This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC85335CDB3911F0AF9571E4DAE4EC9C.roa
File:                     FC85335CDB3911F0AF9571E4DAE4EC9C.roa (raw, json)
Hash identifier:          VHRj78l9wpivcM2mvmjuEfftvCZR1JSZmdppUrd2pI8=
Subject key identifier:   4D:4C:A9:9C:89:45:BA:1B:E7:52:04:71:0B:46:90:9E:B4:0D:9C:DF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018F58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC85335CDB3911F0AF9571E4DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 11:17:35 +0000
ROA not before:           Wed 17 Dec 2025 11:17:30 +0000
ROA not after:            Sun 21 Dec 2025 11:17:30 +0000
asID:                     134365
IP address blocks:        156.239.244.0/24 maxlen: 24
                          156.239.245.0/24 maxlen: 24
                          156.239.246.0/24 maxlen: 24
                          156.239.247.0/24 maxlen: 24
                          156.239.248.0/24 maxlen: 24
                          156.239.249.0/24 maxlen: 24
                          156.239.250.0/24 maxlen: 24
                          156.239.251.0/24 maxlen: 24
                          156.239.252.0/24 maxlen: 24
                          156.239.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102232 (0x18f58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 11:17:30 2025 GMT
            Not After : Dec 21 11:17:30 2025 GMT
        Subject: CN=6942914f-a592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:45:b7:19:ae:a9:db:f1:fa:27:37:2d:e1:44:
                    a7:cc:6e:a6:21:d8:9f:2d:8d:f2:11:83:67:71:42:
                    d1:2a:26:95:4f:93:48:6b:60:92:0b:51:b7:c0:fc:
                    09:e1:87:3c:a7:0c:37:4a:5a:86:3b:5e:99:15:24:
                    80:3d:8d:e4:64:f3:b4:f9:f4:af:48:e2:c4:6a:f7:
                    7b:bf:87:1f:d1:d1:fd:84:9a:98:cb:3e:27:12:12:
                    5b:0a:d6:d9:a1:de:24:d0:02:6e:de:31:a0:26:30:
                    a3:b1:a8:7d:96:0f:aa:7f:9a:68:45:14:b4:c2:f2:
                    e2:70:7b:11:d6:76:db:d3:d5:f0:bb:b2:36:59:5e:
                    52:6d:e6:cb:40:de:b5:a9:b0:8b:8b:74:f4:ae:21:
                    22:f1:4e:7d:96:72:2c:75:d5:ab:f8:02:76:cc:6c:
                    84:5d:74:eb:6f:1f:34:7b:ed:6d:f6:b4:44:3c:57:
                    98:ed:b8:63:6c:bc:39:6d:6b:90:25:92:1f:d5:28:
                    c5:06:51:16:f0:03:8c:d7:6c:dd:54:98:86:fe:d2:
                    30:e3:0d:30:a8:73:32:c9:95:83:2d:2e:99:a6:5b:
                    d7:47:39:ba:f0:36:5f:94:ca:f2:a7:e8:32:39:7d:
                    cd:c8:74:fd:bd:11:03:fe:68:ca:c0:05:88:d8:48:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4C:A9:9C:89:45:BA:1B:E7:52:04:71:0B:46:90:9E:B4:0D:9C:DF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC85335CDB3911F0AF9571E4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.244.0-156.239.253.255

    Signature Algorithm: sha256WithRSAEncryption
         60:f8:85:53:41:15:38:80:cd:6a:62:ff:04:02:b6:17:70:25:
         de:aa:f9:f3:5f:9a:56:3d:5f:4f:ef:00:e6:a3:e8:98:a9:a6:
         3c:87:19:ee:eb:71:ba:fe:4a:3c:e1:c2:49:0d:f5:cd:ea:2f:
         f8:ba:ea:16:20:54:e7:c8:7c:08:e9:36:da:cd:e1:1d:1c:c1:
         e7:1b:f9:4b:43:96:77:97:64:6f:0a:9f:9c:1f:7e:fc:80:16:
         89:3f:51:ef:36:10:db:88:cc:e5:9f:09:9a:10:72:5d:67:ba:
         82:a6:81:f6:3e:d3:b4:1b:94:4a:aa:0e:db:66:5e:5e:2f:0e:
         7e:50:2e:55:ff:bf:de:5e:ed:ec:46:01:31:92:bb:3b:e6:57:
         72:8c:ec:c1:74:27:ef:f4:0e:d7:24:ba:fc:45:07:6a:40:41:
         a5:fc:67:61:82:ee:ef:4a:31:de:dc:a0:5e:61:02:ef:2d:ba:
         a8:d4:5e:a1:df:b4:d9:a0:1b:25:23:41:8d:7a:00:7d:29:b1:
         e3:e2:e1:67:3a:25:41:4f:b2:53:02:7d:76:ad:18:92:5d:5f:
         ff:19:70:e3:e9:de:3b:f9:15:b0:58:68:8a:b9:a7:13:27:29:
         29:9a:b0:9f:4a:c8:1d:67:65:0f:2e:6f:df:62:2c:4f:ee:1a:
         af:14:0b:cf
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAY9YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjE3MTExNzMwWhcNMjUxMjIxMTExNzMwWjAYMRYw
FAYDVQQDEw02OTQyOTE0Zi1hNTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA10W3Ga6p2/H6Jzct4USnzG6mIdifLY3yEYNncULRKiaVT5NIa2CSC1G3
wPwJ4Yc8pww3SlqGO16ZFSSAPY3kZPO0+fSvSOLEavd7v4cf0dH9hJqYyz4nEhJb
CtbZod4k0AJu3jGgJjCjsah9lg+qf5poRRS0wvLicHsR1nbb09Xwu7I2WV5SbebL
QN61qbCLi3T0riEi8U59lnIsddWr+AJ2zGyEXXTrbx80e+1t9rREPFeY7bhjbLw5
bWuQJZIf1SjFBlEW8AOM12zdVJiG/tIw4w0wqHMyyZWDLS6ZplvXRzm68DZflMry
p+gyOX3NyHT9vRED/mjKwAWI2Eg0DwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFE1M
qZyJRbob51IEcQtGkJ60DZzfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQzg1MzM1Q0RCMzkxMUYwQUY5NTcxRTREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKc7/QDBAGc7/wwDQYJKoZI
hvcNAQELBQADggEBAGD4hVNBFTiAzWpi/wQCthdwJd6q+fNfmlY9X0/vAOaj6Jip
pjyHGe7rcbr+SjzhwkkN9c3qL/i66hYgVOfIfAjpNtrN4R0cwecb+UtDlneXZG8K
n5wffvyAFok/Ue82ENuIzOWfCZoQcl1nuoKmgfY+07QblEqqDttmXl4vDn5QLlX/
v95e7exGATGSuzvmV3KM7MF0J+/0DtckuvxFB2pAQaX8Z2GC7u9KMd7coF5hAu8t
uqjUXqHftNmgGyUjQY16AH0psePi4Wc6JUFPslMCfXatGJJdX/8ZcOPp3jv5FbBY
aIq5pxMnKSmasJ9KyB1nZQ8ub99iLE/uGq8UC88=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:42:20 2025 by rpki-client