This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AEB353ADB4811F0894583BDDAE4EC9C.roa
File:                     7AEB353ADB4811F0894583BDDAE4EC9C.roa (raw, json)
Hash identifier:          f411Ty02QeGUCIvhycMZebwWfJC9Sz+tmcehO2ovEzE=
Subject key identifier:   99:EC:F3:61:50:34:CC:20:C1:3E:C3:20:F2:6D:E2:24:DA:07:E7:8E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018F6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AEB353ADB4811F0894583BDDAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 13:01:20 +0000
ROA not before:           Wed 17 Dec 2025 13:01:15 +0000
ROA not after:            Mon 22 Dec 2025 13:01:15 +0000
asID:                     61461
IP address blocks:        156.247.128.0/17 maxlen: 24
                          156.255.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102254 (0x18f6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 13:01:15 2025 GMT
            Not After : Dec 22 13:01:15 2025 GMT
        Subject: CN=6942a9a0-7024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:26:85:30:97:2d:0a:e9:13:d9:aa:17:38:
                    cf:85:28:73:2f:b9:71:0e:3a:32:9d:5d:c4:b3:49:
                    3c:68:a7:32:2b:6d:34:a0:e0:ea:14:b6:8d:5b:43:
                    73:e5:19:ca:45:9d:29:80:74:f2:8b:b7:f7:a1:7d:
                    0d:1a:a4:03:50:e3:69:6b:66:f6:8a:12:eb:9f:f4:
                    25:f3:97:9f:96:0f:3b:9e:72:a4:04:61:a3:9b:88:
                    d1:7f:da:34:17:70:1e:71:0b:db:89:f6:a6:68:2d:
                    70:d5:14:3f:e3:13:3f:a7:b4:20:28:6e:3d:99:dd:
                    b1:0d:e2:57:f9:9d:a1:01:c8:83:51:91:b3:db:9b:
                    5a:db:9b:5c:ba:3e:17:75:77:00:9b:91:0a:f9:05:
                    b2:10:6a:60:a5:64:31:dc:52:76:e2:41:93:b6:d8:
                    1d:16:c5:c7:e4:d9:ab:d1:4a:c2:39:1e:e5:3c:d7:
                    48:02:d6:02:29:37:2a:4b:77:65:2d:bc:ef:7a:ce:
                    47:40:88:e9:ed:92:05:b7:23:8f:08:af:84:aa:0e:
                    36:3f:ae:d2:d0:69:39:8e:bc:59:ba:7e:e2:e3:f2:
                    fb:2c:cc:3d:00:d3:29:fa:ad:eb:47:92:c1:5b:96:
                    45:be:92:b3:05:b1:42:bd:e8:99:09:ab:7a:3b:bd:
                    f4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EC:F3:61:50:34:CC:20:C1:3E:C3:20:F2:6D:E2:24:DA:07:E7:8E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AEB353ADB4811F0894583BDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.128.0/17
                  156.255.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         13:68:af:cf:b7:8e:b5:fd:b0:9f:cd:4c:2c:aa:81:33:97:a2:
         67:ff:d7:ca:2d:e4:fe:7f:ea:6e:0a:9e:c9:31:a8:8a:78:83:
         26:df:b0:ea:36:da:94:df:c6:a6:91:91:69:18:1c:11:bb:db:
         90:91:19:2f:5b:38:5b:b1:be:27:8d:21:22:cd:d9:f4:b1:60:
         cc:ec:b5:25:e8:d0:ca:28:dc:e2:e3:5f:6c:cd:a7:56:2c:f3:
         56:be:1a:ab:c1:4b:fe:1f:cf:62:02:f9:e6:18:be:82:17:9e:
         91:14:8f:51:43:2d:78:6d:f6:bf:8a:bb:d9:f9:40:39:75:18:
         b6:21:40:49:93:78:b9:c5:e5:e6:d7:3b:93:bb:16:37:72:09:
         f6:59:5f:30:45:de:e6:0d:d6:d5:74:86:8c:cb:b3:a4:f2:df:
         75:21:2c:cd:5a:ab:b7:a9:6b:51:d6:0e:2c:f1:27:ee:e1:4b:
         85:d7:65:ea:0d:33:70:87:49:f7:04:0a:20:b2:7a:37:df:1d:
         68:ff:19:c5:19:35:f0:51:2e:13:68:b7:6b:39:e6:be:3d:56:
         1d:2f:71:26:56:e6:f5:21:1e:67:9c:34:2c:04:dc:55:d4:b5:
         e9:66:9d:4a:16:7d:a7:09:ad:8f:a8:dd:ec:3f:2a:0c:db:cf:
         34:82:0d:6b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAY9uMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjE3MTMwMTE1WhcNMjUxMjIyMTMwMTE1WjAYMRYw
FAYDVQQDEw02OTQyYTlhMC03MDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArFMmhTCXLQrpE9mqFzjPhShzL7lxDjoynV3Es0k8aKcyK200oODqFLaN
W0Nz5RnKRZ0pgHTyi7f3oX0NGqQDUONpa2b2ihLrn/Ql85eflg87nnKkBGGjm4jR
f9o0F3AecQvbifamaC1w1RQ/4xM/p7QgKG49md2xDeJX+Z2hAciDUZGz25ta25tc
uj4XdXcAm5EK+QWyEGpgpWQx3FJ24kGTttgdFsXH5Nmr0UrCOR7lPNdIAtYCKTcq
S3dlLbzves5HQIjp7ZIFtyOPCK+Eqg42P67S0Gk5jrxZun7i4/L7LMw9ANMp+q3r
R5LBW5ZFvpKzBbFCveiZCat6O730UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJns
82FQNMwgwT7DIPJt4iTaB+eOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83QUVCMzUzQURCNDgxMUYwODk0NTgzQkREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnPeAAwQHnP+AMA0GCSqGSIb3
DQEBCwUAA4IBAQATaK/Pt461/bCfzUwsqoEzl6Jn/9fKLeT+f+puCp7JMaiKeIMm
37DqNtqU38amkZFpGBwRu9uQkRkvWzhbsb4njSEizdn0sWDM7LUl6NDKKNzi419s
zadWLPNWvhqrwUv+H89iAvnmGL6CF56RFI9RQy14bfa/irvZ+UA5dRi2IUBJk3i5
xeXm1zuTuxY3cgn2WV8wRd7mDdbVdIaMy7Ok8t91ISzNWqu3qWtR1g4s8Sfu4UuF
12XqDTNwh0n3BAogsno33x1o/xnFGTXwUS4TaLdrOea+PVYdL3EmVub1IR5nnDQs
BNxV1LXpZp1KFn2nCa2PqN3sPyoM2880gg1r
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:19 2025 by rpki-client