This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E103E54D76811F0A732A8EBDAE4EC9C.roa
File:                     9E103E54D76811F0A732A8EBDAE4EC9C.roa (raw, json)
Hash identifier:          292NWv+CwP4T64a9DBrrqSB9nnsoODGDz0WJgCL1epU=
Subject key identifier:   B6:C2:92:2C:32:B9:D0:DB:EE:02:C3:C9:FE:1D:F6:E3:F1:86:3F:D6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018E0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E103E54D76811F0A732A8EBDAE4EC9C.roa
Signing time:             Fri 12 Dec 2025 14:41:18 +0000
ROA not before:           Fri 12 Dec 2025 14:41:13 +0000
ROA not after:            Wed 21 Jan 2026 14:41:13 +0000
asID:                     18779
IP address blocks:        156.225.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101902 (0x18e0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 12 14:41:13 2025 GMT
            Not After : Jan 21 14:41:13 2026 GMT
        Subject: CN=693c298e-1ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7c:4f:ab:0c:47:e7:4f:76:a1:7a:74:d9:e4:
                    3b:c5:e8:6c:56:27:a9:17:10:18:7c:8e:ba:54:4d:
                    38:e4:21:5e:39:61:db:a0:c1:91:4e:18:8d:6d:dd:
                    48:65:a4:5d:d3:8d:2d:e3:bf:28:a4:1a:6d:22:c5:
                    c8:1a:5d:17:09:c5:96:e9:72:1d:5d:c4:da:5e:51:
                    f8:f7:29:e0:6a:17:c6:80:6f:43:4a:dc:03:fc:92:
                    32:5e:b8:9f:b1:6f:7b:30:c8:bc:e8:6c:81:ba:fe:
                    2f:00:05:8c:cc:f2:c2:b2:d4:61:45:e5:76:11:90:
                    d5:18:47:af:4d:54:a0:89:db:03:d1:fd:b7:7c:7a:
                    0c:24:b8:bd:d5:05:9d:23:03:7a:05:bd:fe:cd:d1:
                    d5:13:94:5b:99:5b:54:10:23:b5:1a:58:e4:03:c2:
                    8f:38:06:10:60:41:0d:24:0c:1f:8a:3c:64:3f:ab:
                    fb:94:c0:11:7e:88:8e:fe:81:d5:1c:d5:10:56:2e:
                    42:48:28:50:5c:07:1d:d2:8a:7f:91:87:a4:29:59:
                    c0:65:ae:3e:94:33:1c:25:b9:3a:a9:64:78:de:94:
                    33:a2:81:55:65:24:0b:e5:73:8b:f0:4f:ae:a3:44:
                    6b:81:82:b5:c0:8a:19:23:b1:fb:58:fb:b0:7f:79:
                    b5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C2:92:2C:32:B9:D0:DB:EE:02:C3:C9:FE:1D:F6:E3:F1:86:3F:D6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E103E54D76811F0A732A8EBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:30:95:e6:d3:fd:91:b0:f2:48:8b:d6:af:51:8c:84:8c:c0:
         74:1e:b1:c9:f5:84:43:58:bf:17:68:f4:c4:43:3e:e1:d7:f8:
         88:d9:05:06:65:7e:e3:80:fb:14:9e:76:4e:a7:df:cd:39:be:
         f8:ad:8b:8f:17:f2:47:a7:ef:98:90:0f:b4:ed:4b:3b:5f:80:
         8e:f8:6f:31:ae:49:2f:39:55:75:40:43:6d:a8:bc:b3:4d:94:
         a0:20:4e:27:28:73:0d:85:27:28:e5:80:6d:c2:78:96:9c:c2:
         ab:91:a4:e6:b1:55:51:47:de:7a:f4:54:c7:91:0c:48:0e:31:
         59:f0:82:4b:3b:ee:10:a8:9a:7b:ed:85:78:41:b2:b9:8f:8d:
         21:65:e1:bb:1a:26:a1:5f:f0:0a:06:16:f4:c9:94:94:fa:0a:
         8f:64:5d:a4:96:ce:a7:a9:60:f1:1c:81:0d:2c:d4:7f:06:31:
         82:e3:00:78:a8:25:4e:60:e6:3b:84:cc:83:fe:ed:ac:38:95:
         98:e9:30:16:9f:61:a3:64:b2:af:ff:2a:79:6c:b0:48:42:42:
         bf:d2:cf:f2:78:65:9a:b1:7c:47:d8:0f:21:9a:0c:4b:ab:7e:
         f2:e7:6b:9b:4c:33:08:f5:5e:ad:20:b1:c0:ce:7b:92:be:e9:
         06:b6:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:17:29 2025 by rpki-client