This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBF7AA0CE22311F0A5FCFACEDAE4EC9C.roa
File:                     DBF7AA0CE22311F0A5FCFACEDAE4EC9C.roa (raw, json)
Hash identifier:          T+ofFQSuLHCTGibjkiYCYXSPgAQzGQd7vJaEg0zyKGw=
Subject key identifier:   13:84:1C:E3:75:46:65:86:58:6D:54:DB:47:5C:5C:C3:7D:C0:03:0D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019219
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBF7AA0CE22311F0A5FCFACEDAE4EC9C.roa
Signing time:             Fri 26 Dec 2025 06:26:50 +0000
ROA not before:           Fri 26 Dec 2025 06:26:45 +0000
ROA not after:            Sun 01 Feb 2026 06:26:45 +0000
asID:                     62513
IP address blocks:        156.225.32.0/21 maxlen: 24
                          156.225.40.0/24 maxlen: 24
                          156.225.43.0/24 maxlen: 24
                          156.225.44.0/24 maxlen: 24
                          156.225.56.0/21 maxlen: 24
                          156.225.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102937 (0x19219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 26 06:26:45 2025 GMT
            Not After : Feb  1 06:26:45 2026 GMT
        Subject: CN=694e2aa9-afa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:5b:cc:0d:d8:5f:c3:19:6f:ce:0f:8a:e0:
                    f2:59:6c:4b:e2:92:b5:e0:fe:65:48:47:fb:83:8e:
                    00:93:a8:f2:2c:f6:92:8d:7f:43:64:d9:4d:75:12:
                    8f:ae:c2:c6:a3:6a:59:78:d4:a8:26:dd:10:b1:91:
                    e0:20:e7:c3:12:49:09:9a:c6:ae:34:05:fd:52:84:
                    a7:06:15:05:3b:56:2e:30:f7:6a:63:ca:77:78:8a:
                    e7:16:5c:61:84:53:a8:42:9d:c3:b3:ea:10:c1:31:
                    ef:de:73:0b:bb:75:78:41:54:d1:bc:0e:bd:03:fe:
                    78:63:99:6c:58:4a:7a:9d:b3:67:a7:dc:c1:52:cb:
                    98:4d:03:80:11:69:b2:bc:2b:a8:a1:22:3d:4c:21:
                    4a:ca:ee:4e:10:83:4a:7d:bc:44:3f:75:da:03:3d:
                    74:d5:e3:9a:02:39:a5:86:23:db:19:20:01:70:88:
                    b3:16:61:a2:c7:95:d3:7a:fd:66:0f:c7:d7:a6:eb:
                    fd:f3:cb:95:e6:f4:01:30:59:c9:ef:f9:9b:59:cc:
                    8d:83:3c:c9:fa:b1:2b:34:f7:66:53:bd:62:cd:51:
                    b9:5b:3c:4d:40:35:34:85:dd:eb:73:af:4d:24:2c:
                    2c:a5:ff:d0:55:4a:90:d4:35:3c:50:cd:fe:7e:b5:
                    8a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:84:1C:E3:75:46:65:86:58:6D:54:DB:47:5C:5C:C3:7D:C0:03:0D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBF7AA0CE22311F0A5FCFACEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.32.0-156.225.40.255
                  156.225.43.0-156.225.44.255
                  156.225.56.0/21
                  156.225.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:8c:9e:12:70:84:d1:4a:ff:d8:f3:32:72:d6:fb:1c:f7:73:
         60:62:ac:b6:b4:85:f3:54:8d:d8:3c:d9:e9:3c:d2:5c:c3:df:
         5e:d8:1c:4a:6e:dc:1c:1d:ea:d8:f5:e5:76:4f:7d:62:38:47:
         56:7a:b1:8d:f4:99:3c:ef:c9:ff:b6:6c:95:51:b8:48:6f:73:
         4d:b8:d4:36:ca:12:33:08:e6:07:03:07:92:eb:23:83:6b:7f:
         0d:aa:2e:24:50:bb:6b:08:2d:38:cc:ab:d6:24:65:4b:47:5f:
         6d:a8:9b:21:f4:02:36:0b:21:7b:d4:9b:88:a8:23:ce:1a:2b:
         a1:61:f8:b5:67:7b:10:7d:d5:a6:89:93:50:1b:51:66:6c:12:
         60:d0:4a:33:fd:5a:a6:91:b9:07:7d:37:f7:04:9c:6c:69:40:
         32:20:8f:23:99:66:02:a8:d1:88:ba:87:bb:b5:30:fe:8e:5d:
         9a:86:a0:8a:ae:8b:7c:54:1c:4b:87:79:f4:00:8b:34:51:3d:
         25:aa:15:04:82:43:33:94:ec:1b:a9:95:1e:9a:57:d9:72:e5:
         b2:44:a4:49:32:48:d6:ec:bb:ed:a1:b1:07:ca:87:e7:99:7b:
         a5:2d:f0:85:dc:ed:b2:cd:37:a7:85:77:c2:d1:99:11:4a:55:
         38:c9:b8:03
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAZIZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjI2MDYyNjQ1WhcNMjYwMjAxMDYyNjQ1WjAYMRYw
FAYDVQQDEw02OTRlMmFhOS1hZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsrFbzA3YX8MZb84PiuDyWWxL4pK14P5lSEf7g44Ak6jyLPaSjX9DZNlN
dRKPrsLGo2pZeNSoJt0QsZHgIOfDEkkJmsauNAX9UoSnBhUFO1YuMPdqY8p3eIrn
FlxhhFOoQp3Ds+oQwTHv3nMLu3V4QVTRvA69A/54Y5lsWEp6nbNnp9zBUsuYTQOA
EWmyvCuooSI9TCFKyu5OEINKfbxEP3XaAz101eOaAjmlhiPbGSABcIizFmGix5XT
ev1mD8fXpuv988uV5vQBMFnJ7/mbWcyNgzzJ+rErNPdmU71izVG5WzxNQDU0hd3r
c69NJCwspf/QVUqQ1DU8UM3+frWKFQIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFBOE
HON1RmWGWG1U20dcXMN9wAMNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQkY3QUEwQ0UyMjMxMUYwQTVGQ0ZBQ0VEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAWc4SADBACc4SgwDAMEAJzh
KwMEAJzhLAMEA5zhOAMEA5zhuDANBgkqhkiG9w0BAQsFAAOCAQEADoyeEnCE0Ur/
2PMyctb7HPdzYGKstrSF81SN2DzZ6TzSXMPfXtgcSm7cHB3q2PXldk99YjhHVnqx
jfSZPO/J/7ZslVG4SG9zTbjUNsoSMwjmBwMHkusjg2t/DaouJFC7awgtOMyr1iRl
S0dfbaibIfQCNgshe9SbiKgjzhoroWH4tWd7EH3VpomTUBtRZmwSYNBKM/1appG5
B3039wScbGlAMiCPI5lmAqjRiLqHu7Uw/o5dmoagiq6LfFQcS4d59ACLNFE9JaoV
BIJDM5TsG6mVHppX2XLlskSkSTJI1uy77aGxB8qH55l7pS3whdztss03p4V3wtGZ
EUpVOMm4Aw==
-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:05 2025 by rpki-client