This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2247A660D9CD11F081B24CEADAE4EC9C.roa
File:                     2247A660D9CD11F081B24CEADAE4EC9C.roa (raw, json)
Hash identifier:          yVZCOnaVDNky9m5ZZNR1JTt2HgVRbTlZR+QJLYJLsLs=
Subject key identifier:   F5:5F:6D:4B:C3:4F:1D:31:6D:2A:60:11:E5:72:25:AC:5B:11:34:38
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018E7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2247A660D9CD11F081B24CEADAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 15:45:52 +0000
ROA not before:           Mon 15 Dec 2025 15:45:46 +0000
ROA not after:            Sat 21 Mar 2026 15:45:46 +0000
asID:                     135377
IP address blocks:        156.229.126.0/24 maxlen: 24
                          156.229.127.0/24 maxlen: 24
                          156.229.224.0/24 maxlen: 24
                          156.229.225.0/24 maxlen: 24
                          156.229.226.0/24 maxlen: 24
                          156.229.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102012 (0x18e7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 15 15:45:46 2025 GMT
            Not After : Mar 21 15:45:46 2026 GMT
        Subject: CN=69402d30-bb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:8d:18:04:ef:be:5e:aa:17:8e:5e:72:e8:
                    54:23:40:04:36:43:bf:96:bb:d3:b0:ab:44:73:e8:
                    30:54:e7:7b:ae:ca:db:7e:d4:6f:66:23:c4:6a:fa:
                    06:6a:04:8a:09:41:5d:82:cf:be:dc:38:37:bf:62:
                    aa:fe:6a:f2:40:f9:46:f6:2e:d1:a6:8d:c8:36:01:
                    51:e3:bc:db:90:0e:c0:69:b7:49:34:d5:f2:ef:71:
                    2c:bf:dc:95:29:08:f7:12:54:bd:15:d0:17:c5:a4:
                    48:42:8f:fc:d7:66:0d:f6:b2:a8:c6:1d:de:fb:dc:
                    8e:bd:2a:bb:fb:cc:82:a4:09:82:65:e6:5d:21:a6:
                    15:a8:6d:5c:1d:89:c2:97:99:a9:dd:5e:2a:b4:95:
                    c8:8c:d7:73:ea:6c:95:5c:91:33:47:e2:6c:6f:a8:
                    58:b8:e0:44:b9:7a:83:f3:d6:07:d6:cd:2a:fe:8e:
                    2d:1c:60:0a:99:07:e7:83:fd:e8:79:6b:97:96:21:
                    0b:45:90:e1:30:c6:bb:0a:51:0c:26:9f:e6:8d:4a:
                    ff:00:0a:d8:93:42:7f:cb:ac:e5:ed:58:73:8c:11:
                    ce:ec:03:44:0e:e4:75:3e:ce:f2:bb:7a:c0:bb:a2:
                    5f:e7:7d:54:19:90:6c:bf:77:f5:a5:68:20:27:80:
                    6e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5F:6D:4B:C3:4F:1D:31:6D:2A:60:11:E5:72:25:AC:5B:11:34:38
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2247A660D9CD11F081B24CEADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.126.0/23
                  156.229.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:40:41:37:06:1e:4c:c1:b9:fe:de:57:13:1d:25:d6:3a:
         45:4e:79:ef:11:80:75:db:bc:82:97:81:be:9f:d8:51:fb:55:
         c9:6b:6a:2f:12:2b:7e:40:89:48:de:7c:41:87:65:3a:c6:1f:
         9a:98:d8:84:00:52:e6:e6:03:75:11:2e:12:00:5d:c5:3a:1b:
         37:25:5c:cb:15:61:a0:16:14:07:66:57:2c:26:55:fd:5d:29:
         f4:5d:0c:36:91:dd:d5:28:c9:93:23:f9:d0:15:77:4e:25:19:
         0d:f2:7d:d3:69:48:15:c7:65:31:71:13:b6:11:08:11:8f:b9:
         43:84:7a:59:b1:f4:fb:9c:10:5a:21:84:de:fc:7b:16:69:26:
         81:4a:ed:3e:3b:66:4b:2b:30:09:cc:31:92:ab:83:7e:3f:87:
         d4:a8:ff:fb:a0:81:e3:7d:c5:cb:4b:b6:0a:74:e7:72:ac:c8:
         eb:8a:4b:7e:0e:a8:41:b0:3d:14:67:01:ba:ab:16:01:53:6c:
         07:8f:4a:70:40:9a:f7:4f:d5:eb:37:11:86:23:8d:67:c7:bd:
         56:83:b6:ef:b7:35:b7:84:d8:10:fd:47:33:73:52:2f:f5:6d:
         d6:6d:f1:ec:b9:7e:fc:28:f5:6d:e3:2a:5c:9f:3a:0c:3e:88:
         ac:3f:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:33:45 2025 by rpki-client