This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA28D014DA5D11F092940C81DAE4EC9C.roa
File:                     AA28D014DA5D11F092940C81DAE4EC9C.roa (raw, json)
Hash identifier:          2zEeQwpOT+TvzC9cKuueclrH6EUBjmVaAEKpIVN0RS0=
Subject key identifier:   48:E3:0B:AC:B1:07:A3:3B:BE:21:C2:13:26:B2:E4:EE:30:A8:E6:50
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018EBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA28D014DA5D11F092940C81DAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 09:00:27 +0000
ROA not before:           Tue 16 Dec 2025 09:00:23 +0000
ROA not after:            Fri 16 Jan 2026 09:00:23 +0000
asID:                     22773
IP address blocks:        156.242.231.0/24 maxlen: 24
                          156.242.232.0/24 maxlen: 24
                          156.242.233.0/24 maxlen: 24
                          156.243.101.0/24 maxlen: 24
                          156.243.102.0/24 maxlen: 24
                          156.243.103.0/24 maxlen: 24
                          156.243.104.0/24 maxlen: 24
                          156.243.105.0/24 maxlen: 24
                          156.243.106.0/24 maxlen: 24
                          156.243.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102076 (0x18ebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 16 09:00:23 2025 GMT
            Not After : Jan 16 09:00:23 2026 GMT
        Subject: CN=69411fab-2f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:33:ed:e7:ff:fd:d8:63:ff:40:78:ea:4f:7d:
                    8b:dc:4a:a0:ec:27:68:b3:ca:68:41:c3:d4:8c:3d:
                    90:02:b5:1c:ea:4c:a7:12:c8:1e:ce:7b:b6:f7:ed:
                    88:75:3e:18:6b:e0:28:53:9f:86:56:a8:81:64:f9:
                    1a:cd:f8:0f:d0:fc:53:ae:0b:03:09:e5:b3:2b:bf:
                    3b:f9:c4:31:cf:94:76:f6:37:d0:38:38:dc:5c:64:
                    36:04:7c:a0:1d:2b:bc:b2:58:71:37:ab:67:a1:f0:
                    26:b3:eb:ce:1b:2a:6f:40:69:b9:1c:11:80:9c:f4:
                    49:84:de:65:12:48:05:c6:80:c1:d5:96:3f:94:8f:
                    eb:50:bf:77:72:83:28:5a:38:b8:b2:c8:f4:63:26:
                    44:4e:06:4b:f4:06:be:04:bd:4a:7a:32:67:3e:fd:
                    99:f0:65:3d:29:74:11:71:58:4c:64:24:a2:08:90:
                    1b:18:90:61:9b:b5:89:28:4a:c1:67:a1:af:45:d5:
                    5a:09:19:7c:25:f6:de:18:19:2a:42:b8:4f:e1:dc:
                    ad:82:2a:e5:12:8c:28:44:91:73:cb:5d:4c:90:11:
                    97:bd:f8:b5:9f:f6:7c:13:95:98:0c:59:f8:58:57:
                    10:8c:ca:7c:10:c6:97:2d:df:29:90:d0:00:22:a4:
                    47:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E3:0B:AC:B1:07:A3:3B:BE:21:C2:13:26:B2:E4:EE:30:A8:E6:50
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA28D014DA5D11F092940C81DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.231.0-156.242.233.255
                  156.243.101.0-156.243.107.255

    Signature Algorithm: sha256WithRSAEncryption
         7c:3e:c5:db:64:c9:cb:43:96:4e:44:b8:87:8e:a2:1e:2d:ba:
         6d:21:f3:16:8f:56:c2:fd:1e:fd:ed:f1:8f:9a:14:9c:43:68:
         33:7f:ca:39:c3:80:e7:56:a7:d0:50:af:60:06:52:fe:34:06:
         6c:b7:6d:a9:2c:ab:f9:32:68:de:0e:03:dd:65:1e:d4:b7:4a:
         f9:17:64:87:b8:9a:12:71:37:19:c4:fc:3f:f2:b1:5b:58:5c:
         ba:de:48:49:33:02:aa:81:5a:23:ed:02:a4:60:37:96:93:38:
         e9:e7:24:01:52:18:2e:84:b4:f9:11:3a:1d:51:ec:fa:a8:c8:
         4c:a2:54:14:a0:40:3e:ae:1f:e3:31:67:d6:c7:ec:00:74:2d:
         97:d8:0c:e3:86:a2:d5:25:a6:e9:cf:30:2c:5b:36:41:3b:6d:
         94:32:1d:25:0c:8e:45:f0:f7:5e:17:19:93:12:ef:ea:01:67:
         3a:a8:8f:33:c0:d4:b5:e0:15:2d:f9:26:7f:80:b4:7f:84:3f:
         28:5d:7e:71:7b:74:a3:73:94:91:a2:12:2d:4f:fc:94:b3:ac:
         73:70:65:31:de:ee:19:60:3c:a4:2b:b5:2b:7d:6a:05:47:7a:
         3d:21:48:54:96:46:e4:d1:0a:61:87:79:c2:24:be:15:b8:0a:
         82:cd:b1:4e
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAY68MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjE2MDkwMDIzWhcNMjYwMTE2MDkwMDIzWjAYMRYw
FAYDVQQDEw02OTQxMWZhYi0yZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9zPt5//92GP/QHjqT32L3Eqg7Cdos8poQcPUjD2QArUc6kynEsgeznu2
9+2IdT4Ya+AoU5+GVqiBZPkazfgP0PxTrgsDCeWzK787+cQxz5R29jfQODjcXGQ2
BHygHSu8slhxN6tnofAms+vOGypvQGm5HBGAnPRJhN5lEkgFxoDB1ZY/lI/rUL93
coMoWji4ssj0YyZETgZL9Aa+BL1KejJnPv2Z8GU9KXQRcVhMZCSiCJAbGJBhm7WJ
KErBZ6GvRdVaCRl8JfbeGBkqQrhP4dytgirlEowoRJFzy11MkBGXvfi1n/Z8E5WY
DFn4WFcQjMp8EMaXLd8pkNAAIqRHuwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFEjj
C6yxB6M7viHCEyay5O4wqOZQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQTI4RDAxNERBNUQxMUYwOTI5NDBDODFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACc8ucDBAGc8ugwDAMEAJzz
ZQMEApzzaDANBgkqhkiG9w0BAQsFAAOCAQEAfD7F22TJy0OWTkS4h46iHi26bSHz
Fo9Wwv0e/e3xj5oUnENoM3/KOcOA51an0FCvYAZS/jQGbLdtqSyr+TJo3g4D3WUe
1LdK+Rdkh7iaEnE3GcT8P/KxW1hcut5ISTMCqoFaI+0CpGA3lpM46eckAVIYLoS0
+RE6HVHs+qjITKJUFKBAPq4f4zFn1sfsAHQtl9gM44ai1SWm6c8wLFs2QTttlDId
JQyORfD3XhcZkxLv6gFnOqiPM8DUteAVLfkmf4C0f4Q/KF1+cXt0o3OUkaISLU/8
lLOsc3BlMd7uGWA8pCu1K31qBUd6PSFIVJZG5NEKYYd5wiS+FbgKgs2xTg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:42:21 2025 by rpki-client