This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B75D0C7EE0D811F0800335A4DAE4EC9C.roa
File:                     B75D0C7EE0D811F0800335A4DAE4EC9C.roa (raw, json)
Hash identifier:          AiN/O9GWfsWht63P+/EzhrGPXHfCcypG304z4CnAMwY=
Subject key identifier:   66:4F:5C:75:F5:CC:F6:26:76:C3:AC:F2:4E:80:53:D5:EE:1C:E0:63
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0191A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B75D0C7EE0D811F0800335A4DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 14:56:25 +0000
ROA not before:           Wed 24 Dec 2025 14:56:20 +0000
ROA not after:            Sun 04 Jan 2026 14:56:20 +0000
asID:                     134365
IP address blocks:        156.239.253.0/24 maxlen: 24
                          156.239.254.0/24 maxlen: 24
                          156.239.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102818 (0x191a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 14:56:20 2025 GMT
            Not After : Jan  4 14:56:20 2026 GMT
        Subject: CN=694bff18-9c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:88:d3:1b:f4:a6:40:3a:a3:bb:bb:37:e0:
                    6e:b2:d1:94:9b:73:29:63:d3:dc:44:09:61:76:53:
                    6c:42:94:34:30:29:0e:55:84:2a:d5:a5:99:e1:c3:
                    d8:18:67:d3:e9:65:cc:18:39:b4:8d:87:00:20:af:
                    4f:19:5b:c8:66:73:f5:76:30:7a:8a:37:59:c2:e2:
                    8b:41:1f:b2:c0:13:f1:dc:99:00:c9:bc:78:92:2f:
                    86:a2:bd:fb:4d:63:07:64:fe:bc:57:83:b3:0e:cb:
                    5d:7a:fd:bb:41:16:52:d0:35:0c:66:d6:10:c7:ed:
                    36:b6:09:64:19:33:f1:03:f7:13:79:8d:a8:f2:05:
                    61:05:8b:2e:74:8f:6e:f8:9b:9b:4a:b6:b3:d6:b4:
                    c7:f5:5e:82:af:a6:1f:97:04:e4:44:ce:fe:f1:83:
                    5d:54:01:cb:21:0b:9e:46:6d:e7:f9:bd:5b:7e:9b:
                    60:90:67:6e:05:1e:ce:de:e7:0e:58:9c:25:4c:69:
                    80:a8:0c:0e:2a:eb:a5:29:9e:9f:b9:03:82:c2:d3:
                    60:2b:3d:62:ab:8b:e7:da:58:f4:d1:ef:2f:56:68:
                    ce:df:54:93:a5:ce:a3:57:e5:96:3e:fa:c2:d0:28:
                    19:da:2f:90:fb:34:bb:ed:de:76:a5:19:03:45:28:
                    e3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4F:5C:75:F5:CC:F6:26:76:C3:AC:F2:4E:80:53:D5:EE:1C:E0:63
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B75D0C7EE0D811F0800335A4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.253.0-156.239.255.255

    Signature Algorithm: sha256WithRSAEncryption
         99:60:f9:58:ab:8e:27:d2:3f:92:f2:cb:6f:61:b4:c2:13:7f:
         a3:96:06:86:83:8f:63:44:79:63:1c:9c:45:71:41:b4:01:55:
         c6:69:bf:da:7f:7c:79:f1:3c:fa:d2:4f:6d:ec:17:27:db:10:
         96:15:81:05:a2:c0:3c:0f:35:0b:5f:d8:76:9e:06:d2:9b:d6:
         62:3a:e6:1e:c1:3d:a5:e7:db:47:86:18:8b:bb:fa:53:e1:16:
         ce:08:68:3f:e1:6f:27:6a:88:59:5c:5a:ed:b9:76:e9:d3:66:
         ec:63:4e:02:a7:67:16:66:70:6b:e4:41:0b:18:46:06:b9:05:
         2b:60:11:e5:dc:9e:a6:c9:38:9f:d9:c0:0a:30:6e:c6:4b:87:
         36:8f:1b:ae:40:25:67:03:96:2d:bd:1b:39:a3:dd:c5:38:1d:
         d5:ae:d8:a4:37:20:be:44:dc:61:7c:bb:7a:fe:65:53:01:d1:
         f9:a7:a1:a3:0a:90:73:94:08:78:32:96:cc:7f:89:3c:9f:cf:
         75:87:75:67:37:99:76:a0:0f:a6:d2:ea:0f:21:f1:81:98:be:
         0a:4f:a0:19:9b:6b:c0:6d:29:fc:37:93:74:24:32:38:fe:95:
         7c:de:73:cd:25:5e:a8:de:3a:ed:18:2c:86:78:cb:f4:91:89:
         a3:db:49:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:38 2025 by rpki-client