This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/168EEF7EDA7511F09C8B5092DAE4EC9C.roa
File:                     168EEF7EDA7511F09C8B5092DAE4EC9C.roa (raw, json)
Hash identifier:          P1V5uIYLTWlC2J3YQNUX5e0kcUumkKhvpch/tj7dgGk=
Subject key identifier:   F9:CE:26:D1:BB:B4:9C:13:88:89:D0:B7:4E:46:75:2E:B6:01:DE:19
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018EF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/168EEF7EDA7511F09C8B5092DAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 11:48:08 +0000
ROA not before:           Tue 16 Dec 2025 11:48:03 +0000
ROA not after:            Sat 16 Dec 2028 11:48:03 +0000
asID:                     17561
IP address blocks:        156.242.71.0/24 maxlen: 24
                          156.242.72.0/24 maxlen: 24
                          156.242.73.0/24 maxlen: 24
                          156.242.74.0/24 maxlen: 24
                          156.242.75.0/24 maxlen: 24
                          156.242.76.0/24 maxlen: 24
                          156.242.77.0/24 maxlen: 24
                          156.242.78.0/24 maxlen: 24
                          156.242.79.0/24 maxlen: 24
                          156.242.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102130 (0x18ef2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 16 11:48:03 2025 GMT
            Not After : Dec 16 11:48:03 2028 GMT
        Subject: CN=694146f7-a5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:32:a4:5b:38:8f:18:32:a9:6c:c7:cf:75:
                    56:ce:9c:26:f8:0a:ad:08:30:87:52:6b:49:5f:9a:
                    2e:8d:a6:57:39:23:cc:33:fc:c8:5c:9d:59:ee:12:
                    89:70:05:8d:60:18:1a:37:c0:ff:3d:25:54:74:cd:
                    60:f4:41:1f:2f:74:f1:89:f3:e9:7c:93:56:4c:fe:
                    57:f6:d7:b4:da:6e:4b:f9:b3:dd:c4:6e:c7:1a:f2:
                    4a:36:40:1a:ba:3a:e2:ca:6d:05:a7:ab:9f:57:21:
                    02:04:c1:ce:55:e8:8f:dc:73:0f:e2:4c:6f:c4:cb:
                    bf:f5:1b:56:05:99:1b:9b:fb:78:8e:aa:72:bf:5a:
                    37:fe:3a:6f:0e:78:2c:3a:0d:73:ea:e9:47:de:91:
                    05:d5:4d:1f:83:90:02:dd:7a:b5:9e:98:78:4a:dc:
                    33:5e:b8:38:83:57:b7:88:c1:10:59:2a:fb:1d:53:
                    69:5a:2e:20:eb:e2:17:71:7b:3a:20:65:61:24:5d:
                    6e:7f:f5:da:14:19:44:ed:3e:95:c1:9c:22:d3:89:
                    c2:1d:fb:59:e0:95:48:ac:81:cc:9a:3b:5b:20:65:
                    dc:88:a5:54:8c:99:0c:c1:12:0c:b6:67:ca:8d:07:
                    19:32:99:e2:15:80:98:8c:69:bb:b1:f3:b2:08:3f:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CE:26:D1:BB:B4:9C:13:88:89:D0:B7:4E:46:75:2E:B6:01:DE:19
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/168EEF7EDA7511F09C8B5092DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.71.0-156.242.79.255
                  156.242.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:a4:7a:c1:21:e5:be:37:8d:fa:9b:b9:b8:28:46:b5:ba:f3:
         ca:0c:66:80:5a:28:c8:d4:1e:53:b9:dd:83:c1:af:07:38:6f:
         49:1e:e7:33:69:f5:02:15:a7:98:a4:16:7e:2a:1f:3d:fd:cf:
         c4:b5:24:b6:0a:bf:51:d1:7c:35:1d:85:30:a6:54:43:e6:ce:
         70:bf:30:82:27:cb:27:be:94:86:35:a5:7a:95:41:4e:03:48:
         9e:29:f8:a9:eb:25:90:18:50:7d:ed:3f:ab:35:2f:95:06:ad:
         b4:8d:84:49:54:20:b8:91:b6:5d:2b:aa:45:d7:3f:4c:50:ce:
         5d:a2:52:66:64:c3:b6:41:76:a2:66:09:25:43:7e:a6:cc:82:
         10:47:6a:0a:dd:4e:a4:a9:b2:3b:4b:2a:44:23:78:e5:dc:d9:
         3f:eb:b2:07:55:9d:f6:1e:91:83:b2:2a:01:2f:d8:5b:99:17:
         de:42:c8:f6:af:20:b8:94:f7:0c:6e:52:ba:39:43:11:0b:19:
         2b:42:24:e4:8c:24:29:14:3b:a6:4f:41:db:04:dc:b1:47:2b:
         86:f7:e3:bf:a4:78:4d:a3:34:66:cf:3b:29:ce:e3:be:9c:45:
         18:90:6f:1f:2d:52:b2:94:ab:9d:58:95:68:fe:c8:b0:5b:fe:
         f9:ba:79:4f
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAY7yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjE2MTE0ODAzWhcNMjgxMjE2MTE0ODAzWjAYMRYw
FAYDVQQDEw02OTQxNDZmNy1hNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwS4ypFs4jxgyqWzHz3VWzpwm+AqtCDCHUmtJX5oujaZXOSPMM/zIXJ1Z
7hKJcAWNYBgaN8D/PSVUdM1g9EEfL3TxifPpfJNWTP5X9te02m5L+bPdxG7HGvJK
NkAaujriym0Fp6ufVyECBMHOVeiP3HMP4kxvxMu/9RtWBZkbm/t4jqpyv1o3/jpv
DngsOg1z6ulH3pEF1U0fg5AC3Xq1nph4StwzXrg4g1e3iMEQWSr7HVNpWi4g6+IX
cXs6IGVhJF1uf/XaFBlE7T6VwZwi04nCHftZ4JVIrIHMmjtbIGXciKVUjJkMwRIM
tmfKjQcZMpniFYCYjGm7sfOyCD+qvwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPnO
JtG7tJwTiInQt05GdS62Ad4ZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNjhFRUY3RURBNzUxMUYwOUM4QjUwOTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACc8kcDBASc8kADBACc8lEw
DQYJKoZIhvcNAQELBQADggEBAJKkesEh5b43jfqbubgoRrW688oMZoBaKMjUHlO5
3YPBrwc4b0ke5zNp9QIVp5ikFn4qHz39z8S1JLYKv1HRfDUdhTCmVEPmznC/MIIn
yye+lIY1pXqVQU4DSJ4p+KnrJZAYUH3tP6s1L5UGrbSNhElUILiRtl0rqkXXP0xQ
zl2iUmZkw7ZBdqJmCSVDfqbMghBHagrdTqSpsjtLKkQjeOXc2T/rsgdVnfYekYOy
KgEv2FuZF95CyPavILiU9wxuUro5QxELGStCJOSMJCkUO6ZPQdsE3LFHK4b347+k
eE2jNGbPOynO476cRRiQbx8tUrKUq51YlWj+yLBb/vm6eU8=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:42:17 2025 by rpki-client