This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D48727A8E0B011F0ABA68DADDAE4EC9C.roa
File:                     D48727A8E0B011F0ABA68DADDAE4EC9C.roa (raw, json)
Hash identifier:          5LJaWsgZ6hJjJDClJrty5DflyPRq+JonkKgpN6FZB5k=
Subject key identifier:   66:46:45:92:90:47:58:8C:45:60:52:57:BB:4D:88:62:76:96:8D:C6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01915A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D48727A8E0B011F0ABA68DADDAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 10:10:54 +0000
ROA not before:           Wed 24 Dec 2025 10:10:49 +0000
ROA not after:            Sun 04 Jan 2026 10:10:49 +0000
asID:                     62468
IP address blocks:        156.239.224.0/19 maxlen: 24
                          156.239.254.0/24 maxlen: 24
                          156.239.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102746 (0x1915a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 10:10:49 2025 GMT
            Not After : Jan  4 10:10:49 2026 GMT
        Subject: CN=694bbc2d-8f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d9:c0:84:2f:10:56:2f:9a:98:e0:ed:d9:92:
                    ae:58:0f:3b:61:5c:a7:7e:d4:52:3a:35:7a:1d:ec:
                    17:d9:63:e7:ed:81:65:2d:ed:fc:24:d9:48:8c:60:
                    9c:df:4a:03:9a:2b:ae:1f:29:b0:95:66:22:d3:0c:
                    50:6f:46:e8:5d:92:95:6a:60:c9:03:d3:7d:44:e8:
                    8d:22:30:d4:1a:83:48:34:31:25:0d:bc:c7:dc:7a:
                    a4:a8:b2:6e:4f:82:43:38:ca:63:04:cf:1a:fa:7c:
                    f9:be:1e:34:24:be:56:ad:e6:f9:19:df:d2:98:1e:
                    e8:ff:04:f6:45:ca:4e:ca:1a:f7:c6:77:e0:30:17:
                    8d:34:6f:c4:3d:83:2b:53:0a:d9:eb:17:92:73:cd:
                    94:8c:6f:77:dd:1f:cc:ae:56:eb:8f:ac:27:27:79:
                    ab:a4:61:83:cb:89:ab:fd:2c:8a:62:8b:44:14:d5:
                    67:d3:1d:cd:48:67:62:3c:05:0c:23:8a:76:bf:14:
                    18:8e:59:53:ad:3c:27:04:00:6b:74:e0:71:23:d1:
                    5e:a0:76:8a:c0:6a:b7:38:7b:e1:26:6e:a2:5c:3d:
                    c1:dc:42:22:8a:e1:65:37:ac:82:19:56:36:fc:df:
                    ea:a4:30:01:c9:c2:95:39:8a:80:2f:2f:db:84:df:
                    14:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:46:45:92:90:47:58:8C:45:60:52:57:BB:4D:88:62:76:96:8D:C6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D48727A8E0B011F0ABA68DADDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:ea:0f:ec:44:65:13:c9:d2:aa:58:81:00:27:9f:97:ec:33:
         b6:3a:0f:01:65:48:8a:61:ff:cc:38:3c:73:8e:81:aa:a9:1c:
         70:e2:56:fd:fd:09:07:4f:08:71:c7:4f:3d:6a:eb:5b:cb:c4:
         b6:9b:92:60:02:af:7d:f5:b3:a9:1f:c8:dc:da:f7:08:76:ea:
         f4:41:8f:b4:5e:23:28:d9:4d:dd:33:70:aa:10:1c:55:19:43:
         3d:50:9f:91:6b:97:c6:43:5d:30:18:6c:b6:70:03:3e:e3:98:
         ed:68:00:82:54:f1:f7:9d:44:f0:d5:40:57:f9:c7:6c:fe:7d:
         48:a5:94:c8:ca:8b:ca:0c:6e:30:a6:5a:ca:47:0d:51:11:18:
         d1:cf:11:50:99:b1:89:58:2e:78:6d:af:62:31:03:34:67:bc:
         fb:21:e4:29:42:a4:d0:17:8f:bd:d9:e6:d1:f5:db:0d:4a:ab:
         5b:c3:52:7f:f8:cd:09:0b:d9:08:5a:53:9f:67:73:5d:44:07:
         5b:06:04:7e:be:93:9d:fb:34:26:e0:3c:58:b4:4a:d9:c8:6f:
         50:2e:92:57:de:d4:65:91:c8:3f:79:4a:5a:85:be:c8:44:5b:
         c0:8c:11:70:93:7b:2a:90:0d:c5:1c:93:2c:10:0e:dc:14:52:
         84:91:e5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:28:32 2025 by rpki-client