This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F7907B0DA5811F0B5C9B1DFDAE4EC9C.roa
File:                     4F7907B0DA5811F0B5C9B1DFDAE4EC9C.roa (raw, json)
Hash identifier:          sb8mYykBeBHHtJOwTxNju0cd9cEzQy4xlNHwpTTMy6U=
Subject key identifier:   74:5D:9D:5F:C5:B9:B0:57:6F:23:4D:70:97:FD:D9:95:D6:A7:81:A5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018EA6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F7907B0DA5811F0B5C9B1DFDAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 08:22:08 +0000
ROA not before:           Tue 16 Dec 2025 08:22:03 +0000
ROA not after:            Fri 16 Jan 2026 08:22:03 +0000
asID:                     22773
IP address blocks:        156.233.214.0/24 maxlen: 24
                          156.233.215.0/24 maxlen: 24
                          156.233.220.0/24 maxlen: 24
                          156.233.221.0/24 maxlen: 24
                          156.233.222.0/24 maxlen: 24
                          156.233.223.0/24 maxlen: 24
                          156.233.240.0/24 maxlen: 24
                          156.233.241.0/24 maxlen: 24
                          156.233.242.0/24 maxlen: 24
                          156.238.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102054 (0x18ea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 16 08:22:03 2025 GMT
            Not After : Jan 16 08:22:03 2026 GMT
        Subject: CN=694116b0-4d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:99:3f:ea:17:d6:67:bd:8b:76:2e:93:95:
                    03:f4:91:1f:43:16:24:fa:85:b4:68:65:70:79:a8:
                    86:b7:65:4c:65:42:76:a8:26:f2:07:43:94:f9:41:
                    89:1e:35:21:3e:2e:0e:88:db:67:9c:55:f2:1f:73:
                    80:c8:ff:d7:a6:18:54:16:63:39:c9:4b:26:d5:10:
                    2a:2a:ee:74:35:ac:c0:4e:57:24:6e:4f:c8:c9:0c:
                    d3:b1:c7:6d:43:16:2e:27:0a:48:a5:d1:57:17:ee:
                    5d:63:8e:d9:32:9f:b5:21:88:fb:12:d4:98:33:43:
                    83:cf:5e:01:1a:73:49:03:be:02:5c:43:3f:57:d5:
                    49:e8:6d:9b:ea:76:8c:6c:4b:49:04:35:5e:2b:05:
                    69:3b:e2:38:0d:f4:fd:6b:8b:b2:a0:1c:ac:d5:f5:
                    db:52:4e:77:63:14:a6:63:35:e7:ef:d1:fc:31:cd:
                    cf:c8:77:9c:f1:ec:a2:aa:e7:e7:05:7a:76:aa:ae:
                    e4:24:b3:30:e3:cb:70:a4:29:3a:ef:b3:26:f8:47:
                    f5:54:27:7e:04:6e:51:37:af:8c:1e:c5:49:88:3c:
                    d9:42:6f:f9:dc:6d:8d:0a:a6:22:71:5d:38:f2:ea:
                    8c:72:d5:e6:6a:20:70:94:9c:52:50:83:06:f6:a3:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5D:9D:5F:C5:B9:B0:57:6F:23:4D:70:97:FD:D9:95:D6:A7:81:A5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F7907B0DA5811F0B5C9B1DFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.214.0/23
                  156.233.220.0/22
                  156.233.240.0-156.233.242.255
                  156.238.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:99:48:21:40:1a:5d:c2:90:f2:b4:51:91:b3:63:85:01:70:
         7e:a3:8f:d3:6c:14:82:2a:6e:73:0e:11:23:43:c4:9b:0c:14:
         11:27:ce:45:37:0e:94:94:96:ea:54:6d:da:9e:1d:1e:06:4b:
         b7:b8:4e:7e:49:90:23:cf:87:32:79:98:dc:60:70:43:e8:22:
         25:00:b8:74:d2:ac:e6:67:0e:a2:49:1f:08:cc:92:8e:ff:61:
         91:3d:69:df:2f:db:57:15:0e:12:8e:1b:05:bf:f5:7d:d8:7d:
         45:04:05:1f:62:e3:07:a5:c3:f8:9e:d9:b1:86:1a:27:76:27:
         6d:64:16:c3:cc:69:7f:ac:33:30:6a:2a:ad:a0:96:f8:96:db:
         a1:72:26:1d:e8:2c:12:51:bd:cc:2a:c9:d8:3e:84:11:88:b3:
         43:46:19:83:ac:c3:2c:9b:90:5c:ad:2b:e0:27:6f:b1:c1:a4:
         fa:23:fd:a5:82:bb:0c:c2:87:0d:02:e2:22:3d:d6:4e:b3:24:
         16:7d:0d:f5:d2:8e:44:0d:74:58:2b:1c:69:ae:09:4a:9f:3f:
         aa:97:ce:fe:9c:4d:9c:4d:8d:1e:4d:d7:66:b4:d4:f6:d3:28:
         b3:da:df:6b:8e:bd:4b:22:fb:0d:05:31:1f:f5:d4:84:77:c8:
         ff:53:94:5e
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIDAY6mMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjE2MDgyMjAzWhcNMjYwMTE2MDgyMjAzWjAYMRYw
FAYDVQQDEw02OTQxMTZiMC00ZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAok6ZP+oX1me9i3Yuk5UD9JEfQxYk+oW0aGVweaiGt2VMZUJ2qCbyB0OU
+UGJHjUhPi4OiNtnnFXyH3OAyP/XphhUFmM5yUsm1RAqKu50NazATlckbk/IyQzT
scdtQxYuJwpIpdFXF+5dY47ZMp+1IYj7EtSYM0ODz14BGnNJA74CXEM/V9VJ6G2b
6naMbEtJBDVeKwVpO+I4DfT9a4uyoBys1fXbUk53YxSmYzXn79H8Mc3PyHec8eyi
qufnBXp2qq7kJLMw48twpCk677Mm+Ef1VCd+BG5RN6+MHsVJiDzZQm/53G2NCqYi
cV048uqMctXmaiBwlJxSUIMG9qMADwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFHRd
nV/FubBXbyNNcJf92ZXWp4GlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80Rjc5MDdCMERBNTgxMUYwQjVDOUIxREZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBnOnWAwQCnOncMAwDBASc6fAD
BACc6fIDBACc7pAwDQYJKoZIhvcNAQELBQADggEBAKmZSCFAGl3CkPK0UZGzY4UB
cH6jj9NsFIIqbnMOESNDxJsMFBEnzkU3DpSUlupUbdqeHR4GS7e4Tn5JkCPPhzJ5
mNxgcEPoIiUAuHTSrOZnDqJJHwjMko7/YZE9ad8v21cVDhKOGwW/9X3YfUUEBR9i
4welw/ie2bGGGid2J21kFsPMaX+sMzBqKq2glviW26FyJh3oLBJRvcwqydg+hBGI
s0NGGYOswyybkFytK+Anb7HBpPoj/aWCuwzChw0C4iI91k6zJBZ9DfXSjkQNdFgr
HGmuCUqfP6qXzv6cTZxNjR5N12a01PbTKLPa32uOvUsi+w0FMR/11IR3yP9TlF4=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:41:42 2025 by rpki-client