This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90A60954E46711F0BD8102F3DAE4EC9C.roa
File:                     90A60954E46711F0BD8102F3DAE4EC9C.roa (raw, json)
Hash identifier:          1ZSIQYsVMCUBwMDfz9omgu8LZdYETxoacmK9FUrg16A=
Subject key identifier:   DE:3F:A1:59:4D:87:74:9D:5B:71:DF:A6:51:D5:1C:AD:D2:D1:6D:29
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0192A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90A60954E46711F0BD8102F3DAE4EC9C.roa
Signing time:             Mon 29 Dec 2025 03:36:31 +0000
ROA not before:           Mon 29 Dec 2025 03:36:26 +0000
ROA not after:            Tue 13 Jan 2026 03:36:26 +0000
asID:                     62468
IP address blocks:        156.245.209.0/24 maxlen: 24
                          156.245.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103076 (0x192a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 29 03:36:26 2025 GMT
            Not After : Jan 13 03:36:26 2026 GMT
        Subject: CN=6951f73f-5613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:65:f5:c2:1f:da:55:76:e4:b8:ad:3f:9e:
                    26:c1:da:09:7e:e5:00:cf:10:36:e9:4c:0c:37:f7:
                    23:0d:15:0e:ce:f1:72:7b:fc:65:df:55:68:53:72:
                    cb:ec:23:fa:00:29:d7:39:a7:89:bf:3a:9c:d3:33:
                    75:ab:77:10:48:fa:bc:a3:7b:22:af:92:85:2a:ed:
                    64:9a:a1:dd:83:4d:d6:93:21:0e:c0:12:72:c6:96:
                    17:cd:a1:a1:77:36:39:f7:ea:25:2b:dd:9a:46:dc:
                    6b:58:eb:98:64:7d:ba:8d:f7:ab:ec:cc:01:57:d6:
                    46:ed:89:8b:ef:40:69:a5:e7:d9:7e:79:8f:09:05:
                    d1:bb:d5:84:57:ee:4b:fa:87:ec:f3:97:d3:34:db:
                    be:af:aa:c2:c6:2c:36:74:af:ca:3d:96:b8:6c:cf:
                    e9:6a:6c:b4:91:5a:53:d4:ff:88:1f:8e:c0:25:1a:
                    cb:40:1b:25:5e:f6:5e:9f:93:f0:6c:4c:53:7d:ba:
                    81:f8:1a:41:b1:ec:af:ca:28:5c:52:a8:36:9a:b6:
                    0f:08:59:00:f6:99:b2:9a:71:7c:da:3d:e5:2e:97:
                    60:8e:14:82:d6:95:f0:5d:36:7f:93:4d:c8:ce:7a:
                    f7:51:6f:18:63:36:e1:8e:52:3a:30:6a:9e:e5:79:
                    9a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3F:A1:59:4D:87:74:9D:5B:71:DF:A6:51:D5:1C:AD:D2:D1:6D:29
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90A60954E46711F0BD8102F3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.209.0-156.245.210.255

    Signature Algorithm: sha256WithRSAEncryption
         4e:1a:fb:86:9e:30:d1:d6:7c:ee:f1:81:de:db:12:ae:06:53:
         43:89:ef:97:be:4a:a3:2e:af:b7:4b:be:8e:4c:3f:6d:a1:16:
         b5:14:e9:43:62:83:23:2a:1d:4a:97:77:09:6e:09:bd:c5:af:
         2d:69:65:d0:8d:ed:27:17:48:e7:e4:fe:e1:74:6a:26:e2:26:
         0a:06:b6:53:a8:45:a1:dc:22:a2:95:05:c9:d7:19:5d:12:7e:
         db:35:67:7b:3b:ac:e4:bf:27:32:ce:e5:34:45:bd:71:b4:90:
         69:4e:c7:e4:98:0e:c7:9b:80:84:dc:4d:74:44:83:58:f4:c2:
         1a:5a:5b:97:ef:c1:d7:d0:c3:b1:a7:e4:68:2e:37:cc:70:6d:
         c8:d5:c7:92:34:b1:d0:b0:c7:a3:87:1f:1f:ee:48:e4:ac:80:
         62:11:ea:e4:4e:82:c1:88:8d:51:36:7e:58:47:b0:c7:43:d4:
         ba:c3:40:e8:d7:4e:84:1e:d6:be:ad:59:c8:02:1e:02:86:98:
         0d:e3:0b:42:64:ef:57:95:03:9c:7c:62:ac:37:be:58:b7:0c:
         c0:f6:b7:2b:ad:9c:fd:77:36:46:07:43:76:fe:d2:c8:ad:c3:
         6c:8f:0c:c1:b6:4d:02:c7:24:68:d3:39:68:f3:a9:ef:ee:61:
         d7:b2:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:28:22 2025 by rpki-client