This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F83F0664E46811F0BA2FEA7DDAE4EC9C.roa
File:                     F83F0664E46811F0BA2FEA7DDAE4EC9C.roa (raw, json)
Hash identifier:          /Fp4nz022ccw8nRS0e8S3W2OC3XUBe6/2pqezpq23uI=
Subject key identifier:   57:D6:3E:49:29:D0:2C:A1:CA:4F:15:E3:BE:9B:5D:DA:27:B3:A6:79
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0192A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F83F0664E46811F0BA2FEA7DDAE4EC9C.roa
Signing time:             Mon 29 Dec 2025 03:46:34 +0000
ROA not before:           Mon 29 Dec 2025 03:46:29 +0000
ROA not after:            Tue 13 Jan 2026 03:46:29 +0000
asID:                     134365
IP address blocks:        156.245.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103080 (0x192a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 29 03:46:29 2025 GMT
            Not After : Jan 13 03:46:29 2026 GMT
        Subject: CN=6951f99a-b36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f9:72:2d:4e:e3:72:e4:14:2d:39:e4:02:9c:
                    2a:42:d8:ca:c8:ad:8b:61:50:d0:01:aa:a3:30:f7:
                    d7:9b:e9:da:97:a5:61:b4:85:aa:fa:0b:98:86:cd:
                    a0:4e:f7:23:17:4f:3b:fd:23:31:23:71:d3:c9:ed:
                    93:9c:27:dd:c3:70:46:28:27:4c:82:8c:db:f4:8e:
                    67:79:6c:92:16:e5:8e:c2:ed:7a:4b:17:7d:9d:9c:
                    7c:f4:9b:71:8e:53:58:97:6e:44:cb:27:ca:32:be:
                    75:dd:0c:3d:c3:8c:f5:5d:93:65:e9:95:9d:4d:ab:
                    86:47:b9:62:8e:d5:c2:ab:5a:cc:6d:99:ca:49:a9:
                    57:c7:44:8c:67:60:ee:87:1e:24:22:8f:f1:68:7a:
                    e1:ef:47:a2:d0:60:12:46:d5:d1:29:b3:d3:00:a4:
                    36:69:a1:b2:a9:2a:b0:f1:67:81:e4:cf:c5:78:30:
                    4f:7e:4a:5d:0f:7f:79:7d:16:dc:c9:31:5b:52:e9:
                    7b:3e:95:0e:ea:c1:a4:e7:1d:cf:13:bb:6e:f8:f2:
                    3d:2a:ce:23:d3:82:cb:62:a3:60:b6:f2:fe:10:13:
                    51:69:25:99:9e:35:a3:ad:3d:58:b9:8d:5e:e2:06:
                    f4:92:23:9c:5c:03:ee:35:0b:5e:98:14:a6:b3:9a:
                    c8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D6:3E:49:29:D0:2C:A1:CA:4F:15:E3:BE:9B:5D:DA:27:B3:A6:79
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F83F0664E46811F0BA2FEA7DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:fb:a4:95:88:00:92:c5:1c:d3:fa:11:24:ef:d1:f6:27:fc:
         b5:2c:20:54:5a:64:31:a6:0c:f7:af:4d:93:29:d0:1f:95:d0:
         c8:67:1e:92:e1:49:46:5e:f3:09:12:d7:e2:5f:28:15:51:87:
         bc:69:4c:05:0f:3f:1e:bd:af:b5:76:a5:09:e8:9d:82:c4:11:
         25:61:91:1b:e2:8e:70:24:54:3d:f2:e9:ac:7c:8e:8e:8c:79:
         79:94:25:cb:49:be:99:62:db:87:b4:c5:2e:32:46:8f:57:ae:
         ce:f3:c2:2e:cd:ca:7b:9c:b5:91:35:b4:90:d3:0a:9e:c7:17:
         09:63:2f:fd:85:8c:fe:48:f9:67:e0:fd:99:50:85:93:cf:1f:
         92:62:6b:e6:e3:7a:1b:24:f4:7f:ad:f1:84:a8:c6:01:82:79:
         ac:64:5f:38:ee:fc:4c:19:94:f5:fb:76:6d:38:96:5a:a1:27:
         0c:30:92:7a:4f:8e:c4:4e:f9:0a:62:0c:42:5d:50:85:82:a3:
         10:b7:45:d8:bd:ba:d4:c5:65:50:59:4d:53:11:0f:4a:c1:34:
         c8:a5:12:2e:5e:c8:15:b0:44:30:bd:fc:a2:0e:40:3f:2e:45:
         ac:04:9c:05:c0:b7:e5:5b:89:c3:4e:1d:66:ff:2e:6a:ee:cf:
         65:6a:51:97
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZKoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjI5MDM0NjI5WhcNMjYwMTEzMDM0NjI5WjAYMRYw
FAYDVQQDEw02OTUxZjk5YS1iMzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1flyLU7jcuQULTnkApwqQtjKyK2LYVDQAaqjMPfXm+nal6VhtIWq+guY
hs2gTvcjF087/SMxI3HTye2TnCfdw3BGKCdMgozb9I5neWySFuWOwu16Sxd9nZx8
9JtxjlNYl25EyyfKMr513Qw9w4z1XZNl6ZWdTauGR7lijtXCq1rMbZnKSalXx0SM
Z2Duhx4kIo/xaHrh70ei0GASRtXRKbPTAKQ2aaGyqSqw8WeB5M/FeDBPfkpdD395
fRbcyTFbUul7PpUO6sGk5x3PE7tu+PI9Ks4j04LLYqNgtvL+EBNRaSWZnjWjrT1Y
uY1e4gb0kiOcXAPuNQtemBSms5rIfQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFfW
Pkkp0Cyhyk8V476bXdons6Z5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GODNGMDY2NEU0NjgxMUYwQkEyRkVBN0REQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPXIMA0GCSqGSIb3DQEBCwUA
A4IBAQB1+6SViACSxRzT+hEk79H2J/y1LCBUWmQxpgz3r02TKdAfldDIZx6S4UlG
XvMJEtfiXygVUYe8aUwFDz8eva+1dqUJ6J2CxBElYZEb4o5wJFQ98umsfI6OjHl5
lCXLSb6ZYtuHtMUuMkaPV67O88Iuzcp7nLWRNbSQ0wqexxcJYy/9hYz+SPln4P2Z
UIWTzx+SYmvm43obJPR/rfGEqMYBgnmsZF847vxMGZT1+3ZtOJZaoScMMJJ6T47E
TvkKYgxCXVCFgqMQt0XYvbrUxWVQWU1TEQ9KwTTIpRIuXsgVsEQwvfyiDkA/LkWs
BJwFwLflW4nDTh1m/y5q7s9lalGX
-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:04 2025 by rpki-client