This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EF177B0DBE411F0A60C1293DAE4EC9C.roa
File:                     7EF177B0DBE411F0A60C1293DAE4EC9C.roa (raw, json)
Hash identifier:          t3Fg/ffy4duCOwvxFIaMmgxKSvIK5ms0W+JHan1YWzc=
Subject key identifier:   ED:98:24:79:67:C8:85:69:37:2E:55:7B:12:EE:20:29:8C:0E:B9:81
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018FCF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EF177B0DBE411F0A60C1293DAE4EC9C.roa
Signing time:             Thu 18 Dec 2025 07:38:08 +0000
ROA not before:           Thu 18 Dec 2025 07:38:03 +0000
ROA not after:            Sun 28 Dec 2025 07:38:03 +0000
asID:                     18013
IP address blocks:        156.239.232.0/21 maxlen: 24
                          156.239.233.0/24 maxlen: 24
                          156.239.234.0/23 maxlen: 24
                          156.239.234.0/24 maxlen: 24
                          156.239.235.0/24 maxlen: 24
                          156.239.236.0/22 maxlen: 24
                          156.239.236.0/23 maxlen: 24
                          156.239.236.0/24 maxlen: 24
                          156.239.237.0/24 maxlen: 24
                          156.239.238.0/23 maxlen: 24
                          156.239.238.0/24 maxlen: 24
                          156.239.239.0/24 maxlen: 24
                          156.239.240.0/20 maxlen: 24
                          156.239.240.0/21 maxlen: 24
                          156.239.240.0/22 maxlen: 24
                          156.239.240.0/23 maxlen: 24
                          156.239.240.0/24 maxlen: 24
                          156.239.241.0/24 maxlen: 24
                          156.239.242.0/23 maxlen: 24
                          156.239.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102351 (0x18fcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 18 07:38:03 2025 GMT
            Not After : Dec 28 07:38:03 2025 GMT
        Subject: CN=6943af60-2da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:69:23:a6:ee:4d:64:c1:85:8e:b1:c7:bd:9b:
                    be:1a:f8:c6:06:db:5d:83:cc:7a:ed:fb:f4:7e:74:
                    54:7f:89:41:a1:d5:bb:c6:64:10:9e:ec:30:2b:11:
                    9e:19:2d:a7:6e:66:86:17:4c:4f:0b:61:69:c1:a7:
                    10:b1:48:eb:d6:0e:6a:91:8e:e7:89:d3:94:6f:d9:
                    cc:c5:a1:3e:5c:25:4c:dc:a4:fd:fe:1c:01:4d:14:
                    14:38:35:02:f9:9f:ef:7a:05:19:82:6a:9a:e0:b9:
                    d9:a9:0b:43:be:91:40:ab:61:da:dc:d8:9d:93:f0:
                    27:b6:1f:38:42:5c:5b:51:15:2a:14:03:24:d2:b7:
                    cf:56:ab:96:02:0a:aa:f8:e7:f9:e8:d6:68:4c:3f:
                    9d:5a:7e:09:be:4c:3c:df:09:06:bb:c0:d3:fc:82:
                    51:f7:f3:a2:0e:34:ca:b6:07:09:18:27:0d:00:34:
                    4c:b6:dc:95:f2:59:36:90:bf:9a:b0:b2:98:6e:32:
                    19:39:90:90:60:d0:ea:0c:d0:6b:a5:7b:dc:9f:ac:
                    ff:d8:e7:66:f6:26:39:47:25:f0:82:d0:99:c4:bb:
                    4b:69:a2:a4:2c:58:6b:ec:c2:bc:fb:db:dd:ad:5f:
                    06:71:f1:8a:0d:d2:f9:05:0b:7d:76:27:d3:ee:68:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:98:24:79:67:C8:85:69:37:2E:55:7B:12:EE:20:29:8C:0E:B9:81
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EF177B0DBE411F0A60C1293DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.232.0-156.239.255.255

    Signature Algorithm: sha256WithRSAEncryption
         10:a9:6d:6d:37:6c:12:c6:d6:da:01:36:cf:36:7b:8d:12:a7:
         df:1c:19:77:27:05:94:71:f6:0a:2a:74:6f:58:a2:4f:ed:bb:
         2f:65:d7:f0:0b:09:0a:32:27:ad:4e:2a:b2:6f:e8:81:18:fa:
         d5:18:71:92:57:01:bc:80:72:cb:20:d7:12:8a:4d:eb:c2:97:
         f8:50:8f:3d:b1:40:b8:7e:9d:c0:6a:d2:25:15:f3:7b:4f:bb:
         1d:06:f5:bc:4c:99:2f:7f:4a:bf:20:fc:2c:12:25:91:3c:b2:
         86:a7:b2:fd:2e:fe:04:18:c5:6a:b4:d2:51:3d:01:12:c5:87:
         76:81:6a:67:61:5a:a4:a7:b4:32:b9:eb:46:3b:09:8d:32:f4:
         1f:c6:ad:4e:db:7d:fa:41:5f:45:35:f8:48:d3:73:a9:6a:15:
         ae:61:07:7f:a7:78:bc:ce:b6:a3:81:66:e6:90:21:03:f2:1e:
         1e:24:00:85:4f:26:14:2b:b4:86:65:6b:d6:2d:ff:59:c6:ee:
         46:fb:4a:6f:a9:0c:36:02:98:d2:a4:76:3e:44:88:0c:f4:89:
         04:c8:4e:91:c5:dd:d5:29:26:5e:0a:43:ca:ec:89:56:ae:16:
         7b:b8:4b:79:9e:92:8e:79:9f:d5:c6:c6:22:f5:6d:11:2c:e6:
         d4:c7:ac:6d
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIDAY/PMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjE4MDczODAzWhcNMjUxMjI4MDczODAzWjAYMRYw
FAYDVQQDEw02OTQzYWY2MC0yZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2Wkjpu5NZMGFjrHHvZu+GvjGBttdg8x67fv0fnRUf4lBodW7xmQQnuww
KxGeGS2nbmaGF0xPC2FpwacQsUjr1g5qkY7nidOUb9nMxaE+XCVM3KT9/hwBTRQU
ODUC+Z/vegUZgmqa4LnZqQtDvpFAq2Ha3Nidk/Anth84QlxbURUqFAMk0rfPVquW
Agqq+Of56NZoTD+dWn4Jvkw83wkGu8DT/IJR9/OiDjTKtgcJGCcNADRMttyV8lk2
kL+asLKYbjIZOZCQYNDqDNBrpXvcn6z/2Odm9iY5RyXwgtCZxLtLaaKkLFhr7MK8
+9vdrV8GcfGKDdL5BQt9difT7mgxPwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFO2Y
JHlnyIVpNy5VexLuICmMDrmBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RUYxNzdCMERCRTQxMUYwQTYwQzEyOTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAOc7+gDAwSc4DANBgkqhkiG
9w0BAQsFAAOCAQEAEKltbTdsEsbW2gE2zzZ7jRKn3xwZdycFlHH2Cip0b1iiT+27
L2XX8AsJCjInrU4qsm/ogRj61RhxklcBvIByyyDXEopN68KX+FCPPbFAuH6dwGrS
JRXze0+7HQb1vEyZL39KvyD8LBIlkTyyhqey/S7+BBjFarTSUT0BEsWHdoFqZ2Fa
pKe0MrnrRjsJjTL0H8atTtt9+kFfRTX4SNNzqWoVrmEHf6d4vM62o4Fm5pAhA/Ie
HiQAhU8mFCu0hmVr1i3/WcbuRvtKb6kMNgKY0qR2PkSIDPSJBMhOkcXd1SkmXgpD
yuyJVq4We7hLeZ6Sjnmf1cbGIvVtESzm1MesbQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:12 2025 by rpki-client