This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4091FB68D9B711F09C375BE4DAE4EC9C.roa
File:                     4091FB68D9B711F09C375BE4DAE4EC9C.roa (raw, json)
Hash identifier:          c77r6rZb13qriR8aVsphXDeIHAQvL+8TzOgYhfiP35s=
Subject key identifier:   5D:FE:EE:3D:B2:2F:7F:8B:A9:31:51:42:2A:27:11:89:78:37:07:A5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018E4C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4091FB68D9B711F09C375BE4DAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 13:09:14 +0000
ROA not before:           Mon 15 Dec 2025 13:09:09 +0000
ROA not after:            Tue 03 Mar 2026 13:09:09 +0000
asID:                     399077
IP address blocks:        156.251.52.0/24 maxlen: 24
                          156.251.53.0/24 maxlen: 24
                          156.251.54.0/24 maxlen: 24
                          156.251.55.0/24 maxlen: 24
                          156.251.56.0/24 maxlen: 24
                          156.251.57.0/24 maxlen: 24
                          156.251.58.0/24 maxlen: 24
                          156.251.60.0/24 maxlen: 24
                          156.251.62.0/24 maxlen: 24
                          156.251.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101964 (0x18e4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 15 13:09:09 2025 GMT
            Not After : Mar  3 13:09:09 2026 GMT
        Subject: CN=6940087a-1040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ad:8e:a4:06:11:91:02:95:7d:d3:25:96:57:
                    1b:86:9b:58:f1:56:00:45:66:34:e8:2d:a6:14:8a:
                    d3:56:33:20:03:49:ec:73:d6:ae:2a:45:12:3b:9b:
                    9f:99:8f:5e:05:d6:8c:41:7c:15:bc:2d:34:b5:90:
                    d3:0b:d2:13:28:7e:d8:5c:d4:cd:85:e8:e9:21:a9:
                    a6:97:bc:57:1a:17:64:be:a8:3e:4f:9b:f7:fd:b3:
                    63:f8:de:83:47:20:b7:53:77:f8:b7:84:29:12:f8:
                    6a:68:0a:96:cf:48:65:41:e5:15:e7:10:7b:1e:f9:
                    d7:88:34:ca:ca:da:63:64:40:ba:2c:31:86:83:80:
                    b7:66:3d:be:b7:a5:5a:b5:92:7a:a7:31:54:08:5e:
                    1c:34:76:49:84:95:70:e1:b3:21:7c:23:58:bf:92:
                    7f:bf:6f:a7:0c:b8:8a:31:28:d1:7a:4a:81:a2:bf:
                    5b:4b:de:06:1a:24:1b:c8:27:38:7c:a1:c8:6d:05:
                    01:6e:57:28:46:b9:3c:97:4d:71:9c:58:0d:4d:f0:
                    96:b7:8e:0c:95:32:2f:e1:d0:28:9d:60:14:cd:64:
                    44:53:45:e4:6d:a0:ab:78:00:b6:9f:8d:5b:90:da:
                    35:37:ae:ac:f3:55:6a:46:c0:36:df:50:49:c6:f6:
                    ce:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FE:EE:3D:B2:2F:7F:8B:A9:31:51:42:2A:27:11:89:78:37:07:A5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4091FB68D9B711F09C375BE4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.52.0-156.251.58.255
                  156.251.60.0/24
                  156.251.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:1d:13:e9:d7:f4:65:df:1f:73:49:63:6e:9a:3f:f3:03:9f:
         7f:ef:69:a5:76:2d:86:e3:7d:81:4c:0c:d2:ba:2c:37:e4:16:
         62:22:01:8d:f2:e6:58:02:08:94:7d:64:f7:f3:7a:99:17:cd:
         21:3e:a2:2d:7f:82:49:04:d1:0a:69:0d:7f:a5:eb:32:46:2f:
         06:88:f8:c9:e1:7d:c9:e3:2d:bd:a8:6f:68:b0:96:1b:dd:16:
         34:78:17:16:49:ed:0b:07:7e:65:ff:b6:f2:81:31:3a:dd:4a:
         ce:e3:bc:88:59:cc:11:0b:0c:4f:e6:ef:07:cd:22:f3:f2:3e:
         da:4c:1d:6e:3e:0f:4a:d3:1f:cd:85:ca:44:79:32:54:ac:1c:
         54:3a:21:8e:9e:5b:ea:70:dd:7e:3c:97:ab:1f:1b:95:32:24:
         28:7f:68:2c:94:73:98:d1:eb:c6:54:eb:29:33:23:0b:51:c4:
         0c:a3:9e:df:ab:22:6d:af:11:d7:e1:09:3f:d9:56:be:2c:fc:
         8c:84:32:e6:1d:bc:1d:0e:9f:1b:c6:ee:fa:ff:22:8b:70:35:
         d1:3d:85:10:40:81:4e:bd:da:bd:dc:fa:1c:f7:cb:f4:62:44:
         ca:3d:09:3d:71:c4:67:d5:a6:e1:97:69:cc:5a:f7:78:8d:91:
         34:d2:5f:05
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAY5MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjE1MTMwOTA5WhcNMjYwMzAzMTMwOTA5WjAYMRYw
FAYDVQQDEw02OTQwMDg3YS0xMDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoK2OpAYRkQKVfdMlllcbhptY8VYARWY06C2mFIrTVjMgA0nsc9auKkUS
O5ufmY9eBdaMQXwVvC00tZDTC9ITKH7YXNTNhejpIamml7xXGhdkvqg+T5v3/bNj
+N6DRyC3U3f4t4QpEvhqaAqWz0hlQeUV5xB7HvnXiDTKytpjZEC6LDGGg4C3Zj2+
t6VatZJ6pzFUCF4cNHZJhJVw4bMhfCNYv5J/v2+nDLiKMSjRekqBor9bS94GGiQb
yCc4fKHIbQUBblcoRrk8l01xnFgNTfCWt44MlTIv4dAonWAUzWREU0XkbaCreAC2
n41bkNo1N66s81VqRsA231BJxvbOowIDAQABo4ICtjCCArIwHQYDVR0OBBYEFF3+
7j2yL3+LqTFRQionEYl4NwelMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MDkxRkI2OEQ5QjcxMUYwOUMzNzVCRTREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAKc+zQDBACc+zoDBACc+zwD
BAGc+z4wDQYJKoZIhvcNAQELBQADggEBAK4dE+nX9GXfH3NJY26aP/MDn3/vaaV2
LYbjfYFMDNK6LDfkFmIiAY3y5lgCCJR9ZPfzepkXzSE+oi1/gkkE0QppDX+l6zJG
LwaI+MnhfcnjLb2ob2iwlhvdFjR4FxZJ7QsHfmX/tvKBMTrdSs7jvIhZzBELDE/m
7wfNIvPyPtpMHW4+D0rTH82FykR5MlSsHFQ6IY6eW+pw3X48l6sfG5UyJCh/aCyU
c5jR68ZU6ykzIwtRxAyjnt+rIm2vEdfhCT/ZVr4s/IyEMuYdvB0OnxvG7vr/Iotw
NdE9hRBAgU692r3c+hz3y/RiRMo9CT1xxGfVpuGXacxa93iNkTTSXwU=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:12 2025 by rpki-client