This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF4B65F4E38911F09F5CCA82DAE4EC9C.roa
File:                     AF4B65F4E38911F09F5CCA82DAE4EC9C.roa (raw, json)
Hash identifier:          qvmaE5/Oaix0/yvY1J5l1MjveHVJPFweCxHC48N40Fk=
Subject key identifier:   30:0D:67:A5:84:15:17:3F:7D:AB:60:09:BF:AC:46:F5:07:7B:36:6C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019288
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF4B65F4E38911F09F5CCA82DAE4EC9C.roa
Signing time:             Sun 28 Dec 2025 01:08:14 +0000
ROA not before:           Sun 28 Dec 2025 01:08:09 +0000
ROA not after:            Mon 02 Feb 2026 01:08:09 +0000
asID:                     23470
IP address blocks:        156.225.70.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103048 (0x19288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 28 01:08:09 2025 GMT
            Not After : Feb  2 01:08:09 2026 GMT
        Subject: CN=695082fe-b04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b2:31:bb:eb:f0:69:e7:67:9e:d2:d2:24:6f:
                    da:85:11:19:6d:49:cf:8b:f5:13:16:35:77:42:87:
                    5c:9a:bd:77:23:5e:cb:4e:0c:81:f7:ca:7d:6e:27:
                    5f:1c:db:0a:72:aa:d2:be:87:95:87:dc:72:28:33:
                    55:e2:20:81:02:3f:ee:f7:c2:db:9a:f3:70:68:c0:
                    72:32:b1:82:b1:97:76:e4:34:1c:85:6a:2c:75:79:
                    5b:9d:1c:4a:53:a3:27:bb:90:b7:be:5a:d0:ab:b6:
                    7d:c4:83:e4:5f:85:2f:79:ad:37:58:29:9e:e8:80:
                    b4:5e:fd:62:0e:32:ea:44:ae:0f:37:50:0c:e6:05:
                    72:7b:8f:6c:d5:45:98:5c:fd:62:01:a5:48:d6:1b:
                    ff:86:30:3f:f8:25:71:6b:13:6b:ce:15:80:61:fa:
                    51:b0:e9:29:72:08:18:b4:ba:cd:e2:ee:c4:7f:80:
                    09:ad:f8:37:ff:9c:42:52:cb:99:e6:3f:fa:c5:41:
                    66:86:41:5c:88:03:1b:ed:b6:2b:24:57:2d:b0:09:
                    87:5b:62:0a:e2:f6:d8:bc:aa:43:ad:9e:7e:71:ac:
                    a0:c2:35:3d:f5:df:81:d4:24:28:6b:6f:7d:3a:0e:
                    f9:de:3e:fa:0a:7a:c0:9a:33:b2:73:99:10:4c:6f:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0D:67:A5:84:15:17:3F:7D:AB:60:09:BF:AC:46:F5:07:7B:36:6C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF4B65F4E38911F09F5CCA82DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:fd:fe:50:7b:55:e6:03:ee:b7:05:e5:e3:82:c8:7d:ba:dc:
         c9:d2:51:d2:98:e4:af:f3:cf:d9:37:eb:9d:b5:14:80:ec:ff:
         d1:c0:08:8c:d4:46:fc:d6:db:07:93:c4:30:a3:a1:1a:84:ec:
         50:a0:30:23:37:e5:16:91:71:1c:d5:85:31:b2:34:eb:1b:f1:
         50:fc:99:37:06:65:f4:69:cd:51:38:a9:5c:75:81:b8:cc:a0:
         16:1f:c0:89:70:8b:49:74:cf:44:3f:2d:ae:ae:ba:23:d0:6e:
         06:e7:0c:bf:9b:03:2a:57:65:f0:9a:1c:eb:88:55:ff:61:3b:
         c1:2e:6d:9b:84:d8:b5:ca:96:d3:65:78:c7:0f:5e:fa:83:dd:
         24:33:2d:a4:2d:5b:d2:3f:81:ef:9d:ad:22:4b:20:85:cb:b4:
         4d:3f:e8:cd:ab:4b:73:ca:d4:d4:7f:4c:ea:61:ce:5c:3a:19:
         af:58:5a:14:84:f1:54:25:f9:6a:ea:2a:7e:e9:28:39:7e:7f:
         7b:80:4b:e3:6f:fc:75:9a:18:05:f5:ff:16:d8:38:7d:7c:1f:
         c5:8d:c4:01:0a:93:d5:11:1a:0c:8f:9a:ae:57:bd:8f:f0:b6:
         b7:94:b2:14:26:16:cf:bf:c2:72:49:e8:91:a1:21:f3:8d:13:
         10:bb:17:94
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZKIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjI4MDEwODA5WhcNMjYwMjAyMDEwODA5WjAYMRYw
FAYDVQQDEw02OTUwODJmZS1iMDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2LIxu+vwaednntLSJG/ahREZbUnPi/UTFjV3Qodcmr13I17LTgyB98p9
bidfHNsKcqrSvoeVh9xyKDNV4iCBAj/u98LbmvNwaMByMrGCsZd25DQchWosdXlb
nRxKU6Mnu5C3vlrQq7Z9xIPkX4Uvea03WCme6IC0Xv1iDjLqRK4PN1AM5gVye49s
1UWYXP1iAaVI1hv/hjA/+CVxaxNrzhWAYfpRsOkpcggYtLrN4u7Ef4AJrfg3/5xC
UsuZ5j/6xUFmhkFciAMb7bYrJFctsAmHW2IK4vbYvKpDrZ5+caygwjU99d+B1CQo
a299Og753j76CnrAmjOyc5kQTG98RwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDAN
Z6WEFRc/fatgCb+sRvUHezZsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRjRCNjVGNEUzODkxMUYwOUY1Q0NBODJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOFGMA0GCSqGSIb3DQEBCwUA
A4IBAQCQ/f5Qe1XmA+63BeXjgsh9utzJ0lHSmOSv88/ZN+udtRSA7P/RwAiM1Eb8
1tsHk8Qwo6EahOxQoDAjN+UWkXEc1YUxsjTrG/FQ/Jk3BmX0ac1ROKlcdYG4zKAW
H8CJcItJdM9EPy2urroj0G4G5wy/mwMqV2XwmhzriFX/YTvBLm2bhNi1ypbTZXjH
D176g90kMy2kLVvSP4Hvna0iSyCFy7RNP+jNq0tzytTUf0zqYc5cOhmvWFoUhPFU
Jflq6ip+6Sg5fn97gEvjb/x1mhgF9f8W2Dh9fB/FjcQBCpPVERoMj5quV72P8La3
lLIUJhbPv8JySeiRoSHzjRMQuxeU
-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:44 2025 by rpki-client