This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86509F16E46511F0B69863E5DAE4EC9C.roa
File:                     86509F16E46511F0B69863E5DAE4EC9C.roa (raw, json)
Hash identifier:          T84lm7vBZ8fNPOwewAmCeM4cttLTvrD7OKRYUhfQ+1M=
Subject key identifier:   EC:0C:C3:A9:5D:C4:5A:2F:86:43:72:EE:C5:32:B3:B4:75:6C:E9:CA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01929E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86509F16E46511F0B69863E5DAE4EC9C.roa
Signing time:             Mon 29 Dec 2025 03:21:55 +0000
ROA not before:           Mon 29 Dec 2025 03:21:49 +0000
ROA not after:            Tue 13 Jan 2026 03:21:49 +0000
asID:                     62468
IP address blocks:        156.245.128.0/21 maxlen: 24
                          156.245.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103070 (0x1929e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 29 03:21:49 2025 GMT
            Not After : Jan 13 03:21:49 2026 GMT
        Subject: CN=6951f3d3-3fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f1:0d:12:81:c8:d7:b0:a0:c9:b2:40:b6:48:
                    04:f5:38:22:e9:ed:94:85:40:59:ef:f3:e1:5b:cb:
                    f8:b1:9a:81:1d:06:29:6b:df:4a:d5:7e:11:5f:51:
                    c5:68:8f:6b:c3:0f:8f:a2:a0:1d:25:2a:e9:3e:42:
                    51:73:00:cd:d4:64:a3:82:c4:e9:3d:aa:e5:95:93:
                    80:02:66:92:e6:b0:47:32:ca:ab:e7:f3:d7:61:c6:
                    19:49:20:9d:9c:7b:7c:09:50:3f:66:ed:b4:82:b3:
                    e0:36:18:c9:7c:fd:79:9a:39:c0:11:aa:64:e7:a8:
                    c9:10:02:41:2c:35:b4:bc:2a:d6:55:2a:f5:3a:aa:
                    55:9b:23:00:21:4f:6a:ed:00:12:fe:e1:89:2c:cd:
                    17:3e:65:00:e2:ba:49:59:ed:10:02:84:e2:3c:a2:
                    93:5b:c6:26:d3:39:f7:5d:3c:1b:72:d5:a5:91:b6:
                    db:a8:26:92:31:aa:ba:c2:3d:da:5a:9b:c7:59:92:
                    6c:b8:ac:9f:ac:01:09:b6:7e:3f:c8:b6:b4:87:83:
                    85:67:e3:c2:55:a8:d5:ff:3a:d0:e5:8d:c7:d5:32:
                    ca:42:c7:f8:81:09:02:c5:ce:ae:8b:ef:2c:d4:f9:
                    10:0a:1f:a2:2b:5a:2d:73:f8:bc:02:2d:9c:94:65:
                    f4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0C:C3:A9:5D:C4:5A:2F:86:43:72:EE:C5:32:B3:B4:75:6C:E9:CA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86509F16E46511F0B69863E5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.128.0/21
                  156.245.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:79:6d:cc:fc:d7:22:ed:13:d7:84:02:d5:06:70:25:69:03:
         52:41:34:39:7b:76:e4:33:40:00:4f:81:ba:34:b7:fc:6e:ae:
         2a:b6:9a:51:c0:28:b0:9f:a6:10:e6:72:b2:38:bb:b9:6c:30:
         44:d7:8c:4f:f2:0f:e4:bb:59:7b:e0:e7:3a:a9:1f:a5:6f:e4:
         58:40:3e:0b:63:6c:a0:bb:8b:6d:7e:ba:09:74:50:06:c6:e3:
         90:af:6e:57:1d:10:8d:ef:c0:42:e9:b1:38:64:0b:af:b0:e2:
         06:79:6f:ea:88:08:e3:70:aa:da:98:bc:de:17:45:6b:a9:71:
         bc:09:66:15:66:18:23:e6:d7:ed:4c:39:a9:7a:b7:39:d6:39:
         5b:df:08:c9:49:2d:4b:bc:9c:c0:a4:2f:ce:6e:af:d1:32:74:
         df:5a:1d:1b:43:37:a6:5e:bd:51:f1:f0:65:59:0a:4f:e9:6b:
         b7:97:47:c8:96:af:bf:b2:da:55:77:19:af:b5:a2:98:80:53:
         14:1d:34:9f:b9:32:be:4d:94:68:0c:48:a8:9c:8b:35:aa:33:
         dd:cd:c0:7a:4e:3b:3e:ea:68:64:8d:bc:23:79:60:65:e2:4d:
         79:5c:60:73:7d:11:ce:17:a3:67:72:27:bc:84:64:d5:9b:80:
         bc:46:31:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:28:28 2025 by rpki-client