This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFB2F8BCD4D511F0A44576D0DAE4EC9C.roa
File:                     FFB2F8BCD4D511F0A44576D0DAE4EC9C.roa (raw, json)
Hash identifier:          s3xniqoDsP8PNihIoWxmiaj70QlIE2rLBnBuuqkiTyg=
Subject key identifier:   CD:9A:7F:A4:AF:C5:28:78:69:2B:93:16:67:66:DE:89:E9:79:CF:CE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018D31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFB2F8BCD4D511F0A44576D0DAE4EC9C.roa
Signing time:             Tue 09 Dec 2025 08:06:43 +0000
ROA not before:           Tue 09 Dec 2025 08:06:38 +0000
ROA not after:            Thu 08 Jan 2026 08:06:38 +0000
asID:                     44477
IP address blocks:        156.253.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101681 (0x18d31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  9 08:06:38 2025 GMT
            Not After : Jan  8 08:06:38 2026 GMT
        Subject: CN=6937d893-04d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:82:6c:e8:02:39:d5:04:b1:ca:af:4a:d9:21:
                    76:ae:da:58:58:12:d9:6e:b6:df:38:11:25:3e:b6:
                    7e:2f:9a:f7:ca:96:58:97:d6:da:a2:a7:97:fd:b6:
                    aa:0d:c4:5f:84:60:08:2c:28:6d:13:9d:0e:e9:28:
                    0d:de:c7:bc:5f:52:e4:60:54:23:fd:7a:05:cd:e9:
                    8b:c7:75:74:a0:ae:29:58:4e:92:3f:55:f1:6e:e1:
                    4c:35:15:b9:20:12:91:b9:36:58:6a:6c:59:1a:67:
                    cb:f3:16:05:fc:a2:16:85:cd:c7:59:9f:59:83:14:
                    c2:40:ae:1e:d6:93:d5:cf:ab:2a:1f:a6:4d:86:10:
                    65:6f:89:cf:4c:3f:f3:4d:43:52:d5:8f:4d:17:6d:
                    3a:43:8a:51:4f:84:db:96:3a:0a:a5:b0:e8:6f:86:
                    06:4a:99:64:22:27:87:d9:6f:8f:23:83:00:a5:55:
                    64:54:0a:b8:3d:29:07:1d:4a:75:80:ae:24:54:12:
                    6a:68:bf:96:7d:70:04:3e:4c:ae:38:ca:ac:6f:78:
                    be:49:c8:0d:e7:44:a0:9c:ca:e9:ef:a9:c3:dc:28:
                    29:c3:98:59:92:f7:46:9d:fc:c4:0a:61:e7:24:0e:
                    c3:04:4d:b3:dc:a3:ba:fa:40:15:c3:47:de:b1:3f:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9A:7F:A4:AF:C5:28:78:69:2B:93:16:67:66:DE:89:E9:79:CF:CE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFB2F8BCD4D511F0A44576D0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:32:ff:28:4d:9d:90:5d:27:88:ff:6d:a2:2c:98:a7:c0:f4:
         5f:67:0a:01:63:01:7f:4c:67:1f:2b:13:db:f3:1c:e6:d1:6a:
         d8:06:34:b3:d7:bb:4f:db:c9:fc:22:9c:29:28:09:cc:3f:9a:
         9b:14:79:e1:f5:2b:10:df:5e:3f:31:83:a1:a3:15:48:cc:42:
         3c:09:ca:fa:56:95:47:53:07:c3:df:e2:b1:46:7e:48:99:5f:
         a7:9a:71:83:f4:a4:22:7b:1d:12:7f:a3:fe:92:76:67:9e:14:
         29:fd:f6:a0:bd:70:31:3b:1e:59:8d:ac:f9:ac:3b:5a:34:ad:
         14:a8:12:6b:f6:6f:7f:a9:10:f5:55:32:09:c6:44:33:eb:45:
         ef:c9:a4:69:03:6c:4a:7f:44:32:a3:bc:96:62:ad:61:89:36:
         3e:5c:39:99:55:c9:a7:8d:77:17:b0:ef:f2:f9:c9:10:5d:dc:
         18:d8:d4:dd:ba:19:cf:38:75:e5:80:1e:b7:d5:4d:f7:e8:b4:
         42:48:6c:de:70:04:cd:61:70:10:cd:68:e1:fc:e0:37:58:b5:
         b0:c2:25:e2:2e:a5:d2:fb:ab:bb:f8:7d:e4:15:11:65:9b:ac:
         cc:2a:95:46:75:b0:75:2d:c5:8b:d5:89:87:83:7c:ab:3b:8e:
         6e:1e:36:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:33:47 2025 by rpki-client