This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/889EECA0E16D11F08794B3D2DAE4EC9C.roa
File:                     889EECA0E16D11F08794B3D2DAE4EC9C.roa (raw, json)
Hash identifier:          +c+J7+eSF4fC2lrbcOo1tYGPMcf6ugG/e2ttxJPuP0M=
Subject key identifier:   F4:7C:68:28:CB:71:69:A8:20:C0:60:22:59:DC:89:B0:50:D8:9B:78
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019201
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/889EECA0E16D11F08794B3D2DAE4EC9C.roa
Signing time:             Thu 25 Dec 2025 08:41:41 +0000
ROA not before:           Thu 25 Dec 2025 08:41:36 +0000
ROA not after:            Sat 31 Jan 2026 08:41:36 +0000
asID:                     44559
IP address blocks:        156.243.191.0/24 maxlen: 24
                          156.243.216.0/24 maxlen: 24
                          156.243.217.0/24 maxlen: 24
                          156.243.219.0/24 maxlen: 24
                          156.243.220.0/24 maxlen: 24
                          156.243.221.0/24 maxlen: 24
                          156.243.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102913 (0x19201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 25 08:41:36 2025 GMT
            Not After : Jan 31 08:41:36 2026 GMT
        Subject: CN=694cf8c5-a671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:89:3c:a1:68:79:cb:c5:07:6c:d5:92:a9:
                    ce:e4:f8:c0:5a:77:52:70:f2:66:f5:e8:2f:7c:26:
                    52:34:1f:3a:0d:0c:6f:f8:66:20:65:e9:c5:59:d7:
                    8b:54:75:2b:03:ce:94:60:14:32:0a:b3:19:78:f1:
                    b8:fe:79:05:be:5b:e6:12:6b:4b:8c:a3:b7:8e:ec:
                    f1:53:f7:4a:0f:bd:16:25:9e:03:a1:10:88:87:d6:
                    b3:1f:c8:b1:47:b4:37:3b:e7:fc:83:27:66:7d:9a:
                    e5:1e:e1:6f:4f:98:df:53:39:c3:77:00:2c:ac:ad:
                    1b:79:f6:94:c3:c1:6b:ae:d2:51:40:19:8f:4c:66:
                    7b:7d:05:a8:29:b0:db:8f:a3:62:81:e1:3c:55:1d:
                    fd:7f:91:ce:98:10:da:fe:2a:48:41:a0:7b:71:b9:
                    47:dd:2e:44:88:47:20:59:76:c4:9e:af:ad:12:f0:
                    95:39:a4:5e:67:a5:73:1f:23:f3:b5:77:32:f8:65:
                    3d:41:a3:38:11:77:82:96:5b:b1:e8:b2:4a:67:14:
                    71:21:3e:c2:34:4e:65:21:a0:fa:4e:5d:93:2a:b5:
                    9c:68:48:af:e4:dd:e8:17:ba:4e:7d:74:30:a7:10:
                    b3:b9:70:4f:67:5c:f8:f3:d5:f6:40:90:08:70:e0:
                    54:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7C:68:28:CB:71:69:A8:20:C0:60:22:59:DC:89:B0:50:D8:9B:78
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/889EECA0E16D11F08794B3D2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.191.0/24
                  156.243.216.0/23
                  156.243.219.0-156.243.222.255

    Signature Algorithm: sha256WithRSAEncryption
         51:b8:4f:3b:06:f7:61:7d:06:43:9a:81:20:58:e7:fb:09:f9:
         ab:8b:1b:9c:15:89:61:b9:99:d5:31:e4:69:54:d0:e2:2d:62:
         ea:71:f0:8d:cd:97:f7:15:b7:56:57:97:6c:b2:02:58:87:c0:
         0b:e3:b1:df:46:27:a5:5f:42:78:0e:c4:c0:5c:ae:16:66:fb:
         77:2e:5d:72:4b:70:d2:6d:ec:ac:c5:19:2d:8b:21:fd:72:8f:
         f6:76:2b:08:01:78:a1:7b:6c:4e:70:f4:7c:fc:43:02:6b:fa:
         26:49:24:58:97:df:0c:4b:b6:f9:8d:c3:67:6f:6d:1a:13:d3:
         6e:3e:55:a3:ab:cd:89:97:81:98:6c:5d:d1:7e:70:cd:4e:9f:
         1a:64:ea:88:22:2a:58:8c:76:25:17:82:c5:21:7e:ab:23:5f:
         c1:68:ca:95:38:ac:18:91:80:36:86:76:59:06:10:7e:38:0b:
         e2:3a:da:92:64:7b:4c:63:6f:aa:63:c2:c6:af:25:7c:87:cf:
         7e:68:90:06:f6:38:c8:f8:14:ef:97:e2:61:06:63:73:9c:4e:
         93:79:26:8c:b1:18:0d:ad:56:db:c6:e0:7d:ad:19:c9:85:ca:
         fc:c1:88:e3:2d:1c:7b:3d:e1:01:f4:76:16:49:da:69:f1:29:
         59:eb:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:39 2025 by rpki-client