This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC70F074E03A11F0B88DD8BADAE4EC9C.roa
File:                     CC70F074E03A11F0B88DD8BADAE4EC9C.roa (raw, json)
Hash identifier:          3L2g2bUi1wCOki6kjrgp7OqikzRWT/B/UikSQxji55w=
Subject key identifier:   AE:EF:D1:68:99:EE:CD:99:1E:99:7C:F6:FA:13:79:A6:7A:E2:36:01
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019113
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC70F074E03A11F0B88DD8BADAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 20:05:59 +0000
ROA not before:           Tue 23 Dec 2025 20:05:55 +0000
ROA not after:            Wed 28 Jan 2026 20:05:55 +0000
asID:                     44559
IP address blocks:        156.246.245.0/24 maxlen: 24
                          156.246.246.0/24 maxlen: 24
                          156.246.247.0/24 maxlen: 24
                          156.246.248.0/24 maxlen: 24
                          156.246.249.0/24 maxlen: 24
                          156.246.250.0/24 maxlen: 24
                          156.246.251.0/24 maxlen: 24
                          156.246.252.0/24 maxlen: 24
                          156.246.253.0/24 maxlen: 24
                          156.246.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102675 (0x19113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 20:05:55 2025 GMT
            Not After : Jan 28 20:05:55 2026 GMT
        Subject: CN=694af627-f265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:dd:8d:c9:4c:ad:6b:43:0b:78:30:20:b9:
                    40:1f:c8:2f:17:6f:18:80:e8:1c:49:56:10:19:49:
                    b5:98:4c:c7:01:48:78:a8:67:fe:c3:11:bd:a7:47:
                    1c:11:a9:3f:13:16:5a:40:5d:a9:79:9f:9b:3b:fd:
                    a4:fc:94:b6:36:4b:4c:54:a2:ea:b4:29:44:24:b4:
                    16:12:85:fb:6d:65:a2:37:a9:7a:88:a6:86:f1:75:
                    01:43:ce:b5:20:68:0d:e7:97:4e:0a:37:a6:cf:bf:
                    d8:4e:5e:65:1f:47:d8:4a:68:5f:e1:2a:05:81:d9:
                    4f:5d:fb:97:17:a8:73:35:7f:63:0a:a5:99:ca:bb:
                    d2:4a:c9:fb:54:c1:04:a9:a7:95:35:6d:c5:eb:21:
                    42:34:61:cd:ae:41:5d:16:05:7a:76:5a:f5:c0:33:
                    68:05:d2:de:cd:eb:23:0d:f0:a8:e6:55:18:8a:a8:
                    7f:af:87:05:bb:86:2c:6c:70:a2:da:58:41:20:b1:
                    40:d3:7f:3a:77:10:48:67:ba:de:47:f8:71:d0:f6:
                    ea:d4:6f:bd:78:36:36:43:26:fa:1a:41:26:85:3d:
                    a7:96:78:aa:61:c8:f8:52:27:72:3c:18:6b:b9:17:
                    e4:60:09:fb:41:15:62:65:2f:30:de:24:73:56:a6:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EF:D1:68:99:EE:CD:99:1E:99:7C:F6:FA:13:79:A6:7A:E2:36:01
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC70F074E03A11F0B88DD8BADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.245.0-156.246.254.255

    Signature Algorithm: sha256WithRSAEncryption
         40:89:a9:e1:a6:36:82:68:ef:02:35:9d:81:85:9f:65:20:46:
         93:c5:f5:7f:5b:6e:26:f2:7e:ba:da:53:83:d7:d1:0a:99:73:
         3e:2a:0a:c7:53:f6:2d:59:5c:86:fd:a6:e9:ee:58:df:1a:c8:
         5d:07:65:2b:07:0c:67:c5:bc:71:31:12:f2:94:c8:a2:5f:2e:
         46:d4:34:34:63:1c:84:df:35:73:8f:72:9c:14:b9:cc:6a:65:
         76:8e:51:f4:fc:be:15:b7:27:bd:2b:64:73:4e:f0:a7:2f:fb:
         1c:fe:5f:73:fe:52:91:3e:62:24:45:60:e2:ce:0d:2b:8b:8c:
         ab:68:86:b1:e5:ba:99:c0:bb:b2:01:39:ca:0e:73:87:aa:65:
         e2:9f:6b:bc:40:24:19:3d:70:20:e9:9d:4a:38:45:2e:f5:e4:
         d9:51:5e:89:04:0e:5a:29:b2:92:c3:1e:ab:b2:32:e9:e1:4b:
         8b:33:59:cd:8a:5f:5d:1d:ab:57:3b:57:b7:11:69:e0:04:6a:
         e6:78:84:34:37:bd:49:ca:4e:ab:f7:8d:8a:15:82:b1:84:8c:
         5d:59:ba:04:d6:48:e4:2a:96:8b:db:af:d6:3b:dc:fd:24:84:
         8f:67:15:5b:75:9d:0e:2c:63:64:ec:5e:63:16:8c:a9:92:2a:
         78:29:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:34 2025 by rpki-client