This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0D9105ADCE511F09802C2DADAE4EC9C.roa
File:                     C0D9105ADCE511F09802C2DADAE4EC9C.roa (raw, json)
Hash identifier:          UH52X9YkwUb3YDzflOU6TJ1WFNOPv0j0Zjnadj26j8c=
Subject key identifier:   0C:F4:2A:F8:6C:FC:2E:03:42:DC:A6:AF:9F:A8:B6:65:7F:E0:90:E4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01901A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0D9105ADCE511F09802C2DADAE4EC9C.roa
Signing time:             Fri 19 Dec 2025 14:19:39 +0000
ROA not before:           Fri 19 Dec 2025 14:19:34 +0000
ROA not after:            Sat 17 Jan 2026 14:19:34 +0000
asID:                     401783
IP address blocks:        156.230.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102426 (0x1901a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 19 14:19:34 2025 GMT
            Not After : Jan 17 14:19:34 2026 GMT
        Subject: CN=69455efb-9ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:0d:63:d2:11:7f:7a:68:b6:d8:a5:a4:06:
                    b7:a6:d0:e6:d5:6c:c6:83:67:62:c7:36:35:01:09:
                    a9:64:c6:a4:50:7a:2f:d2:41:0b:dd:95:39:74:76:
                    56:90:ef:b1:8a:a8:7a:ed:d5:38:22:ce:85:a5:cc:
                    fb:a7:da:4e:14:46:3e:b8:a9:63:4f:79:e6:6f:e4:
                    ac:86:35:2f:d8:2e:75:f4:05:56:6a:b0:6d:29:f5:
                    f9:3a:ff:4e:bf:ee:14:45:b2:d9:23:39:28:06:92:
                    2d:83:35:cd:4a:7f:cd:ea:4a:ab:26:5a:70:62:89:
                    53:41:20:c7:99:39:66:77:5e:b5:4b:3a:46:2a:21:
                    d5:76:a2:61:4d:4d:f1:03:44:2a:a7:b9:d4:6b:aa:
                    1a:3c:67:65:b2:89:13:68:6a:af:16:fb:e9:83:f9:
                    2d:e0:e2:0d:43:03:93:c6:0c:6d:57:ea:88:07:64:
                    de:de:cf:64:d7:c3:90:2f:f7:a8:27:86:91:37:af:
                    dd:2c:61:e1:bb:cb:a2:cf:e1:d1:01:21:e2:14:4d:
                    34:91:21:fc:3f:0b:7b:7c:f8:c4:7a:12:a8:a3:b9:
                    bc:19:51:2d:ff:44:dd:0d:c1:da:1f:2b:cc:92:56:
                    a3:0e:ae:a2:f0:66:5b:17:2b:04:fb:39:7e:dd:82:
                    af:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F4:2A:F8:6C:FC:2E:03:42:DC:A6:AF:9F:A8:B6:65:7F:E0:90:E4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0D9105ADCE511F09802C2DADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:78:89:6d:ae:1b:fc:34:4e:b4:85:60:50:5e:15:5b:d1:a8:
         8b:d1:03:9b:fe:f4:f7:0b:8b:68:5c:cf:d5:90:ba:05:a8:76:
         6e:39:87:28:33:a3:3e:59:ca:f9:87:f0:1e:73:11:83:32:37:
         5f:8a:98:32:5e:70:63:de:db:a6:8f:58:c7:79:a3:a9:b2:2e:
         6b:d0:04:6c:ff:fc:f2:2a:bd:ce:c2:4e:a3:d2:05:87:47:77:
         71:fe:a9:d1:d8:63:84:b7:00:46:69:c7:4a:ef:a3:de:64:89:
         e3:eb:e3:b0:60:f5:38:31:84:a3:95:05:2b:dd:a0:e1:8e:44:
         7b:fa:6f:ec:42:0a:39:ba:ea:b8:14:5c:9e:31:64:b3:82:ba:
         ab:24:e7:86:41:97:f0:bf:f6:46:9f:41:fd:df:c1:26:74:3e:
         cc:18:f9:e4:72:32:6d:df:8c:91:86:63:16:4e:b4:de:b7:65:
         c6:9e:a4:e4:1c:19:6d:1e:10:b8:87:c1:29:01:85:b4:cf:2e:
         b5:80:b5:63:3b:37:5e:22:8a:63:af:f6:b2:6f:1a:60:c4:d5:
         1c:e2:94:8a:cf:f7:7c:9e:bd:d4:43:80:3b:b3:71:fb:ba:6b:
         76:7f:c3:a9:24:6c:1e:3c:a8:83:c9:62:33:6d:89:59:2c:f9:
         6c:46:41:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:33:50 2025 by rpki-client