This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B5B9292D65F11F099756979DAE4EC9C.roa
File:                     6B5B9292D65F11F099756979DAE4EC9C.roa (raw, json)
Hash identifier:          HY58Naq5CVTMY4DjDZ4Uj02UiZ6PBYK/t3Cfd/8H5zs=
Subject key identifier:   69:87:A2:7F:20:A0:C1:0E:4C:E9:B2:B8:D3:1B:89:17:C1:7B:4B:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018DBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B5B9292D65F11F099756979DAE4EC9C.roa
Signing time:             Thu 11 Dec 2025 07:02:56 +0000
ROA not before:           Thu 11 Dec 2025 07:02:50 +0000
ROA not after:            Thu 22 Jan 2026 07:02:50 +0000
asID:                     141718
IP address blocks:        156.225.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101820 (0x18dbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 11 07:02:50 2025 GMT
            Not After : Jan 22 07:02:50 2026 GMT
        Subject: CN=693a6ca0-2e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:5b:3f:5e:c3:ed:1c:7f:3e:1c:6b:0b:5c:
                    9b:96:e2:0a:14:bd:5e:74:1b:52:1c:ad:aa:f0:59:
                    d4:9e:71:fb:0f:bc:24:6f:1c:5e:04:67:d7:33:a9:
                    f8:c2:0b:61:17:d0:a4:fb:6f:6f:1c:a2:71:25:e0:
                    27:5b:da:5f:9e:44:20:0b:03:e5:56:5c:72:ed:e0:
                    bf:0a:84:95:d1:a3:28:a4:d6:c4:10:ce:93:e7:61:
                    3a:cc:30:86:7f:01:b1:f0:3b:a0:bb:b9:3c:2a:cc:
                    0c:3f:ec:76:43:2f:f1:35:8f:16:3d:3b:d9:bb:28:
                    0b:58:16:03:91:59:7c:cc:e1:2b:0e:8c:0a:a7:39:
                    39:63:02:3e:d0:86:f7:db:62:40:87:b1:5a:5f:a9:
                    a0:83:6d:b1:92:1f:ee:80:c4:2a:17:d6:e9:fe:33:
                    8d:c4:d6:ea:20:19:64:a2:6d:8a:9b:16:ce:29:fa:
                    3e:3c:e4:3b:64:b2:c5:ac:58:c2:87:e4:3d:1f:48:
                    4d:c0:ff:e9:c2:81:bd:ab:0d:06:72:16:b5:59:d5:
                    9d:de:e7:92:a5:ca:c8:d0:9b:e7:14:d5:c4:2a:3f:
                    0e:5c:5c:37:e8:86:44:56:31:93:fe:7f:29:b2:c5:
                    90:9e:f8:0c:f4:5b:b6:05:23:1e:b1:7c:36:66:11:
                    6f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:87:A2:7F:20:A0:C1:0E:4C:E9:B2:B8:D3:1B:89:17:C1:7B:4B:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B5B9292D65F11F099756979DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:38:b1:a3:84:18:38:75:93:5a:54:3c:36:a5:d4:79:8a:fa:
         cd:e0:1f:0d:fd:cb:2f:87:32:68:ec:59:99:0d:a1:c6:46:cd:
         29:41:d6:be:86:78:ed:be:05:00:7f:1d:89:39:24:4f:f9:5f:
         8e:16:b6:53:34:f2:d7:86:10:21:f6:0e:eb:fe:33:c4:f7:fe:
         6c:54:75:7b:08:7f:23:d9:80:58:24:12:a5:d8:a7:2d:91:10:
         b3:80:68:be:f0:2b:81:71:22:a3:64:67:89:2d:29:db:7e:f8:
         61:4a:cc:d8:3a:58:fa:02:19:5d:2b:69:48:a8:0b:27:9b:53:
         e9:cc:08:22:b0:56:e8:7b:af:51:6d:d2:46:b4:d9:88:76:e3:
         6e:7d:b9:a9:20:94:84:16:46:21:5f:d1:e4:50:3d:7c:6b:39:
         92:fa:37:69:7e:46:2f:ab:6b:08:b2:c9:e2:69:fb:2d:fd:b2:
         d3:93:67:0b:0a:e6:32:c4:2b:04:f2:f9:91:ec:7d:1f:e2:f8:
         e9:69:2c:9b:8f:6d:03:34:a3:a9:1d:9b:3e:7c:f1:af:76:53:
         50:08:5c:05:92:3e:99:95:aa:83:97:4c:56:db:4f:a9:33:af:
         2e:a0:a5:7d:24:74:9b:4e:bb:ae:01:39:04:09:02:bd:6b:e1:
         c6:0f:6f:3a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAY28MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjExMDcwMjUwWhcNMjYwMTIyMDcwMjUwWjAYMRYw
FAYDVQQDEw02OTNhNmNhMC0yZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAl+NbP17D7Rx/PhxrC1ybluIKFL1edBtSHK2q8FnUnnH7D7wkbxxeBGfX
M6n4wgthF9Ck+29vHKJxJeAnW9pfnkQgCwPlVlxy7eC/CoSV0aMopNbEEM6T52E6
zDCGfwGx8Dugu7k8KswMP+x2Qy/xNY8WPTvZuygLWBYDkVl8zOErDowKpzk5YwI+
0Ib322JAh7FaX6mgg22xkh/ugMQqF9bp/jONxNbqIBlkom2KmxbOKfo+POQ7ZLLF
rFjCh+Q9H0hNwP/pwoG9qw0Gcha1WdWd3ueSpcrI0JvnFNXEKj8OXFw36IZEVjGT
/n8pssWQnvgM9Fu2BSMesXw2ZhFvVwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGmH
on8goMEOTOmyuNMbiRfBe0viMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QjVCOTI5MkQ2NUYxMUYwOTk3NTY5NzlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOFEMA0GCSqGSIb3DQEBCwUA
A4IBAQC4OLGjhBg4dZNaVDw2pdR5ivrN4B8N/csvhzJo7FmZDaHGRs0pQda+hnjt
vgUAfx2JOSRP+V+OFrZTNPLXhhAh9g7r/jPE9/5sVHV7CH8j2YBYJBKl2KctkRCz
gGi+8CuBcSKjZGeJLSnbfvhhSszYOlj6AhldK2lIqAsnm1PpzAgisFboe69RbdJG
tNmIduNufbmpIJSEFkYhX9HkUD18azmS+jdpfkYvq2sIssniafst/bLTk2cLCuYy
xCsE8vmR7H0f4vjpaSybj20DNKOpHZs+fPGvdlNQCFwFkj6ZlaqDl0xW20+pM68u
oKV9JHSbTruuATkECQK9a+HGD286
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:33:46 2025 by rpki-client