This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF6BC1C2E22811F0A84730EEDAE4EC9C.roa
File:                     EF6BC1C2E22811F0A84730EEDAE4EC9C.roa (raw, json)
Hash identifier:          Xl96ymL0bAuMGBj6gDG4VRJdEwmS0NFUmGK3FvP/OP8=
Subject key identifier:   6F:D7:20:B1:EF:FF:FB:5E:A6:9D:6A:AD:1E:C0:7B:C9:1C:91:36:53
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019227
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF6BC1C2E22811F0A84730EEDAE4EC9C.roa
Signing time:             Fri 26 Dec 2025 07:03:09 +0000
ROA not before:           Fri 26 Dec 2025 07:03:05 +0000
ROA not after:            Sun 01 Feb 2026 07:03:05 +0000
asID:                     214016
IP address blocks:        156.225.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102951 (0x19227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 26 07:03:05 2025 GMT
            Not After : Feb  1 07:03:05 2026 GMT
        Subject: CN=694e332d-e120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:76:2c:2a:63:84:bb:70:6b:d8:4e:79:ca:56:
                    92:f0:ae:aa:c6:ed:b6:f8:e9:3f:b8:1e:c3:37:39:
                    27:5f:91:af:fd:62:9c:47:da:22:0b:cf:63:49:ba:
                    8d:2a:b6:b4:e8:59:98:5e:6e:85:3c:49:25:30:3a:
                    90:cb:78:4d:97:8c:c7:a1:22:b4:a5:5b:67:db:31:
                    b8:ae:1d:20:37:3c:e0:40:fd:bd:94:dc:64:95:4c:
                    fd:15:e4:93:cb:ee:0d:bc:cf:f0:2a:12:07:e9:77:
                    d3:ef:50:54:9d:f9:5f:14:96:00:60:7f:30:7c:ce:
                    2c:20:1e:3c:82:71:69:b3:05:84:dc:44:7b:ad:ec:
                    fe:53:49:cb:b4:bc:0a:c4:77:9d:78:b4:7c:6a:84:
                    e5:b0:17:81:51:9c:62:0d:6d:84:e5:25:a9:94:c1:
                    38:83:7e:24:b5:3e:a6:f4:d4:50:13:c3:3f:93:06:
                    a2:62:83:58:a8:6f:e7:38:30:74:d5:ee:86:cf:7c:
                    6c:d1:cc:19:b1:4c:cf:ab:99:68:be:f7:36:5a:dd:
                    a4:55:1a:aa:2f:ff:86:6b:9e:b6:db:4c:4e:96:15:
                    d3:d8:7e:04:7e:d2:4a:08:f1:9e:0a:e4:81:d6:af:
                    df:2f:29:5a:a1:31:41:7c:47:b1:0e:07:74:aa:2c:
                    f5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D7:20:B1:EF:FF:FB:5E:A6:9D:6A:AD:1E:C0:7B:C9:1C:91:36:53
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF6BC1C2E22811F0A84730EEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:a8:9f:f6:39:9e:27:4a:8f:15:68:37:18:f4:3b:bb:59:0d:
         9e:77:8c:88:03:c7:9a:14:56:54:aa:b6:a9:0f:4d:02:9d:d8:
         69:64:37:c5:eb:e9:20:73:f7:74:37:c1:df:bf:5c:2c:95:7e:
         ed:6c:13:fb:08:9a:10:d3:62:e5:e2:a5:1a:a7:25:56:79:37:
         65:c1:86:9a:02:cb:fd:3f:d9:7c:f0:ce:7f:4f:76:ad:2a:0d:
         55:11:df:a2:17:2c:c3:5c:d6:58:50:71:72:db:dc:ab:c2:da:
         ed:ab:eb:4f:c0:4e:3c:8b:dd:52:f9:be:8b:21:f2:a4:5b:1a:
         c3:4b:b2:db:b6:6f:f8:9b:4a:84:c3:68:95:4e:8f:80:19:57:
         c4:cd:44:b1:99:be:e5:e9:22:23:1e:9b:af:d2:aa:b4:3e:82:
         e6:61:8c:ca:cd:23:70:86:f7:b5:ad:3d:09:b0:03:c4:9f:31:
         7c:e3:3b:b4:23:3b:6d:54:0f:d6:64:f8:87:d4:1d:e1:bb:3d:
         d9:f3:cd:79:d9:6d:2c:88:ea:e6:48:e1:96:79:07:6e:ad:f7:
         ee:b7:47:aa:b5:9b:4c:60:47:e9:78:17:35:c1:d4:ce:7b:44:
         f6:a3:c2:a7:fa:d9:3e:f5:66:e6:f8:de:5a:3e:aa:46:5a:2b:
         27:d4:48:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:28:31 2025 by rpki-client