This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C49301BAE0D711F0A0C0809FDAE4EC9C.roa
File:                     C49301BAE0D711F0A0C0809FDAE4EC9C.roa (raw, json)
Hash identifier:          f8YHvZkDHE/7AUXZUW6MQieZrAlV+Pih9e5iADP9olw=
Subject key identifier:   A1:F5:D8:9A:F7:74:AD:85:60:3B:22:F6:3B:30:4B:C0:E2:F6:B3:12
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01919C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C49301BAE0D711F0A0C0809FDAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 14:49:37 +0000
ROA not before:           Wed 24 Dec 2025 14:49:32 +0000
ROA not after:            Sat 31 Jan 2026 14:49:32 +0000
asID:                     44559
IP address blocks:        156.238.180.0/24 maxlen: 24
                          156.238.182.0/24 maxlen: 24
                          156.239.17.0/24 maxlen: 24
                          156.239.19.0/24 maxlen: 24
                          156.239.20.0/24 maxlen: 24
                          156.239.132.0/24 maxlen: 24
                          156.239.133.0/24 maxlen: 24
                          156.239.135.0/24 maxlen: 24
                          156.243.228.0/24 maxlen: 24
                          156.249.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102812 (0x1919c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 14:49:32 2025 GMT
            Not After : Jan 31 14:49:32 2026 GMT
        Subject: CN=694bfd81-0d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:db:ec:39:b7:7b:34:04:84:f1:4a:bb:78:6b:
                    f5:02:73:52:40:55:37:7d:d6:e0:16:0f:e3:37:06:
                    2c:10:32:7c:68:6d:a5:8a:9b:c8:09:e4:d6:19:cf:
                    19:ab:7b:c1:40:10:17:b8:f6:af:54:7c:6b:78:74:
                    5e:29:0b:86:24:41:b1:2c:09:46:33:32:39:b1:05:
                    44:d4:c7:1e:eb:c3:23:48:c5:3f:1c:a0:9a:94:9d:
                    54:42:67:d4:8f:b0:fa:fb:40:31:a7:27:3e:fa:83:
                    71:eb:1a:31:87:6b:99:5a:89:69:f6:8f:2e:4e:71:
                    2d:a2:58:f8:8a:b0:f1:3d:84:27:54:80:3f:a7:9e:
                    74:bd:7d:7d:82:16:ed:8a:c9:0a:6a:8d:ce:08:d1:
                    5c:7c:eb:b6:e6:b6:1e:2a:fa:b8:5b:fa:ad:aa:98:
                    3b:94:fa:d7:58:4e:3d:fd:8e:1d:58:78:89:91:a2:
                    45:15:60:e9:37:0d:57:38:68:2a:62:b0:4e:b9:31:
                    3b:fc:4f:14:f6:aa:4a:6d:a6:0e:91:7e:41:7b:c1:
                    3b:1f:e2:01:da:37:3d:90:5b:af:43:36:74:e2:66:
                    6f:b2:66:37:e3:6c:0c:51:6c:f9:c9:b9:8a:a5:af:
                    ea:31:23:1e:3a:9f:48:dd:c1:33:4a:9a:3a:ce:a1:
                    a6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F5:D8:9A:F7:74:AD:85:60:3B:22:F6:3B:30:4B:C0:E2:F6:B3:12
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C49301BAE0D711F0A0C0809FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.180.0/24
                  156.238.182.0/24
                  156.239.17.0/24
                  156.239.19.0-156.239.20.255
                  156.239.132.0/23
                  156.239.135.0/24
                  156.243.228.0/24
                  156.249.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:99:22:b0:87:f5:69:90:26:26:9c:ae:e7:9a:77:1c:98:b7:
         49:4f:4a:b6:75:3c:1a:17:ea:ac:fe:8d:97:4e:cd:cb:e0:09:
         3e:c5:83:9c:64:ef:c9:ad:ef:90:6d:c3:cd:58:1f:0d:af:b8:
         07:87:3b:7c:36:24:86:fe:ca:d5:1a:ba:ad:f4:c6:02:01:43:
         61:f5:a6:7a:fa:11:52:b6:f3:d1:1e:9e:6d:ee:29:ba:31:b7:
         db:02:ff:08:73:05:73:61:99:99:cd:c1:96:f8:42:d0:e6:e0:
         f3:3c:29:23:1f:84:0f:b3:3a:fc:75:6d:0f:62:75:99:80:33:
         57:0f:b9:6d:41:4d:ba:57:8b:cb:e1:42:9e:64:34:06:08:1c:
         1e:94:e5:20:63:61:f6:90:c6:3a:71:86:1a:d9:21:e3:89:b1:
         9d:29:47:e0:77:96:21:01:f1:57:99:1e:e6:88:79:0e:66:05:
         93:ba:d6:34:2e:95:dc:ff:ca:90:ec:b2:98:e1:51:80:b6:6f:
         da:19:50:3c:a7:86:35:61:07:26:9c:00:e9:7f:30:bc:52:c8:
         66:a8:b1:22:ca:9e:6a:a7:97:33:d2:e3:48:a9:18:c6:f5:8a:
         11:5a:44:58:1a:74:2a:8b:48:51:2c:89:ce:03:00:f9:db:a6:
         34:93:64:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:42 2025 by rpki-client