This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28686120D9B811F0A04BF0E8DAE4EC9C.roa
File:                     28686120D9B811F0A04BF0E8DAE4EC9C.roa (raw, json)
Hash identifier:          mDdE+vRVkhJU1Bdft/TbZYOD2LDpixEY7Qv88WLjaFw=
Subject key identifier:   71:F8:2C:60:03:C1:18:77:B9:A8:2C:E0:85:7A:23:C0:E6:56:F7:8B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018E4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28686120D9B811F0A04BF0E8DAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 13:15:43 +0000
ROA not before:           Mon 15 Dec 2025 13:15:38 +0000
ROA not after:            Tue 03 Mar 2026 13:15:38 +0000
asID:                     399077
IP address blocks:        156.251.40.0/24 maxlen: 24
                          156.251.41.0/24 maxlen: 24
                          156.251.42.0/24 maxlen: 24
                          156.251.43.0/24 maxlen: 24
                          156.251.44.0/24 maxlen: 24
                          156.251.45.0/24 maxlen: 24
                          156.251.46.0/24 maxlen: 24
                          156.251.47.0/24 maxlen: 24
                          156.251.50.0/24 maxlen: 24
                          156.251.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101966 (0x18e4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 15 13:15:38 2025 GMT
            Not After : Mar  3 13:15:38 2026 GMT
        Subject: CN=694009ff-623f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:72:d8:44:7d:f4:3a:05:47:64:85:89:10:4e:
                    ce:94:55:50:97:4b:75:a5:52:21:ac:d1:89:53:48:
                    9d:ba:d9:02:ac:6b:30:c3:93:58:00:95:36:d9:06:
                    f4:c2:0e:cb:f6:ba:6f:52:a7:43:1b:23:d1:e0:11:
                    15:e8:6f:84:c1:a7:6b:df:6f:ff:d5:3e:77:a3:70:
                    2a:b9:fd:75:b1:09:0c:2f:f0:b4:82:ee:b4:ac:9d:
                    74:c2:8c:2e:3f:a5:e9:c6:45:5c:1b:57:ac:71:ba:
                    fc:50:5b:c8:32:4e:ba:9c:dc:59:a9:3c:58:2c:22:
                    e5:64:b6:2a:b5:53:e1:6e:46:bd:7b:7e:e3:3e:9d:
                    6c:6a:b8:10:41:11:ef:62:18:75:ec:db:8c:9c:40:
                    9c:4f:a6:b0:a4:d0:2c:fe:aa:20:56:28:f9:9b:42:
                    a6:45:cc:6a:99:fd:bc:42:cf:d8:f2:93:66:4d:b6:
                    13:91:02:32:66:72:81:b6:85:32:c6:fc:57:e9:ad:
                    f7:17:80:62:db:d9:7b:ee:4b:07:4d:06:52:ee:60:
                    f7:8c:b5:12:ac:59:f1:d6:5c:8d:c9:f6:7d:27:05:
                    35:b1:96:e9:9e:f8:94:70:78:b6:0f:4f:56:61:f6:
                    55:3a:a4:92:08:74:49:c9:44:c5:e4:95:81:45:10:
                    57:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F8:2C:60:03:C1:18:77:B9:A8:2C:E0:85:7A:23:C0:E6:56:F7:8B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28686120D9B811F0A04BF0E8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.40.0/21
                  156.251.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:e4:b2:c0:9e:89:b2:99:a9:a5:cd:4c:00:f3:68:26:2e:1d:
         90:a0:14:ef:38:95:a9:45:78:dd:58:c3:11:8a:09:b5:92:a6:
         bf:55:d8:2a:78:39:7c:6f:0d:d5:e6:8a:c3:c0:e6:1f:70:13:
         f5:3e:cf:13:8a:00:d8:06:b6:55:51:40:fa:26:19:f3:66:dc:
         55:f5:0e:e7:54:ea:cf:ee:99:55:79:db:0a:12:55:91:dc:b9:
         55:14:65:db:95:d9:fb:d9:1a:71:a7:1d:32:e6:e0:38:2e:eb:
         69:cb:cb:20:1d:12:6f:cd:3f:94:98:da:c9:07:b1:a2:d3:aa:
         fb:ed:a1:73:b4:76:f8:4e:60:9b:94:3f:e2:1a:3b:a0:db:7d:
         ac:a1:94:e6:44:45:d8:77:f5:a6:bf:fa:8a:5f:53:aa:fb:f8:
         48:28:ce:04:51:ef:2a:37:07:7e:11:00:88:6d:9f:52:ed:3b:
         0b:18:6f:a1:ad:eb:3b:9f:33:82:d1:57:68:a2:67:74:47:5f:
         5e:04:22:8f:7e:ff:2e:bf:9a:57:87:ed:fc:23:c0:b8:58:cb:
         40:28:89:32:67:53:dd:62:71:36:a3:8b:a3:c2:2a:98:91:4f:
         d0:2a:39:8b:1c:5c:42:8e:d3:5e:5f:45:35:ed:87:16:1e:2a:
         b8:91:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:34:05 2025 by rpki-client