ee:
                    91:75:2d:71:2a:c6:be:c4:06:ba:85:3b:f4:8e:68:
                    79:27:e7:41:07:b2:3f:af:a8:5f:ba:dc:dc:a1:9a:
                    36:22:11:8f:7c:73:08:6a:39:88:4e:06:6b:ce:38:
                    ca:2d:b9:be:9f:53:04:68:5a:46:fa:8f:3e:6c:f9:
                    ae:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AE:38:F7:20:29:8D:FC:11:24:76:45:8A:B5:F7:58:68:5A:32:3A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/575E24DCE0FD11F0AAFDB288DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:c3:b0:41:9b:c8:08:bb:48:ab:22:03:34:a1:1e:c7:4c:38:
         97:3e:ad:8a:04:19:e4:f3:9e:33:c6:1b:1a:67:7e:97:c8:b6:
         cc:ed:1a:c6:e0:65:a6:b3:56:a1:20:2e:8c:73:87:98:b9:95:
         5d:92:0c:0c:bb:1f:3c:d4:4e:bb:7b:f3:2a:09:76:b5:3b:c6:
         32:b4:4b:c5:0b:06:8a:c9:24:f5:8e:af:48:b3:aa:ae:46:54:
         9b:f1:5b:f3:3a:58:1e:d2:0a:bc:c2:cb:fb:a3:a2:4a:ff:0a:
         2d:0c:c5:c1:f6:52:b3:b2:cd:ce:9e:79:ba:b6:26:cc:a1:72:
         f5:a3:a8:eb:7a:4a:af:20:ca:af:14:91:1e:aa:30:4f:44:4f:
         7d:6b:09:84:23:02:d5:1d:07:b8:a6:f5:22:6d:5c:4a:2b:bf:
         52:cf:9b:68:a9:01:8a:bc:85:82:b5:be:f5:f6:c9:3e:34:6f:
         15:27:a7:b1:92:9f:b0:1d:16:8d:cb:b5:04:c3:5f:ff:d1:a5:
         56:79:ce:a6:70:47:c3:b2:49:0e:5a:43:85:72:98:16:cf:4f:
         cf:8f:6f:90:69:74:c9:ab:f9:5d:dc:64:8f:00:73:24:be:aa:
         1b:1d:71:10:7f:4a:0b:22:0c:e4:0b:66:75:16:31:0e:b3:61:
         0e:29:43:53
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZHsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjI0MTkxODMwWhcNMjYwMjA5MTkxODMwWjAYMRYw
FAYDVQQDEw02OTRjM2M4Yi1mYmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAslVXBw2dLk6Roz2vfrrQx0H2OjuZEkd1jkvDMGE5GTM+m34Fgt+9ziq9
+BR9180pB3uuIR5KNIh2DIU/VKioI46qpvJM8k6e3yDrchT/xuw70mlQMKkGnUUS
RQBrJ5ewbz7vbbW+IR7UXcKQWrrb571yY7AVJyRhhJSFnIuhb5SIHdlIhRDUy62S
ly1Kd74Ezz7msCboxjlVO/21/rnW7ZKMP6hu0bNFZNggUXfsoQx7pjq05mvPSmXT
tU61kIusCO6RdS1xKsa+xAa6hTv0jmh5J+dBB7I/r6hfutzcoZo2IhGPfHMIajmI
TgZrzjjKLbm+n1MEaFpG+o8+bPmuEQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMeu
OPcgKY38ESR2RYq191hoWjI6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NzVFMjREQ0UwRkQxMUYwQUFGREIyODhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnP50MA0GCSqGSIb3DQEBCwUA
A4IBAQClw7BBm8gIu0irIgM0oR7HTDiXPq2KBBnk854zxhsaZ36XyLbM7RrG4GWm
s1ahIC6Mc4eYuZVdkgwMux881E67e/MqCXa1O8YytEvFCwaKyST1jq9Is6quRlSb
8VvzOlge0gq8wsv7o6JK/wotDMXB9lKzss3Onnm6tibMoXL1o6jrekqvIMqvFJEe
qjBPRE99awmEIwLVHQe4pvUibVxKK79Sz5toqQGKvIWCtb719sk+NG8VJ6exkp+w
HRaNy7UEw1//0aVWec6mcEfDskkOWkOFcpgWz0/Pj2+QaXTJq/ld3GSPAHMkvqob
HXEQf0oLIgzkC2Z1FjEOs2EOKUNT
-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:02 2025 by rpki-client