This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0D2001CE0DE11F0891231CADAE4EC9C.roa
File:                     F0D2001CE0DE11F0891231CADAE4EC9C.roa (raw, json)
Hash identifier:          rWMm08cgNMl4Toj0qturBaYYqP4JLnHaTZUxno1d3So=
Subject key identifier:   2C:93:8D:CB:68:AC:A9:23:38:B8:53:FE:A9:D5:22:FD:17:E3:35:A8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0191B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0D2001CE0DE11F0891231CADAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 15:40:58 +0000
ROA not before:           Wed 24 Dec 2025 15:40:53 +0000
ROA not after:            Sat 31 Jan 2026 15:40:53 +0000
asID:                     44559
IP address blocks:        156.233.43.0/24 maxlen: 24
                          156.233.46.0/24 maxlen: 24
                          156.233.49.0/24 maxlen: 24
                          156.233.50.0/24 maxlen: 24
                          156.233.52.0/24 maxlen: 24
                          156.233.53.0/24 maxlen: 24
                          156.233.55.0/24 maxlen: 24
                          156.233.57.0/24 maxlen: 24
                          156.233.59.0/24 maxlen: 24
                          156.233.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102837 (0x191b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 15:40:53 2025 GMT
            Not After : Jan 31 15:40:53 2026 GMT
        Subject: CN=694c098a-1017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:38:70:10:8e:46:b1:e4:e5:22:c7:63:8d:
                    2f:51:b6:1c:ee:bf:84:4a:86:50:5e:01:ca:fb:0f:
                    51:d1:2d:f7:18:49:3b:cc:00:bd:09:07:ac:ae:90:
                    f5:e3:c4:9f:17:f9:7d:3c:82:83:a1:7a:28:f2:a9:
                    19:db:da:f6:0e:26:5a:17:96:08:c3:73:fc:a9:a6:
                    e1:95:3b:86:ce:a2:3d:8f:aa:c7:73:4c:67:2a:11:
                    eb:5a:4b:cc:5b:3d:48:1e:dc:ed:c7:31:af:8c:08:
                    1b:b6:8e:14:9f:1b:59:30:9c:6d:bb:51:af:2a:d3:
                    29:53:04:6d:63:a4:dc:f3:63:82:49:db:a4:e6:92:
                    fa:6a:44:98:07:c7:0c:3f:86:11:8c:79:c5:86:69:
                    47:21:43:07:5f:a3:c7:7d:61:e2:71:eb:63:29:67:
                    df:a4:20:4e:a7:a5:32:9d:be:d5:19:3f:ed:83:e0:
                    a3:a7:93:5c:fe:af:92:fa:ce:83:93:11:08:6f:57:
                    ad:2d:41:d3:5c:d2:b1:9e:18:ca:27:fc:34:01:f0:
                    71:6d:6d:15:ee:7a:c2:03:31:27:77:23:44:7a:2d:
                    e1:2f:ab:d5:1c:3c:e4:9c:94:88:e9:8c:59:0d:d9:
                    04:ca:af:d7:ce:81:25:38:5e:79:da:f5:4c:0a:74:
                    da:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:93:8D:CB:68:AC:A9:23:38:B8:53:FE:A9:D5:22:FD:17:E3:35:A8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0D2001CE0DE11F0891231CADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.43.0/24
                  156.233.46.0/24
                  156.233.49.0-156.233.50.255
                  156.233.52.0/23
                  156.233.55.0/24
                  156.233.57.0/24
                  156.233.59.0/24
                  156.233.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:c5:01:28:82:f4:4a:e5:68:e8:dd:56:15:a9:3d:3b:17:71:
         69:9d:c7:2b:ed:9d:11:58:ae:c4:b0:84:98:d8:86:a2:92:a1:
         1b:c9:8f:12:36:e2:24:03:f7:ec:16:38:74:1b:ff:72:53:5c:
         d4:c9:4b:f6:42:ee:05:51:75:33:17:6d:e4:18:8b:40:b9:1f:
         6d:f2:3d:ae:fd:4b:de:4e:e8:91:e5:7f:1b:93:4b:f3:1a:21:
         d9:bf:0a:a0:d7:f1:40:c6:b9:ec:bb:38:a7:5e:46:3e:26:27:
         cd:4d:de:7b:d7:f0:f6:df:dd:85:a1:2e:d5:8e:13:e5:0c:6f:
         9e:ac:00:46:d0:1c:48:3f:8f:86:b8:cb:9f:47:47:a4:e7:87:
         05:c2:50:c4:0e:2e:59:a8:dc:5a:a1:aa:ad:60:55:ac:cc:29:
         05:1d:98:23:a5:79:fd:df:09:66:48:d8:90:75:bb:e1:0b:5b:
         7f:c2:52:84:dc:00:40:23:77:fb:2a:67:ed:c9:67:61:ac:71:
         95:3f:ac:7e:15:a6:96:3f:73:b7:bb:31:ac:fc:73:46:2e:46:
         30:c4:5d:f9:72:80:af:d8:64:72:21:1b:b8:5c:2e:65:ed:50:
         0a:7d:43:ec:6e:16:f4:a6:a6:ed:20:26:f1:17:76:93:31:be:
         59:37:51:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:34 2025 by rpki-client