This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C71FC62ADB5F11F0B8B499CCDAE4EC9C.roa
File:                     C71FC62ADB5F11F0B8B499CCDAE4EC9C.roa (raw, json)
Hash identifier:          saZDXcJM8IFijebdR9mcho/YOpfJPsqeit/AuqTBJmg=
Subject key identifier:   11:17:F9:DA:5E:DB:03:98:31:EB:8B:B0:C2:BF:72:E4:82:6B:95:37
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018F8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C71FC62ADB5F11F0B8B499CCDAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 15:48:06 +0000
ROA not before:           Wed 17 Dec 2025 15:47:59 +0000
ROA not after:            Fri 26 Dec 2025 15:47:59 +0000
asID:                     138915
IP address blocks:        156.244.61.0/24 maxlen: 24
                          156.244.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102287 (0x18f8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 15:47:59 2025 GMT
            Not After : Dec 26 15:47:59 2025 GMT
        Subject: CN=6942d0b6-ab32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:d4:a1:fc:c9:f6:ac:87:e9:7c:31:fb:95:
                    30:63:b9:4b:fe:31:79:64:d0:cc:99:84:69:37:99:
                    9c:1f:a2:b1:05:ba:96:40:a5:8a:64:f2:49:6c:59:
                    08:ad:af:77:29:cb:e4:20:ee:66:21:99:5f:4a:fa:
                    0d:5a:c2:30:32:49:ea:c3:cb:61:20:19:61:c6:65:
                    96:05:41:cc:53:6f:20:c4:59:04:37:24:48:88:75:
                    4a:c1:76:57:6a:5c:05:fd:44:f3:67:02:84:a0:58:
                    df:68:35:f7:71:a9:ef:ec:c1:1c:79:2a:8c:49:3b:
                    97:ee:61:71:85:03:ee:76:b8:e2:d6:88:ff:ae:28:
                    b1:83:89:35:75:32:eb:32:8e:2e:0f:29:3f:b9:8f:
                    c6:87:c2:2e:cd:1e:e8:f2:f5:c4:2c:bc:98:95:b4:
                    41:01:ca:6f:35:36:4b:e4:18:bf:3c:5d:12:91:33:
                    6a:f4:92:67:06:7b:28:f5:8c:d8:c5:b2:97:a5:e8:
                    89:72:5e:89:5c:14:11:54:89:8b:3b:4a:89:51:d1:
                    d9:85:24:e7:be:3e:49:4b:8e:fc:1a:d8:3d:cf:d6:
                    75:65:df:d7:2f:ee:a3:5f:cc:cd:f2:1d:1e:28:ce:
                    4a:c2:1c:34:f4:04:23:7d:7f:8b:86:53:cd:f9:8a:
                    de:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:17:F9:DA:5E:DB:03:98:31:EB:8B:B0:C2:BF:72:E4:82:6B:95:37
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C71FC62ADB5F11F0B8B499CCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.61.0-156.244.63.255

    Signature Algorithm: sha256WithRSAEncryption
         39:6b:d0:8d:97:3d:20:d9:37:22:67:8e:12:48:c9:b6:ee:f9:
         25:af:11:e7:7c:89:b4:18:db:69:3a:85:50:45:5c:56:36:7a:
         71:60:01:33:ca:d7:3c:f4:62:68:89:4e:71:fc:e3:11:1d:ef:
         dd:aa:8a:1a:9a:88:3f:e9:f6:bc:fc:18:45:7c:e9:1f:ae:cf:
         38:40:df:da:cf:ca:73:6b:48:38:4d:0e:af:da:ef:9b:8f:21:
         3c:30:c2:ae:65:70:a8:69:ff:a1:d4:45:aa:aa:21:60:99:b5:
         de:6d:f4:c1:8e:e7:94:67:21:73:42:d6:16:d2:f2:ba:c9:8b:
         f2:74:49:16:59:de:9d:5c:85:20:1a:ac:82:91:38:54:91:2e:
         b0:98:dd:08:36:95:8f:72:92:d4:40:3b:33:2e:56:3e:15:28:
         ba:7a:e8:25:6c:b1:0b:a7:9b:d0:b5:b8:78:1a:f2:72:19:34:
         17:69:a0:71:0c:e7:33:67:1f:c7:ba:e6:09:42:95:f6:01:31:
         40:60:68:bd:2f:98:e5:0c:ad:7d:dc:78:52:db:50:11:0a:b8:
         e3:fd:ca:58:d9:da:c8:5e:8d:fc:dc:46:ce:b3:cd:8a:b5:63:
         6a:29:2e:20:b8:b3:33:d0:c1:e3:87:19:42:c2:ef:f2:eb:8b:
         be:03:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:42:09 2025 by rpki-client