This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0294152D59611F081EAE38BDAE4EC9C.roa
File:                     D0294152D59611F081EAE38BDAE4EC9C.roa (raw, json)
Hash identifier:          +DsGYG3pdY0ElytCyNUcm61lC2Rcvkb1KV3BI0SMbsI=
Subject key identifier:   AF:D3:30:57:6A:D2:82:D1:F2:93:A2:69:E4:4D:58:DF:F3:39:E7:6F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018D5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0294152D59611F081EAE38BDAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 07:06:57 +0000
ROA not before:           Wed 10 Dec 2025 07:06:52 +0000
ROA not after:            Thu 08 Jan 2026 07:06:52 +0000
asID:                     131471
IP address blocks:        156.238.64.0/24 maxlen: 24
                          156.238.65.0/24 maxlen: 24
                          156.238.66.0/24 maxlen: 24
                          156.238.67.0/24 maxlen: 24
                          156.238.68.0/24 maxlen: 24
                          156.238.69.0/24 maxlen: 24
                          156.238.70.0/24 maxlen: 24
                          156.238.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101723 (0x18d5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 10 07:06:52 2025 GMT
            Not After : Jan  8 07:06:52 2026 GMT
        Subject: CN=69391c11-8cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:09:75:d6:dc:c7:8e:63:7b:f2:d6:c5:45:
                    7c:8f:4c:39:2e:ac:6f:bf:74:b0:58:e4:1a:9c:cb:
                    bb:11:4c:27:af:c2:6f:05:c2:37:d8:d4:7f:19:61:
                    96:ff:06:94:06:f6:a7:27:62:88:f8:ab:d6:74:d4:
                    34:68:cc:fe:fe:42:44:9d:69:de:f5:49:cc:8c:ce:
                    09:8d:08:67:50:68:d0:92:c4:a0:4c:eb:55:b8:d8:
                    dd:af:1f:e2:9d:20:4c:02:83:bf:c8:d4:d2:13:64:
                    36:b5:54:80:c1:3c:82:90:b5:34:df:53:0e:c4:49:
                    8b:16:28:1f:02:1b:e4:13:7e:dd:47:a1:a5:01:c7:
                    73:25:e6:01:2d:6c:fc:e0:f5:8e:d8:7c:09:92:fa:
                    12:4d:19:19:8f:3d:e8:02:4c:c1:8a:e0:da:9a:70:
                    82:20:55:61:a2:4d:47:b5:4b:9a:3d:06:e6:c6:80:
                    88:22:38:43:e6:d7:e2:68:e1:2d:c6:39:66:a8:48:
                    b9:cc:e4:d3:8c:7a:32:98:1e:89:ba:9d:32:20:3e:
                    ef:60:5d:ba:8e:9b:ed:3e:bf:ac:bd:61:ff:be:ce:
                    42:e4:1b:02:da:17:65:a1:e3:78:a2:d7:74:84:85:
                    bd:96:e5:df:3d:b5:ac:7a:af:ea:64:86:78:bc:12:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D3:30:57:6A:D2:82:D1:F2:93:A2:69:E4:4D:58:DF:F3:39:E7:6F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0294152D59611F081EAE38BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:77:1a:ef:85:3e:81:43:d3:4f:21:13:32:53:b5:d7:32:1a:
         f1:74:f7:73:64:66:09:6d:d1:c1:cd:3a:20:f2:bd:d1:8c:15:
         bf:d6:d8:18:4a:82:d2:61:aa:02:19:51:14:91:2e:e3:13:5c:
         21:b4:6a:a5:be:c6:90:9e:46:f4:56:e6:b9:51:76:9b:42:bf:
         de:bd:7d:44:a4:b7:aa:38:b9:77:71:c5:3e:8d:95:67:f0:62:
         a5:34:2d:73:93:00:9c:31:a9:0c:45:a0:85:ce:8c:a6:8a:54:
         97:ab:5c:e7:7a:08:16:03:81:49:0d:e5:67:f4:ac:d3:0c:7e:
         03:81:9b:68:a4:86:70:0c:87:ce:06:b0:41:f9:f2:5d:8a:37:
         64:1a:0a:2a:a3:8a:03:7d:18:2a:7f:1a:d0:84:1c:77:17:f9:
         d7:bc:57:65:48:57:60:e5:b6:02:0c:b8:66:05:24:01:1f:aa:
         37:c7:05:33:e8:f1:b6:6a:bf:59:97:36:45:42:dc:d5:6a:42:
         9e:06:25:82:af:20:10:ac:6c:4b:f4:f6:0b:fa:27:b9:05:54:
         4b:33:8c:52:c5:fe:a0:19:b2:be:13:36:f6:74:ac:b0:e6:7d:
         5a:91:d7:48:2b:87:55:f0:7c:47:86:71:be:c0:7a:ea:79:a6:
         ca:b9:b8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:41:42 2025 by rpki-client