This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB4CA2C4DB1B11F0989133ABDAE4EC9C.roa
File:                     DB4CA2C4DB1B11F0989133ABDAE4EC9C.roa (raw, json)
Hash identifier:          XXxmByt3CuqXn/vtX1Ft3GlDCrt3WlRWL0JFis3Qo/U=
Subject key identifier:   EC:86:54:00:54:72:B0:0A:ED:25:90:CC:E4:4E:19:EC:D5:AD:9C:B4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018F25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB4CA2C4DB1B11F0989133ABDAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 07:41:54 +0000
ROA not before:           Wed 17 Dec 2025 07:41:49 +0000
ROA not after:            Fri 16 Jan 2026 07:41:49 +0000
asID:                     22773
IP address blocks:        156.242.234.0/24 maxlen: 24
                          156.242.235.0/24 maxlen: 24
                          156.242.236.0/24 maxlen: 24
                          156.242.237.0/24 maxlen: 24
                          156.242.238.0/24 maxlen: 24
                          156.242.239.0/24 maxlen: 24
                          156.242.240.0/24 maxlen: 24
                          156.243.115.0/24 maxlen: 24
                          156.243.192.0/24 maxlen: 24
                          156.243.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102181 (0x18f25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 07:41:49 2025 GMT
            Not After : Jan 16 07:41:49 2026 GMT
        Subject: CN=69425ec2-1c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:53:58:c6:a4:f0:87:9b:de:0b:af:48:be:
                    ec:8c:ef:e2:81:e6:7e:32:b4:51:8b:ca:41:51:7f:
                    15:1f:c0:fd:b7:49:57:aa:9f:a6:d8:7f:73:63:fa:
                    ef:7c:ba:43:a1:31:e3:85:b9:c5:58:ae:61:7c:1b:
                    58:5d:d1:58:e1:6d:27:04:fa:5e:c8:76:ce:f4:8d:
                    eb:e2:dc:bb:77:af:70:18:f1:04:5d:32:20:2e:5e:
                    84:20:e3:4f:36:bb:1f:44:cd:96:eb:75:23:80:9c:
                    42:43:67:39:87:6b:25:a6:72:bf:c8:0b:d4:bc:b9:
                    99:67:2a:15:07:01:a5:78:2f:96:21:ce:37:59:b5:
                    7f:3f:11:96:13:3d:88:d4:cd:77:82:3a:0c:87:79:
                    e3:91:06:7e:bf:2a:a3:8d:c7:d0:6b:24:f2:95:68:
                    79:b2:7c:f1:fc:41:0a:36:99:28:38:e6:34:e3:d2:
                    54:10:41:39:7a:21:53:b1:c6:fa:75:b6:ff:88:6f:
                    48:d4:ce:ed:d1:7d:82:4f:0f:09:9a:52:0a:6b:0e:
                    10:09:eb:ec:98:ba:a3:e9:e9:ba:1b:cf:f6:63:b3:
                    18:29:5e:f0:81:6a:34:50:a6:53:23:89:df:b1:a3:
                    d0:9b:38:0c:7a:84:01:a3:c7:f5:3d:60:e5:89:81:
                    1f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:86:54:00:54:72:B0:0A:ED:25:90:CC:E4:4E:19:EC:D5:AD:9C:B4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB4CA2C4DB1B11F0989133ABDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.234.0-156.242.240.255
                  156.243.115.0/24
                  156.243.192.0/24
                  156.243.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:8e:40:6e:76:07:0f:00:9a:64:3b:e2:5d:28:e2:c1:ce:08:
         86:ba:db:de:34:d9:15:ca:10:d0:ee:a2:2a:90:77:fb:66:fe:
         e4:d2:27:a0:bf:ef:20:35:5d:bd:a4:1b:46:9c:c8:4e:07:2c:
         72:b2:05:42:0d:8b:33:fb:bd:0d:dc:1f:4b:2a:89:c4:21:f6:
         4d:07:d2:42:c1:3c:5d:12:81:e2:0b:84:2b:a1:4b:93:05:68:
         56:41:29:52:b9:c9:fb:64:c6:ca:1d:3d:f3:2f:34:82:ce:0b:
         6e:94:2c:d6:20:34:e5:4b:b2:56:c1:d6:40:aa:ca:59:d5:83:
         c1:53:47:8a:30:6e:a2:ca:dd:23:c8:e7:f1:f4:70:d2:65:bd:
         3c:e7:7a:31:48:0d:63:f6:90:ae:ff:d4:9e:9b:f7:c1:05:4a:
         db:df:70:ef:47:ce:c4:03:a2:75:23:8b:71:99:01:c6:64:68:
         93:d3:56:f5:c3:d3:55:b7:17:8b:da:16:25:24:5f:20:c5:96:
         67:2b:d7:85:3a:02:92:c2:f5:6d:e7:85:f7:5a:42:7a:35:fc:
         0a:6b:3a:d8:75:6a:ab:49:c7:ba:be:48:3e:ba:d7:c0:42:97:
         2c:94:07:f0:ad:3e:96:09:b7:0e:a0:b1:24:01:0f:97:ae:a6:
         6a:30:2f:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:19 2025 by rpki-client