This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69835BAEE31011F09658B199DAE4EC9C.roa
File:                     69835BAEE31011F09658B199DAE4EC9C.roa (raw, json)
Hash identifier:          mdsJ4C/Ev7lEVPgRiNWWmIitLeDr4C7+cNsO+ePjfv8=
Subject key identifier:   70:3C:CA:E9:E0:2A:94:B3:43:59:52:DC:7F:9E:4B:68:2D:B3:28:1E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01925B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69835BAEE31011F09658B199DAE4EC9C.roa
Signing time:             Sat 27 Dec 2025 10:40:08 +0000
ROA not before:           Sat 27 Dec 2025 10:40:04 +0000
ROA not after:            Mon 02 Feb 2026 10:40:04 +0000
asID:                     23470
IP address blocks:        156.225.70.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103003 (0x1925b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 27 10:40:04 2025 GMT
            Not After : Feb  2 10:40:04 2026 GMT
        Subject: CN=694fb788-b54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:98:34:86:5a:82:2a:eb:9a:81:d3:78:47:
                    a1:8e:90:98:1d:0a:7a:44:6c:94:a6:a1:d4:15:af:
                    f9:3c:80:74:93:51:10:0d:11:0f:d2:bc:f6:fb:04:
                    49:b7:9f:de:73:9b:de:f9:1d:70:48:66:0d:24:f3:
                    e5:3d:b5:20:1f:43:d4:da:ef:b8:b1:28:11:de:71:
                    d3:d8:62:9f:48:12:81:b0:e8:90:15:e6:b5:0b:c4:
                    77:35:74:51:71:f3:36:49:dc:a4:15:cf:81:d0:d6:
                    ad:15:1a:da:53:a5:88:ec:14:bb:bb:75:7c:3d:e2:
                    3e:c7:31:8d:17:f4:32:1f:e6:91:96:6a:0a:ea:22:
                    41:c1:32:6c:42:60:67:48:1d:d2:9d:8b:89:6a:5d:
                    2a:e1:af:cd:f9:31:1a:b0:98:1c:b7:36:bd:85:c7:
                    fc:3d:6a:4d:27:92:55:e4:33:ee:1d:62:fe:4e:f7:
                    e2:e0:bc:0d:ff:e7:9b:25:02:1e:3b:6c:48:ba:99:
                    af:11:42:24:0b:aa:19:7e:27:99:6c:33:63:2d:24:
                    b2:91:df:fd:c1:f5:cc:f1:d5:6a:df:7b:86:b3:c4:
                    3e:fc:f9:5d:52:7c:3a:d1:19:fa:2b:4b:46:e7:52:
                    b6:5b:ed:31:a7:fa:0b:62:ac:bf:4d:be:24:21:86:
                    01:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3C:CA:E9:E0:2A:94:B3:43:59:52:DC:7F:9E:4B:68:2D:B3:28:1E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69835BAEE31011F09658B199DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:cf:c7:5d:c6:78:10:4f:ba:7a:10:75:ff:72:25:a0:4a:ba:
         63:6f:06:1f:dc:f6:96:da:4a:96:cb:d1:b9:33:f6:69:cf:e0:
         8f:50:34:44:3d:49:4f:e9:54:3b:72:49:30:64:2e:b3:c3:dc:
         c1:58:0f:44:9f:dc:7f:61:65:ca:c1:bc:bd:64:d8:24:82:3c:
         a1:93:47:44:d9:ff:5b:88:7d:51:db:bc:3c:67:0f:03:e8:a2:
         bb:63:4d:c0:d5:68:bc:c2:48:0b:27:3b:b1:b0:54:5e:cc:89:
         87:be:87:4c:ff:40:9b:13:fe:74:3e:44:ea:84:52:b6:a7:18:
         5c:ea:66:38:3e:d5:18:d3:58:6e:0d:6f:54:b0:01:0a:e9:e0:
         0a:41:c4:95:fa:18:1c:13:88:f8:12:ba:16:02:38:cc:d1:58:
         22:ff:8a:55:09:ee:81:31:5f:e6:c5:7f:5d:f2:ef:c6:40:13:
         8a:fe:5c:0e:78:41:05:2e:11:46:f7:55:33:37:fa:f7:28:5c:
         cf:2b:38:8d:b2:b3:b6:f6:33:85:4a:39:1a:86:f2:54:57:31:
         e1:5d:fa:6c:d3:27:55:20:ba:88:17:7b:8d:10:a1:38:cd:bf:
         97:b8:2b:89:c5:28:b4:be:40:47:7f:33:1e:6f:6c:39:97:02:
         29:94:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:33 2025 by rpki-client