This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DF2B7FCE55211F09DBE41A0DAE4EC9C.roa
File:                     3DF2B7FCE55211F09DBE41A0DAE4EC9C.roa (raw, json)
Hash identifier:          OTjXh8GF0jBnHgPGdBja7ClY6ILKEb6wq1It0FwvS/o=
Subject key identifier:   0D:11:0D:38:65:7D:CF:6D:26:39:E2:C5:30:AA:66:4C:30:BF:18:EE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0192E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DF2B7FCE55211F09DBE41A0DAE4EC9C.roa
Signing time:             Tue 30 Dec 2025 07:36:24 +0000
ROA not before:           Tue 30 Dec 2025 07:36:19 +0000
ROA not after:            Wed 04 Feb 2026 07:36:19 +0000
asID:                     151407
IP address blocks:        156.248.11.0/24 maxlen: 24
                          156.248.12.0/24 maxlen: 24
                          156.248.13.0/24 maxlen: 24
                          156.248.14.0/24 maxlen: 24
                          156.248.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103139 (0x192e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 30 07:36:19 2025 GMT
            Not After : Feb  4 07:36:19 2026 GMT
        Subject: CN=695380f8-389e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:51:83:90:75:c6:ed:db:18:d4:7b:93:56:
                    aa:e5:ed:a3:04:11:7f:35:64:65:18:1a:80:7b:f5:
                    5c:9e:eb:ac:67:7e:de:c6:49:55:c7:df:1a:32:9d:
                    91:84:86:33:08:4d:a1:1f:29:6a:1a:8b:a3:d2:6a:
                    c0:83:f7:ef:2b:a7:c8:bf:5c:27:43:be:60:65:d8:
                    5a:cf:24:76:16:82:e8:59:94:9a:a4:86:88:ca:dd:
                    43:fd:44:7e:ed:3b:27:0e:f0:4c:02:85:b7:06:1b:
                    84:53:3b:9b:73:e9:07:fe:4b:90:d0:8f:99:cd:f4:
                    9f:05:42:49:eb:55:a8:1a:f9:49:73:a1:1d:89:c9:
                    91:5a:66:a7:4b:ed:d6:c7:8d:f1:78:4d:29:c9:56:
                    4f:f3:28:2a:5d:c4:03:7f:16:4d:88:6c:ea:d8:71:
                    c3:ce:a9:47:b7:d0:5d:bb:7a:bc:53:e3:54:de:73:
                    74:02:aa:4d:07:c6:3f:32:a2:93:cb:e8:bd:cf:63:
                    6b:06:c1:66:68:bb:b9:dd:73:d8:39:5f:52:dc:eb:
                    56:30:f8:c0:a6:c9:c2:22:08:c8:ae:b9:08:30:89:
                    d6:4c:ee:d2:05:fe:a9:2d:fe:dd:ef:1a:96:ea:84:
                    e2:02:35:5c:58:8a:0d:b9:08:26:c0:fd:bb:6b:9a:
                    e1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:11:0D:38:65:7D:CF:6D:26:39:E2:C5:30:AA:66:4C:30:BF:18:EE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DF2B7FCE55211F09DBE41A0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.248.11.0-156.248.15.255

    Signature Algorithm: sha256WithRSAEncryption
         31:9d:3c:45:f9:14:09:62:b8:5d:9e:59:63:b3:24:8a:d9:08:
         47:90:e7:16:d7:96:2f:f8:41:82:63:23:e4:70:2c:8d:01:5d:
         b1:58:13:24:e3:5b:ad:e6:99:c2:de:f0:ca:b9:ff:32:0b:44:
         77:e7:ed:58:7d:6e:3d:6a:b1:9d:f8:45:9a:76:80:1c:32:3a:
         6c:f7:21:4e:7d:8e:0e:94:b9:41:43:11:3d:37:1c:00:33:88:
         52:33:a3:27:cd:f7:cd:86:e2:6d:34:f8:27:e0:77:f7:05:fa:
         82:69:da:e0:42:9f:45:28:55:3f:76:79:1a:ab:27:2d:9c:43:
         94:5e:5a:c3:0d:cd:65:7f:37:b9:dc:53:28:b9:36:a3:e5:47:
         28:6b:8a:9e:c3:85:20:8c:6b:32:11:8a:d5:2d:ca:95:4a:0b:
         a9:9d:fd:c4:3f:66:8b:71:2d:7b:ab:fe:59:96:ee:45:ed:7b:
         f5:50:57:f1:95:1f:bb:a9:a2:2e:ee:75:06:03:6f:5a:8d:64:
         a6:0b:a7:ed:ba:43:75:25:ad:c9:47:32:c6:93:05:e1:60:67:
         46:7b:ef:db:9d:21:4b:cf:da:0b:cf:3a:61:ec:00:75:4b:cc:
         02:b6:e6:2c:d2:c0:1d:49:9c:90:6f:ed:a2:9e:1f:35:8d:dc:
         5c:be:87:73
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAZLjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjMwMDczNjE5WhcNMjYwMjA0MDczNjE5WjAYMRYw
FAYDVQQDEw02OTUzODBmOC0zODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwbhRg5B1xu3bGNR7k1aq5e2jBBF/NWRlGBqAe/VcnuusZ37exklVx98a
Mp2RhIYzCE2hHylqGouj0mrAg/fvK6fIv1wnQ75gZdhazyR2FoLoWZSapIaIyt1D
/UR+7TsnDvBMAoW3BhuEUzubc+kH/kuQ0I+ZzfSfBUJJ61WoGvlJc6EdicmRWman
S+3Wx43xeE0pyVZP8ygqXcQDfxZNiGzq2HHDzqlHt9Bdu3q8U+NU3nN0AqpNB8Y/
MqKTy+i9z2NrBsFmaLu53XPYOV9S3OtWMPjApsnCIgjIrrkIMInWTO7SBf6pLf7d
7xqW6oTiAjVcWIoNuQgmwP27a5rhZwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFA0R
DThlfc9tJjnixTCqZkwwvxjuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zREYyQjdGQ0U1NTIxMUYwOURCRTQxQTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc+AsDBASc+AAwDQYJKoZI
hvcNAQELBQADggEBADGdPEX5FAliuF2eWWOzJIrZCEeQ5xbXli/4QYJjI+RwLI0B
XbFYEyTjW63mmcLe8Mq5/zILRHfn7Vh9bj1qsZ34RZp2gBwyOmz3IU59jg6UuUFD
ET03HAAziFIzoyfN982G4m00+Cfgd/cF+oJp2uBCn0UoVT92eRqrJy2cQ5ReWsMN
zWV/N7ncUyi5NqPlRyhrip7DhSCMazIRitUtypVKC6md/cQ/ZotxLXur/lmW7kXt
e/VQV/GVH7upoi7udQYDb1qNZKYLp+26Q3UlrclHMsaTBeFgZ0Z779udIUvP2gvP
OmHsAHVLzAK25izSwB1JnJBv7aKeHzWN3Fy+h3M=
-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:05 2025 by rpki-client