This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59B86280D59811F0A44C4197DAE4EC9C.roa
File:                     59B86280D59811F0A44C4197DAE4EC9C.roa (raw, json)
Hash identifier:          FoK55SAm858cXJTQvfmyM9U1Q1SYcy++rZLVvdMtoHg=
Subject key identifier:   84:B2:FE:D3:3F:4E:16:69:BC:49:EC:33:F7:AF:66:F3:47:C1:54:0E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018D63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59B86280D59811F0A44C4197DAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 07:17:57 +0000
ROA not before:           Wed 10 Dec 2025 07:17:52 +0000
ROA not after:            Thu 08 Jan 2026 07:17:52 +0000
asID:                     198247
IP address blocks:        156.238.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101731 (0x18d63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 10 07:17:52 2025 GMT
            Not After : Jan  8 07:17:52 2026 GMT
        Subject: CN=69391ea5-eded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:0e:11:e4:09:9a:d2:9f:c9:69:71:a1:a8:
                    20:b2:1f:cc:34:72:f0:6e:d5:d7:7a:5b:b1:ee:3e:
                    be:8d:f1:f8:fe:20:90:cd:4a:07:33:43:db:10:b8:
                    30:76:18:63:60:58:76:6e:de:b1:4e:48:f6:f4:e7:
                    ff:dc:6c:44:ed:1a:01:4a:2e:70:0f:2c:3a:89:b6:
                    e2:fb:79:e3:8b:13:8e:83:5e:37:92:3b:f0:b3:8b:
                    2c:2b:c1:82:a5:47:0d:60:79:85:16:6a:2a:c3:00:
                    59:bf:47:12:03:f8:75:84:2d:37:5f:0c:26:36:76:
                    2d:f9:2b:7d:52:ba:3f:15:c2:dd:72:e5:6f:6d:40:
                    f2:85:ca:a4:7f:6c:a1:a3:29:7d:90:a2:f9:ed:24:
                    2b:b6:c5:1d:26:38:88:4c:d9:3a:f9:68:bf:ba:99:
                    be:6c:7c:09:71:85:2b:05:37:4b:c1:9f:90:66:2a:
                    57:1a:fc:0e:91:c4:16:24:98:d8:83:b8:14:d5:03:
                    de:7b:a2:1d:fa:28:9e:f1:08:11:5d:5f:ac:e4:d5:
                    17:0b:ac:a7:44:42:ab:e5:d2:3e:f3:3b:22:62:d2:
                    2b:9c:44:e5:21:14:b8:c8:41:d3:3a:38:34:44:7e:
                    2c:1e:85:b9:f4:d1:3e:08:aa:f4:18:4e:a1:40:d5:
                    d2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B2:FE:D3:3F:4E:16:69:BC:49:EC:33:F7:AF:66:F3:47:C1:54:0E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59B86280D59811F0A44C4197DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:ce:b8:d6:78:cb:f5:19:0b:ca:62:61:50:77:7b:ea:05:f8:
         fd:90:89:47:ec:87:a9:8d:a6:bf:58:9c:ec:29:6c:47:47:a7:
         08:78:cb:c7:be:03:56:c0:e9:e8:b0:6f:c1:10:51:85:24:5c:
         ae:86:54:35:a6:90:c1:85:c2:22:11:9f:8f:8f:4c:8a:25:2a:
         62:d3:cc:1d:55:0c:2e:2b:ab:6f:6c:ce:97:9d:af:a4:50:f9:
         22:6d:9d:72:ef:8f:b7:da:83:02:1f:54:16:b5:23:b1:7a:18:
         ba:91:53:76:c0:26:fb:bd:06:69:05:3f:5f:49:a2:dc:1d:ca:
         76:a9:f4:a2:0a:21:b4:39:cb:32:74:ca:ff:d6:78:8b:ee:4a:
         cc:67:43:e5:89:be:ea:47:22:31:9d:fd:c8:59:68:fb:8d:7e:
         90:3e:83:ee:8e:1c:be:47:1f:95:cb:15:a9:ea:eb:7c:b4:71:
         8d:35:56:82:01:9a:f0:96:80:9f:ad:ff:91:2a:ac:55:87:7e:
         2e:16:b4:ec:34:b3:78:c1:32:11:97:54:a6:5e:e7:fb:ca:68:
         d8:e7:dc:83:9b:93:e4:da:79:80:02:c4:75:63:ec:7c:d7:d1:
         ce:e8:f0:df:87:72:c1:5b:45:65:12:65:49:67:19:0d:f7:b6:
         3d:d0:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:10 2025 by rpki-client