This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00FA4A1ADA7911F0988D9FA9DAE4EC9C.roa
File:                     00FA4A1ADA7911F0988D9FA9DAE4EC9C.roa (raw, json)
Hash identifier:          nzLAFiXhW419eoAVcpwdLINYVjCZvIKJkatLVFAuQao=
Subject key identifier:   DF:2A:BD:9B:2E:67:2C:E7:88:71:1D:80:49:FE:27:57:47:8A:0A:DE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018EFC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00FA4A1ADA7911F0988D9FA9DAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 12:16:09 +0000
ROA not before:           Tue 16 Dec 2025 12:16:05 +0000
ROA not after:            Sat 27 Dec 2025 12:16:05 +0000
asID:                     141883
IP address blocks:        156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.242.10.0/23 maxlen: 24
                          156.242.12.0/22 maxlen: 24
                          156.246.0.0/20 maxlen: 24
                          156.246.16.0/23 maxlen: 24
                          156.249.28.0/22 maxlen: 24
                          156.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102140 (0x18efc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 16 12:16:05 2025 GMT
            Not After : Dec 27 12:16:05 2025 GMT
        Subject: CN=69414d89-5d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:bc:ee:e2:9c:57:6e:63:1d:39:d5:7e:92:ee:
                    ab:64:5c:0b:2f:1c:7c:bb:de:dd:3f:51:39:4f:5e:
                    83:45:4b:a2:ff:08:0c:8c:78:d0:78:72:76:67:5f:
                    67:cb:13:96:56:90:27:03:74:9c:02:22:d9:f3:87:
                    15:8e:65:62:51:86:c1:c6:04:a3:cc:ce:bb:83:26:
                    b3:97:a5:e6:61:9e:45:b7:ee:46:8c:45:9a:70:88:
                    a2:b0:2e:86:7b:20:6d:78:2b:e0:2a:25:1a:26:48:
                    79:fd:93:e6:eb:06:e6:d9:2d:21:f2:ba:5b:6a:6c:
                    71:8c:54:0c:58:24:6c:61:9d:86:d2:94:3b:62:71:
                    37:96:05:fc:31:f1:43:ac:80:36:1c:1c:8d:c8:c6:
                    29:c6:83:cc:2d:f1:43:2e:aa:0a:a6:82:32:83:76:
                    a7:71:e8:ef:6a:9e:28:1e:8c:6e:b7:44:e7:ff:c6:
                    90:50:fd:45:66:70:20:73:ef:25:d4:94:1e:74:49:
                    b5:f1:f8:9e:6b:53:8c:cb:bb:2e:ee:85:b3:08:42:
                    f9:39:02:ed:21:29:1c:31:b0:90:8e:56:d5:86:27:
                    42:2d:3b:c4:4c:95:14:d3:bb:91:29:4c:7c:d3:90:
                    12:f3:93:37:b6:e6:88:e1:6e:15:12:ba:b5:34:1b:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2A:BD:9B:2E:67:2C:E7:88:71:1D:80:49:FE:27:57:47:8A:0A:DE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00FA4A1ADA7911F0988D9FA9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.0.0-156.240.55.255
                  156.242.10.0-156.242.15.255
                  156.246.0.0-156.246.17.255
                  156.249.28.0/22
                  156.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:fb:5f:58:11:dc:80:e7:4d:fb:d6:5d:d6:97:1d:97:95:2d:
         60:ee:66:1d:c6:1e:4b:c2:1e:fc:49:86:d4:9a:5d:df:ea:b5:
         82:3b:74:d8:3b:83:95:bb:93:5f:de:fb:6f:c5:37:fc:ac:6a:
         84:43:bf:48:69:73:82:f3:f5:e6:2f:fc:cb:32:cc:0b:4c:9d:
         da:a7:15:a3:78:dd:0a:2f:50:3e:61:c5:39:63:aa:ea:e8:18:
         c1:7a:e3:46:a1:89:a5:5b:ed:02:41:cb:a5:df:7d:a0:9d:19:
         cd:bf:3b:1d:29:f3:97:70:59:ea:4f:5a:ce:04:ac:1a:45:d3:
         22:51:17:30:5b:f6:9c:65:e5:37:51:8a:bd:cd:7b:8a:c5:a4:
         88:16:b1:a0:ec:e4:88:50:61:77:4c:d8:07:c6:7a:29:d0:10:
         5a:74:be:6a:7e:e3:c6:7c:c8:92:3e:dd:d2:ff:0b:1f:25:2f:
         4d:92:67:03:7b:a3:cd:85:27:7c:ab:c4:39:38:f5:8f:23:b2:
         47:28:8f:3c:f3:18:c1:b4:21:59:7e:cc:ea:11:ba:24:76:53:
         fe:2f:41:f6:1a:e6:3b:42:96:1a:30:4d:4a:76:d5:dd:08:9a:
         61:1a:10:0a:cf:d7:88:f7:ef:5d:46:e2:c4:9c:b5:e6:74:94:
         88:45:1e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:33:46 2025 by rpki-client