This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97A9ED78E22411F08565F3D4DAE4EC9C.roa
File:                     97A9ED78E22411F08565F3D4DAE4EC9C.roa (raw, json)
Hash identifier:          FV0jPuB5Cw8AO95LH9QhqFZs4b64ERo2a/he0tmavV8=
Subject key identifier:   B3:A5:48:87:36:21:4D:F3:73:6F:C0:8A:D9:9C:5F:DA:D8:86:7A:D3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01921B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97A9ED78E22411F08565F3D4DAE4EC9C.roa
Signing time:             Fri 26 Dec 2025 06:32:04 +0000
ROA not before:           Fri 26 Dec 2025 06:31:59 +0000
ROA not after:            Sun 01 Feb 2026 06:31:59 +0000
asID:                     835
IP address blocks:        156.225.41.0/24 maxlen: 24
                          156.225.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102939 (0x1921b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 26 06:31:59 2025 GMT
            Not After : Feb  1 06:31:59 2026 GMT
        Subject: CN=694e2be4-a7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:d1:13:09:74:a7:81:cd:6c:48:86:8d:78:
                    ef:bb:84:24:eb:f4:1d:d1:e9:1e:5f:09:9b:a7:8f:
                    d4:f9:dd:b6:99:a0:f7:9c:f5:26:d4:7d:02:d4:ee:
                    34:e4:13:07:f4:23:89:6e:e0:8d:5c:3e:2f:ad:35:
                    11:1d:e7:1c:aa:f1:68:c8:6b:a0:f2:a3:e8:82:6f:
                    c5:4f:f6:9f:61:bf:ef:09:3b:de:66:37:28:64:43:
                    c6:a2:34:3a:fb:c9:7a:dc:3b:80:03:c7:19:97:f3:
                    3f:26:87:f6:3e:00:e5:06:5d:f9:5a:f6:bc:09:54:
                    5f:40:4a:5c:b8:0b:94:27:a0:93:47:c2:e4:ad:87:
                    f4:27:c5:8a:91:bd:d3:19:dc:fe:3a:b4:6d:88:1a:
                    d1:87:ee:f2:a6:4b:78:98:85:5a:aa:c7:7b:30:7d:
                    51:f6:65:ee:6d:4d:74:a3:77:89:df:5f:79:92:4b:
                    c4:d4:de:70:31:d2:fe:11:1c:5b:a9:3b:c9:1e:d0:
                    a1:ee:23:2c:28:d8:04:44:a2:5e:36:48:12:41:9b:
                    38:64:ad:70:a7:db:27:21:25:eb:8f:d6:e3:98:d6:
                    60:55:9f:78:13:f9:b6:d9:2d:80:8c:fc:d5:4b:62:
                    7c:13:8c:da:12:0a:c6:43:4c:bc:62:59:85:22:35:
                    f7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A5:48:87:36:21:4D:F3:73:6F:C0:8A:D9:9C:5F:DA:D8:86:7A:D3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97A9ED78E22411F08565F3D4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.41.0/24
                  156.225.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:09:26:7f:d7:d4:e7:29:5c:3e:dc:d9:d8:d3:fe:b5:de:8a:
         ce:d4:ef:68:c9:39:8c:63:77:cf:6f:70:4e:76:90:79:b7:26:
         60:ee:a6:4d:6b:ea:e8:5d:3b:bb:3a:ab:87:a7:a4:b4:d5:b8:
         50:e3:4e:dc:ab:12:97:d8:75:d0:54:62:b2:d9:b5:77:5d:82:
         86:10:a1:1c:2d:60:91:8e:bd:1c:e4:d8:a5:25:0a:36:60:96:
         f1:98:6b:ef:54:f6:e4:24:fe:93:f9:2f:63:c0:4d:b9:d6:f2:
         73:a5:cc:6f:cf:e1:d4:d7:67:27:ad:15:2d:9b:56:1e:00:f5:
         05:d0:b3:50:c9:1f:38:e5:a8:e7:da:f2:b8:43:21:99:e8:5c:
         bb:25:2a:6b:75:d3:f5:f0:44:10:ad:d6:6e:3f:8d:44:70:fc:
         3b:c3:90:cf:61:cb:72:d2:f3:a1:f5:a5:30:e0:f5:5c:62:a2:
         0a:23:28:be:c5:25:02:0a:c9:03:ed:05:d1:27:52:6d:e7:2d:
         7a:9b:af:4d:b2:7a:ef:f8:b2:82:e2:8f:9e:15:b1:e0:31:84:
         41:d8:44:e9:b3:be:b7:27:ef:6e:f4:38:a0:f2:ce:a7:ee:e5:
         e2:39:a0:a3:1e:2d:86:9e:45:b0:2f:36:7c:7c:97:78:27:35:
         9c:b8:23:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:28:30 2025 by rpki-client