This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD599680D06511F0A56A3DF6DAE4EC9C.roa
File:                     AD599680D06511F0A56A3DF6DAE4EC9C.roa (raw, json)
Hash identifier:          FfRdBvK0uGN6/7xVu9mD9V5+O1vFo9vjhgDGJ3LQfrk=
Subject key identifier:   5B:9A:82:F1:D9:5A:DC:FB:DD:E9:88:2A:D3:CE:21:2D:2B:BA:80:6C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018BDB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD599680D06511F0A56A3DF6DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 16:32:37 +0000
ROA not before:           Wed 03 Dec 2025 16:32:30 +0000
ROA not after:            Thu 01 Jan 2026 16:32:30 +0000
asID:                     984
IP address blocks:        156.242.80.0/24 maxlen: 24
                          156.242.89.0/24 maxlen: 24
                          156.242.90.0/24 maxlen: 24
                          156.242.92.0/24 maxlen: 24
                          156.242.93.0/24 maxlen: 24
                          156.249.175.0/24 maxlen: 24
                          156.249.177.0/24 maxlen: 24
                          156.249.179.0/24 maxlen: 24
                          156.249.196.0/24 maxlen: 24
                          156.252.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101339 (0x18bdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  3 16:32:30 2025 GMT
            Not After : Jan  1 16:32:30 2026 GMT
        Subject: CN=69306625-4f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cc:5e:99:05:de:9b:df:74:a9:24:5c:7a:30:
                    e1:37:d3:08:9e:a8:86:0d:15:cf:bf:67:42:91:fb:
                    e5:39:85:0a:bf:20:ff:f4:43:84:8d:2a:47:3b:bc:
                    6b:b4:7d:31:a0:ea:9c:34:fb:4d:9a:c9:5a:0b:d2:
                    a4:66:c7:99:f1:c5:20:79:79:86:9b:73:4a:77:2f:
                    f0:c9:46:b5:f2:cd:57:77:f3:a2:fa:92:1d:fc:96:
                    71:ca:95:c2:c9:b2:9f:0d:6a:43:aa:d8:ad:07:70:
                    81:0d:51:c0:65:4f:33:2d:1c:60:50:97:67:c8:44:
                    c3:ee:85:5c:40:ae:34:83:c9:1f:88:90:39:7d:15:
                    54:b4:42:3e:36:f0:25:1f:d7:dc:d1:6b:05:ce:b0:
                    e2:3a:74:d6:8b:8f:29:26:ce:0f:08:8c:3a:ca:f0:
                    e1:8f:de:28:05:03:19:db:b7:83:74:5e:a1:24:a0:
                    15:e9:4b:7a:2a:d3:8b:3c:d0:d3:32:bd:31:9b:4b:
                    82:40:5e:4d:82:7d:88:3e:83:e9:4d:58:57:91:4b:
                    cf:7c:e7:70:41:39:5a:e3:46:4d:61:bf:b6:5c:23:
                    0d:81:99:c5:44:26:0b:1a:80:84:28:38:2d:69:cb:
                    f0:bf:9f:bd:29:e5:28:17:7a:20:bc:23:70:97:3b:
                    16:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9A:82:F1:D9:5A:DC:FB:DD:E9:88:2A:D3:CE:21:2D:2B:BA:80:6C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD599680D06511F0A56A3DF6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.80.0/24
                  156.242.89.0-156.242.90.255
                  156.242.92.0/23
                  156.249.175.0/24
                  156.249.177.0/24
                  156.249.179.0/24
                  156.249.196.0/24
                  156.252.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:d6:d1:04:49:48:15:d1:f3:b3:8b:7a:a2:9c:07:c7:c1:50:
         97:12:94:76:19:fd:81:30:1a:e8:72:92:bf:cb:7e:d5:dd:e4:
         d5:0b:86:8d:a8:97:bd:cf:e5:cb:c3:5d:dd:dd:d3:30:eb:2e:
         66:6e:83:12:5d:24:94:5d:38:a3:91:e3:63:5b:a9:a1:20:5e:
         e0:ad:cd:07:8d:e6:58:dc:e6:c9:5c:67:85:93:02:35:3b:d9:
         c7:2d:10:48:33:0b:6f:ad:66:d4:a9:f1:48:d8:be:fa:cf:ad:
         d7:6a:da:39:fd:e8:10:19:52:5f:4f:f1:94:65:92:97:e8:8d:
         df:c8:9c:9b:a0:38:e4:fe:32:88:23:c5:f0:fb:83:db:27:a3:
         c9:44:18:bf:9f:4d:42:56:da:38:cd:2c:af:3e:86:38:54:0c:
         03:ec:52:11:5f:86:7b:9a:37:bc:e5:15:52:66:8c:69:f5:79:
         b2:8f:14:b2:2d:b0:29:34:94:ca:7d:3f:95:b6:12:62:d3:c8:
         e0:20:93:23:58:00:38:2a:1a:ba:6f:a3:2a:c0:08:93:9f:fa:
         e3:0e:f9:bd:a3:34:14:ae:ff:24:d8:c8:16:6d:fc:14:de:c6:
         9f:f3:4b:98:3f:cc:48:8d:d4:83:42:c6:15:94:ae:0f:e4:e6:
         b8:77:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:14 2025 by rpki-client