This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFDEF086D9D611F09D4A02A8DAE4EC9C.roa
File:                     CFDEF086D9D611F09D4A02A8DAE4EC9C.roa (raw, json)
Hash identifier:          pwVr3df0Uj9QcJpglQiSokQyMU+IsgsZJbQ9GmEB/R4=
Subject key identifier:   56:33:F6:B1:5D:4F:49:ED:F4:CF:47:6C:F8:78:C0:23:D9:47:CB:77
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018E88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFDEF086D9D611F09D4A02A8DAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 16:55:09 +0000
ROA not before:           Mon 15 Dec 2025 16:55:04 +0000
ROA not after:            Sun 08 Mar 2026 16:55:04 +0000
asID:                     149440
IP address blocks:        156.227.0.0/24 maxlen: 24
                          156.236.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102024 (0x18e88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 15 16:55:04 2025 GMT
            Not After : Mar  8 16:55:04 2026 GMT
        Subject: CN=69403d6c-9120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:73:28:8e:83:f1:5e:83:4a:54:c1:0b:9d:
                    6f:cf:c3:eb:81:81:80:f7:c5:5c:00:cc:18:4b:32:
                    26:4c:f9:53:c7:13:fb:bc:c0:d7:bc:81:14:af:70:
                    fc:f7:4b:be:4b:da:3d:1e:64:8b:f3:9c:86:5f:a8:
                    04:ab:24:58:86:2e:72:4c:f6:04:9f:51:87:46:3e:
                    88:c0:3b:c3:7b:71:01:8b:4c:3b:56:43:85:b3:f5:
                    b2:32:85:4a:91:81:1d:36:17:fe:57:d1:63:b1:21:
                    30:dc:f2:e3:80:26:2c:6e:27:f9:79:a2:c5:e4:79:
                    4f:43:e0:93:e9:dd:5c:35:9c:23:a7:62:12:96:f0:
                    ea:a6:31:e8:e4:12:2c:73:36:63:4c:df:f2:f7:38:
                    da:3e:74:bc:49:c3:22:67:39:72:92:c1:36:04:02:
                    2d:97:91:45:92:5b:3a:2b:31:7d:42:47:52:37:17:
                    d9:98:6c:2e:a8:88:ef:01:87:3e:08:e0:65:51:f2:
                    49:df:93:90:6a:08:3c:d6:67:ae:eb:bf:69:1f:b9:
                    53:a1:51:90:e4:ac:ac:e6:1c:f1:76:21:e0:e0:86:
                    4c:76:11:bb:9e:39:f2:f8:48:ff:d2:99:f2:a3:cd:
                    1d:6b:e3:1f:ec:0b:11:7e:17:fa:2d:0f:9c:e0:14:
                    ca:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:33:F6:B1:5D:4F:49:ED:F4:CF:47:6C:F8:78:C0:23:D9:47:CB:77
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFDEF086D9D611F09D4A02A8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.0.0/24
                  156.236.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:37:53:9a:73:5b:5e:f5:fc:76:5f:87:98:17:74:84:56:09:
         bd:d5:a2:51:92:08:c3:81:e6:95:d9:de:ae:87:57:99:95:66:
         d9:31:6c:4d:70:ef:97:8c:42:b7:18:dc:c5:17:ea:ce:3c:a6:
         84:44:7f:33:eb:b0:64:1a:df:bb:c7:8e:98:df:e4:ca:5f:2f:
         9e:39:5e:4a:fe:59:5b:91:ba:99:4d:1e:dd:99:45:71:d4:24:
         36:af:9c:fa:15:6a:80:8c:56:74:75:23:23:38:8c:16:5d:48:
         f3:02:80:3b:c9:67:35:1a:de:80:63:8e:a2:7a:17:33:77:a8:
         00:d3:c8:76:a1:9a:84:82:ba:79:95:0c:05:f5:ef:1c:87:85:
         63:d6:3e:15:77:cf:66:f2:f2:66:4f:87:35:b0:49:2b:be:7d:
         8d:01:70:4f:cb:75:1f:a1:44:33:ad:cd:83:04:7c:2f:3b:29:
         58:8a:f2:3d:42:45:0e:ac:b7:51:9d:be:eb:be:55:1f:18:97:
         73:8c:f2:38:de:53:19:47:c1:7b:9d:f3:cd:cf:45:e8:d7:3d:
         d7:79:cc:d5:2b:9c:9e:61:89:c5:0d:a1:21:a0:db:9c:91:00:
         ee:f5:d3:95:6b:44:79:7c:6b:db:a3:03:0a:a7:0d:0c:f9:b4:
         ce:a2:67:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:33:49 2025 by rpki-client