This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ECA4506DBEA11F0B72584B8DAE4EC9C.roa
File:                     5ECA4506DBEA11F0B72584B8DAE4EC9C.roa (raw, json)
Hash identifier:          BjljpfsuT8x/SbelZwu16NhNah66fA+2S7sTqTmnjhc=
Subject key identifier:   C2:31:E3:B1:88:5A:7D:0A:67:25:98:61:A1:FC:05:A2:80:69:2E:4D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018FD7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ECA4506DBEA11F0B72584B8DAE4EC9C.roa
Signing time:             Thu 18 Dec 2025 08:20:11 +0000
ROA not before:           Thu 18 Dec 2025 08:20:06 +0000
ROA not after:            Sat 24 Jan 2026 08:20:06 +0000
asID:                     214413
IP address blocks:        156.229.56.0/22 maxlen: 24
                          156.233.216.0/22 maxlen: 24
                          156.239.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102359 (0x18fd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 18 08:20:06 2025 GMT
            Not After : Jan 24 08:20:06 2026 GMT
        Subject: CN=6943b93b-86ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f9:c4:10:6f:cf:2c:d4:cf:76:80:32:d2:e7:
                    a4:1f:3e:98:b5:95:22:48:89:5d:7d:03:10:5b:a6:
                    33:f5:40:e6:db:84:b7:67:7d:7e:9a:a7:ba:fe:2b:
                    e2:b5:c8:12:64:02:75:3a:a5:4e:3b:3b:70:99:1c:
                    3c:05:d1:86:15:5d:30:c7:75:65:f0:fb:6c:62:6f:
                    13:23:f6:44:ac:41:57:55:f6:86:c5:4e:db:56:68:
                    78:b9:19:bc:07:71:a6:05:c4:7d:74:a3:4b:02:0c:
                    63:9e:23:df:ad:33:1d:76:65:51:75:e0:33:ae:3e:
                    fb:d9:82:1c:a6:ce:de:69:89:4d:8e:0c:6d:42:c5:
                    08:01:52:c9:3d:b7:14:a2:94:fe:a7:45:b0:ae:3d:
                    0d:63:47:0c:fb:de:de:1a:c7:88:40:2b:15:fb:f4:
                    5d:da:02:86:9a:27:12:07:46:41:17:a3:b2:da:03:
                    a0:72:f4:ef:76:bb:86:65:1b:d8:c9:be:1b:66:a2:
                    0b:2c:f6:62:19:ba:f3:02:fa:95:42:ba:ff:e1:30:
                    f9:b2:94:d8:be:4a:7f:5f:30:60:3b:23:58:98:87:
                    0c:d4:d3:fd:94:a7:de:78:ce:48:fe:26:27:98:d3:
                    da:a9:70:19:09:87:08:42:ca:35:cf:7a:b5:80:e4:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:31:E3:B1:88:5A:7D:0A:67:25:98:61:A1:FC:05:A2:80:69:2E:4D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5ECA4506DBEA11F0B72584B8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.56.0/22
                  156.233.216.0/22
                  156.239.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:dd:c0:1b:0f:9f:14:e2:df:e7:b6:20:f3:48:b8:01:bd:b9:
         be:4e:f4:17:4c:91:69:e6:62:e0:ea:2f:0e:24:3b:bf:d0:82:
         52:b3:b5:89:9e:b0:4f:08:31:25:6b:2c:e3:21:a4:e0:a3:8a:
         9a:3a:aa:1e:7f:12:03:0e:53:3f:d5:38:7e:a3:7f:3c:2d:82:
         9d:73:ae:56:ee:ed:0b:32:3c:48:a5:cf:62:65:03:c3:5a:79:
         73:16:67:62:58:b0:5c:ed:22:54:5f:2f:6d:c8:8d:8d:96:8c:
         bd:33:87:7f:ba:92:60:e0:27:d7:f5:5e:33:ad:3a:8f:ad:56:
         eb:87:a0:82:ca:5a:89:ae:67:e6:24:3b:b9:46:7b:58:f7:7a:
         98:93:76:03:02:db:4e:6c:e7:f8:d6:50:11:6d:ba:7c:b2:f0:
         d1:37:70:51:f2:96:08:ee:4a:45:0f:05:ef:78:47:0c:61:2a:
         d5:ad:76:85:03:a4:52:61:a5:15:ac:1e:b3:87:b3:ed:fa:82:
         86:96:5b:c2:15:2a:38:f1:ad:89:9e:e7:15:29:45:0c:b7:f8:
         b1:3d:a6:49:17:db:f3:07:f6:7f:5b:48:84:4b:8f:d0:94:00:
         1f:33:5c:28:46:59:3b:8b:9e:c6:04:94:d2:e2:5d:b3:5a:e9:
         c2:fb:d9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:33:58 2025 by rpki-client