This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDC3107CE04011F09B2F34E0DAE4EC9C.roa
File:                     DDC3107CE04011F09B2F34E0DAE4EC9C.roa (raw, json)
Hash identifier:          LoFwKLwE9YAPcDgmfvFmnhf4cbzU19IoZuxTDqDsmbM=
Subject key identifier:   83:DA:03:8C:38:C3:BD:0F:3B:F5:8A:F9:BC:77:D9:62:0E:8F:B1:05
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019121
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDC3107CE04011F09B2F34E0DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 20:49:25 +0000
ROA not before:           Tue 23 Dec 2025 20:49:20 +0000
ROA not after:            Wed 28 Jan 2026 20:49:20 +0000
asID:                     59187
IP address blocks:        156.238.97.0/24 maxlen: 24
                          156.238.98.0/24 maxlen: 24
                          156.238.99.0/24 maxlen: 24
                          156.238.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102689 (0x19121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 20:49:20 2025 GMT
            Not After : Jan 28 20:49:20 2026 GMT
        Subject: CN=694b0055-f741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:de:e0:42:b8:bc:ca:05:bf:04:a4:7e:b2:56:
                    5c:01:83:e2:ec:2b:52:e0:82:3d:aa:2a:40:e0:2e:
                    8e:c4:5e:9a:16:32:8b:1b:f6:70:ec:6f:04:66:da:
                    d2:8a:9a:d1:c4:13:19:b0:06:20:be:8f:f6:6c:cf:
                    c6:47:af:36:b1:24:a9:09:4e:4d:4c:c3:04:cc:6c:
                    1b:f7:2f:20:3b:0d:d4:7e:de:ee:ab:14:af:8b:02:
                    51:8c:78:c4:94:9c:6a:96:76:53:1f:06:00:1b:f6:
                    5b:ec:71:8b:8e:d8:cc:1b:52:fe:02:2a:25:6f:5c:
                    6f:ac:f9:05:e6:e9:09:7c:69:c0:1a:46:cc:ca:d4:
                    20:51:5d:52:08:bf:95:ac:43:68:24:c8:91:4d:bf:
                    c4:69:d1:ff:26:0f:e5:a2:f8:6b:d5:e3:05:f4:ec:
                    54:d7:bf:24:cd:a2:bd:0e:44:b7:2d:42:7d:e0:12:
                    c6:96:0b:4b:fa:a8:82:8a:6d:71:7a:7b:89:e7:cc:
                    a2:b9:34:32:0b:62:45:cf:a5:60:05:30:04:3f:5a:
                    e2:5f:4d:c9:ea:fd:ba:b5:b4:1b:8a:fb:a9:db:e0:
                    14:27:58:c2:dd:e8:10:2b:99:14:ce:65:23:0b:14:
                    03:40:0d:1e:49:09:ef:f1:3c:5f:d6:6c:bc:a9:89:
                    26:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DA:03:8C:38:C3:BD:0F:3B:F5:8A:F9:BC:77:D9:62:0E:8F:B1:05
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDC3107CE04011F09B2F34E0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.97.0-156.238.100.255

    Signature Algorithm: sha256WithRSAEncryption
         aa:cd:7a:6f:49:4c:de:6f:9c:4d:0a:48:17:a9:16:76:29:e5:
         49:38:34:bd:eb:92:2a:73:ba:d3:a2:9e:ff:ce:df:f3:19:42:
         02:6f:da:3a:fe:68:fe:49:2c:a8:ff:74:8b:81:b1:bc:8c:51:
         52:f0:64:70:52:15:02:cc:c8:94:42:53:5e:7b:b2:dc:3a:7c:
         65:2d:d6:7d:6b:7c:d6:98:02:8c:33:9e:2f:5a:0e:48:7b:b4:
         b6:78:a2:51:f9:09:94:12:58:ad:0a:da:f7:11:e4:e1:95:77:
         70:16:4a:15:f8:52:f4:66:10:d5:bb:37:0b:ff:9d:f3:57:79:
         f8:7f:95:49:7b:13:0d:d5:f4:0f:6f:c0:b6:06:16:5c:e5:01:
         48:e9:66:90:88:15:1b:41:02:e1:3e:cc:00:27:9e:cd:0c:6d:
         9b:ed:27:cd:af:96:dc:95:5c:d0:86:76:5c:62:6d:ab:46:76:
         7c:b3:02:1e:87:26:79:a5:6e:cd:17:ab:60:ef:f6:7c:01:ec:
         e6:b3:d8:f4:b4:75:79:2c:50:34:9b:35:83:aa:7b:45:d0:30:
         60:31:0d:0e:a5:2a:8d:9d:ff:e7:dd:cf:77:8c:6f:2a:c5:e1:
         63:6c:f4:b4:d4:12:68:13:a9:66:e9:73:5e:53:06:3e:9f:49:
         60:4c:2f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:26:58 2025 by rpki-client