This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89EDDABEDB5811F08434D0A0DAE4EC9C.roa
File:                     89EDDABEDB5811F08434D0A0DAE4EC9C.roa (raw, json)
Hash identifier:          q2gxn7V7J/b155WwMuBdY+uwckc4jwMidFrj/NEUW6E=
Subject key identifier:   C3:73:A5:7B:26:C1:A8:A6:E3:46:29:52:7D:B6:79:C9:9D:B0:06:CD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018F89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89EDDABEDB5811F08434D0A0DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 14:56:17 +0000
ROA not before:           Wed 17 Dec 2025 14:56:12 +0000
ROA not after:            Fri 26 Dec 2025 14:56:12 +0000
asID:                     23764
IP address blocks:        156.242.4.0/24 maxlen: 24
                          156.242.6.0/24 maxlen: 24
                          156.242.7.0/24 maxlen: 24
                          156.242.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102281 (0x18f89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 14:56:12 2025 GMT
            Not After : Dec 26 14:56:12 2025 GMT
        Subject: CN=6942c491-f345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:c5:a4:64:b9:b9:7e:84:1d:95:13:1a:6a:
                    5b:d4:1a:b5:52:31:86:c6:9d:97:97:0f:da:c4:d8:
                    d4:27:8b:3d:60:10:79:b8:8d:b3:a5:bb:de:91:81:
                    12:6b:83:d6:55:81:87:b7:3f:9f:db:ca:c1:28:62:
                    ee:b6:09:47:52:c1:1b:db:86:e6:0c:b2:47:cc:f5:
                    ec:84:50:5f:1d:3b:ac:f0:d2:21:60:a2:f3:04:8f:
                    56:9d:0a:2b:4d:db:ad:80:ec:da:15:55:4b:09:2c:
                    3a:01:f0:7d:60:90:8b:ed:2a:10:d9:ed:a3:da:e9:
                    13:57:38:31:34:9c:8a:81:57:49:a5:f0:92:52:a0:
                    3d:ad:f3:a1:d2:5b:2e:46:49:8b:f6:3b:75:73:70:
                    d2:44:52:71:b0:6f:30:76:ae:20:74:84:50:ee:0a:
                    54:f0:de:23:c4:ee:0f:77:18:4b:2c:3a:51:2f:52:
                    62:a8:1d:b0:97:c7:18:d3:13:4a:6b:39:a1:00:83:
                    63:f7:e9:a8:00:00:aa:cd:f6:8b:8c:0d:ec:bd:fe:
                    1e:23:14:4b:00:3a:a8:e2:bb:a7:c4:0c:d4:96:35:
                    19:a8:8b:24:14:b8:7e:23:58:4a:6d:74:d0:80:78:
                    5d:88:ea:11:4f:08:1b:60:3a:97:76:41:c8:fb:21:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:73:A5:7B:26:C1:A8:A6:E3:46:29:52:7D:B6:79:C9:9D:B0:06:CD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89EDDABEDB5811F08434D0A0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.4.0/24
                  156.242.6.0-156.242.8.255

    Signature Algorithm: sha256WithRSAEncryption
         27:ce:88:32:a4:7f:34:ba:62:be:42:6c:82:b4:69:15:61:33:
         3b:1c:ff:60:eb:d0:d0:50:d3:bf:97:59:9d:95:bf:c2:37:2b:
         38:bd:7c:62:e4:b9:f1:a5:26:49:3b:c4:07:34:87:45:51:5f:
         9e:78:00:ec:9e:b4:37:29:de:3c:66:a6:54:7f:72:8d:ec:3a:
         83:be:3f:8a:8d:d6:21:dd:92:e2:c4:5e:21:fb:11:9a:04:a4:
         21:9d:be:ef:b0:0a:04:15:50:45:f5:74:c2:d4:a6:f0:0d:8b:
         ff:21:1f:72:d5:77:0a:b9:49:57:89:71:6f:55:2e:ce:2a:d8:
         f4:39:b5:de:c7:49:40:17:74:32:45:08:d2:6d:7c:82:ca:14:
         99:91:78:0d:37:34:ec:f4:0f:0e:8b:d7:7b:4c:c1:18:44:49:
         02:a1:9e:31:df:cf:15:b9:04:51:29:eb:ef:03:4c:9b:9d:ba:
         7e:12:10:09:46:71:27:39:31:76:6b:0d:87:42:42:93:50:2d:
         77:cc:15:4d:c7:fd:89:30:00:6e:3a:ee:1a:f7:ad:50:aa:4a:
         48:54:62:55:1c:e2:ec:30:94:72:5d:fd:74:37:67:09:9e:30:
         ae:27:0b:3e:25:e3:6d:4f:a9:5f:d1:dc:71:d8:ca:21:fb:dd:
         c9:b9:1b:74
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAY+JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjE3MTQ1NjEyWhcNMjUxMjI2MTQ1NjEyWjAYMRYw
FAYDVQQDEw02OTQyYzQ5MS1mMzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArRjFpGS5uX6EHZUTGmpb1Bq1UjGGxp2Xlw/axNjUJ4s9YBB5uI2zpbve
kYESa4PWVYGHtz+f28rBKGLutglHUsEb24bmDLJHzPXshFBfHTus8NIhYKLzBI9W
nQorTdutgOzaFVVLCSw6AfB9YJCL7SoQ2e2j2ukTVzgxNJyKgVdJpfCSUqA9rfOh
0lsuRkmL9jt1c3DSRFJxsG8wdq4gdIRQ7gpU8N4jxO4PdxhLLDpRL1JiqB2wl8cY
0xNKazmhAINj9+moAACqzfaLjA3svf4eIxRLADqo4runxAzUljUZqIskFLh+I1hK
bXTQgHhdiOoRTwgbYDqXdkHI+yHrDwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFMNz
pXsmwaim40YpUn22ecmdsAbNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84OUVEREFCRURCNTgxMUYwODQzNEQwQTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAnPIEMAwDBAGc8gYDBACc8ggw
DQYJKoZIhvcNAQELBQADggEBACfOiDKkfzS6Yr5CbIK0aRVhMzsc/2Dr0NBQ07+X
WZ2Vv8I3Kzi9fGLkufGlJkk7xAc0h0VRX554AOyetDcp3jxmplR/co3sOoO+P4qN
1iHdkuLEXiH7EZoEpCGdvu+wCgQVUEX1dMLUpvANi/8hH3LVdwq5SVeJcW9VLs4q
2PQ5td7HSUAXdDJFCNJtfILKFJmReA03NOz0Dw6L13tMwRhESQKhnjHfzxW5BFEp
6+8DTJudun4SEAlGcSc5MXZrDYdCQpNQLXfMFU3H/YkwAG467hr3rVCqSkhUYlUc
4uwwlHJd/XQ3ZwmeMK4nCz4l421PqV/R3HHYyiH73cm5G3Q=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:16 2025 by rpki-client