This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C319400D76911F0801CE5EFDAE4EC9C.roa
File:                     5C319400D76911F0801CE5EFDAE4EC9C.roa (raw, json)
Hash identifier:          JVl4b080jaQVFFDL6CLIhrQRkHDR1zTlTvPBmP3OvQI=
Subject key identifier:   38:D5:90:FC:12:CF:92:33:B5:7A:60:B6:FB:95:D7:A5:D3:D6:05:49
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018E10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C319400D76911F0801CE5EFDAE4EC9C.roa
Signing time:             Fri 12 Dec 2025 14:46:37 +0000
ROA not before:           Fri 12 Dec 2025 14:46:32 +0000
ROA not after:            Fri 13 Feb 2026 14:46:32 +0000
asID:                     149440
IP address blocks:        156.225.64.0/24 maxlen: 24
                          156.227.0.0/24 maxlen: 24
                          156.236.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101904 (0x18e10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 12 14:46:32 2025 GMT
            Not After : Feb 13 14:46:32 2026 GMT
        Subject: CN=693c2acd-b02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b9:11:66:82:cd:74:26:e0:9b:6b:a3:6d:b6:
                    f0:e0:9c:19:2f:2c:25:e7:c9:15:d2:9a:ab:b8:f6:
                    27:6b:aa:5c:31:f0:f5:8c:fd:64:08:5f:4b:c3:b1:
                    45:f5:50:1d:88:9f:8d:b8:10:73:60:6f:58:52:15:
                    a8:52:a4:dd:95:a9:8e:73:9f:63:18:ed:19:9a:68:
                    21:47:f0:b5:9f:af:ba:9b:3b:88:69:92:41:f9:23:
                    bf:ce:2e:b5:19:c0:38:0b:02:b4:39:00:38:e4:86:
                    0d:8e:cf:f3:98:67:c6:6c:fc:72:72:16:d8:ec:04:
                    68:9d:67:01:86:ec:e6:0e:fc:cb:d8:01:2a:a6:d3:
                    33:ad:d1:fd:77:fb:06:2f:3a:65:ef:78:2c:04:42:
                    f3:ae:22:79:14:d7:9b:d6:46:d7:6b:24:9a:ff:66:
                    21:d7:4f:d1:bb:24:ad:03:4b:76:1b:9c:6b:0b:4a:
                    d8:47:17:a4:a7:cd:9f:fe:1b:af:10:75:eb:72:be:
                    cc:8c:82:d2:03:94:55:88:9f:86:b3:7e:2c:95:b2:
                    bd:66:29:e9:00:b2:18:59:2e:71:d1:66:b1:05:a7:
                    0d:d2:a7:43:65:c6:08:e3:42:d9:f8:f2:f4:14:d3:
                    ee:e8:e1:2f:13:38:63:83:38:84:99:d0:e4:d4:cb:
                    de:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D5:90:FC:12:CF:92:33:B5:7A:60:B6:FB:95:D7:A5:D3:D6:05:49
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C319400D76911F0801CE5EFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.64.0/24
                  156.227.0.0/24
                  156.236.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d1:ba:31:9c:9b:c9:cb:ed:21:24:f2:a4:af:5d:5c:9e:7a:
         84:43:23:d1:fa:bf:28:bd:b0:c1:08:42:21:2c:9a:ea:f7:e3:
         a0:70:ae:82:50:19:0d:96:7f:79:89:64:4a:47:c1:d4:3a:54:
         3f:5f:f3:0b:21:76:d7:92:58:e5:18:bd:e8:64:9d:7b:88:a2:
         3a:29:e0:5b:ef:ef:2b:59:b8:89:13:e5:92:a5:ff:f2:61:b8:
         02:13:b5:b7:cb:d8:b4:33:0b:a5:b9:e4:bf:18:22:7c:33:4b:
         3b:3f:b5:da:67:6c:59:67:82:62:9c:ce:6c:b7:42:5c:44:a7:
         4e:0b:45:b1:58:ff:5c:f5:1b:f0:10:f6:6e:b1:dc:2f:63:6b:
         ce:95:80:bf:ce:4c:88:83:3c:f4:fe:08:d5:4e:07:72:43:d1:
         43:87:8a:2c:a4:93:4b:ec:3b:35:41:b8:99:29:74:df:4d:35:
         4d:31:a4:6b:61:ec:a4:22:ba:d5:c8:8d:3d:37:50:dd:81:20:
         63:46:93:2e:22:1c:12:1d:1e:e3:da:25:d7:36:af:d3:63:31:
         17:fa:29:a0:87:05:e8:74:42:6e:27:b4:ca:57:38:5b:12:3a:
         07:ed:dd:da:2e:be:ad:76:b3:7a:f3:70:4c:11:a1:a7:12:ca:
         72:b4:9d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:34:01 2025 by rpki-client