This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6B92466D9A311F0A7FCE3EBDAE4EC9C.roa
File:                     F6B92466D9A311F0A7FCE3EBDAE4EC9C.roa (raw, json)
Hash identifier:          F9hyPSL9LUqRtwjIN/AjcqBl+WGst2R4GQjzDPlaia4=
Subject key identifier:   B9:B3:B3:0A:00:06:FC:06:87:25:B9:0A:66:37:AB:68:02:5A:8F:37
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018E42
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6B92466D9A311F0A7FCE3EBDAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 10:51:09 +0000
ROA not before:           Mon 15 Dec 2025 10:51:05 +0000
ROA not after:            Sat 17 Jan 2026 10:51:05 +0000
asID:                     22773
IP address blocks:        156.233.41.0/24 maxlen: 24
                          156.243.96.0/22 maxlen: 24
                          156.243.130.0/24 maxlen: 24
                          156.244.144.0/20 maxlen: 24
                          156.248.0.0/24 maxlen: 24
                          156.248.4.0/24 maxlen: 24
                          156.248.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101954 (0x18e42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 15 10:51:05 2025 GMT
            Not After : Jan 17 10:51:05 2026 GMT
        Subject: CN=693fe81d-8b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:79:ce:f9:54:9d:5b:29:cc:60:1f:1c:1f:
                    90:69:1a:fd:b0:73:14:50:24:1f:ca:fb:eb:94:ec:
                    9f:76:f9:d7:f8:76:2e:48:78:af:b3:53:74:79:22:
                    52:81:09:0e:31:0c:5a:4f:08:49:0f:dd:d1:01:c1:
                    17:2c:c1:3b:22:08:35:87:ac:01:38:05:e4:b5:0f:
                    12:9b:ff:65:ba:20:e9:1f:6f:ba:99:21:fb:7a:f6:
                    00:a0:92:7c:db:43:f7:05:a1:27:89:b1:36:11:d7:
                    2c:50:96:96:ef:03:19:4f:f1:7a:fd:f1:16:ba:37:
                    72:0f:e2:d4:62:ab:75:41:f9:cb:79:0b:7c:d6:10:
                    1a:89:f1:bd:c6:ff:1b:80:7c:d3:34:b7:67:2f:e0:
                    0f:4c:50:e9:e3:93:68:f9:ed:bd:26:07:88:1f:55:
                    1c:f9:f7:9d:49:86:ca:05:27:29:e0:ad:a0:63:fd:
                    ee:b6:2d:1d:96:61:f2:63:bc:c5:32:95:a9:13:4f:
                    54:8c:34:f0:61:ec:6f:73:8c:8f:50:98:c7:71:ec:
                    38:9c:27:59:0b:05:fb:24:13:c5:e2:d1:19:13:08:
                    d0:5d:57:87:20:45:53:d6:16:53:03:e3:5e:2d:ab:
                    c7:6f:65:2d:aa:a2:42:97:54:3b:4f:81:f3:90:f4:
                    ed:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B3:B3:0A:00:06:FC:06:87:25:B9:0A:66:37:AB:68:02:5A:8F:37
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6B92466D9A311F0A7FCE3EBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.41.0/24
                  156.243.96.0/22
                  156.243.130.0/24
                  156.244.144.0/20
                  156.248.0.0/24
                  156.248.4.0/24
                  156.248.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:5f:db:49:02:b5:56:9c:35:07:49:f3:af:93:8e:06:e6:e9:
         55:24:1d:02:b8:6a:f2:cf:ba:4a:b6:ba:d1:b7:fb:c5:e8:b5:
         3b:4c:a8:f3:f8:3c:ee:b6:6a:4a:d7:8b:df:a3:c0:5c:6e:73:
         0a:09:34:4a:75:30:af:44:8e:00:84:e2:ee:9b:b9:db:f0:f9:
         79:0b:1a:49:97:d6:ed:dc:e2:21:77:4e:f8:d9:8b:4b:d6:f9:
         89:14:09:d2:2d:05:71:bc:99:27:36:1f:07:26:5b:c2:da:d7:
         89:c0:25:e3:70:e8:73:da:57:66:80:1f:a3:0b:36:86:be:51:
         4b:ce:f9:6d:5f:e0:b1:0f:51:4e:a4:de:8d:51:e5:14:d7:b0:
         31:74:3b:d5:3e:24:2c:cc:91:c7:95:15:70:8b:72:10:84:bf:
         a3:86:de:1d:dc:58:33:2c:75:4f:c6:5a:29:78:9a:ac:67:79:
         ad:22:6e:5b:a8:c1:46:a6:a5:0f:ed:00:65:12:c3:94:d2:6f:
         6f:f3:30:78:fd:ec:f1:16:ee:1b:aa:d4:25:9c:66:cf:22:4c:
         cb:86:3d:10:66:be:3d:8e:d3:f4:74:c8:d7:55:90:c9:73:6d:
         e8:b6:b6:81:1e:a8:82:93:94:a7:47:f6:0b:a8:ad:69:d9:d4:
         7f:ac:f0:fd
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgIDAY5CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjE1MTA1MTA1WhcNMjYwMTE3MTA1MTA1WjAYMRYw
FAYDVQQDEw02OTNmZTgxZC04YjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwH55zvlUnVspzGAfHB+QaRr9sHMUUCQfyvvrlOyfdvnX+HYuSHivs1N0
eSJSgQkOMQxaTwhJD93RAcEXLME7Igg1h6wBOAXktQ8Sm/9luiDpH2+6mSH7evYA
oJJ820P3BaEnibE2EdcsUJaW7wMZT/F6/fEWujdyD+LUYqt1QfnLeQt81hAaifG9
xv8bgHzTNLdnL+APTFDp45No+e29JgeIH1Uc+fedSYbKBScp4K2gY/3uti0dlmHy
Y7zFMpWpE09UjDTwYexvc4yPUJjHcew4nCdZCwX7JBPF4tEZEwjQXVeHIEVT1hZT
A+NeLavHb2UtqqJCl1Q7T4HzkPTtlwIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFLmz
swoABvwGhyW5CmY3q2gCWo83MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNkI5MjQ2NkQ5QTMxMUYwQTdGQ0UzRUJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAnOkpAwQCnPNgAwQAnPOCAwQE
nPSQAwQAnPgAAwQAnPgEAwQCnPhcMA0GCSqGSIb3DQEBCwUAA4IBAQCKX9tJArVW
nDUHSfOvk44G5ulVJB0CuGryz7pKtrrRt/vF6LU7TKjz+DzutmpK14vfo8BcbnMK
CTRKdTCvRI4AhOLum7nb8Pl5CxpJl9bt3OIhd0742YtL1vmJFAnSLQVxvJknNh8H
JlvC2teJwCXjcOhz2ldmgB+jCzaGvlFLzvltX+CxD1FOpN6NUeUU17AxdDvVPiQs
zJHHlRVwi3IQhL+jht4d3FgzLHVPxlopeJqsZ3mtIm5bqMFGpqUP7QBlEsOU0m9v
8zB4/ezxFu4bqtQlnGbPIkzLhj0QZr49jtP0dMjXVZDJc23otraBHqiCk5SnR/YL
qK1p2dR/rPD9
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:42:20 2025 by rpki-client