This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEE93004E03811F0804831B0DAE4EC9C.roa
File:                     FEE93004E03811F0804831B0DAE4EC9C.roa (raw, json)
Hash identifier:          zfocKYe4qVEhnKO8AY4yjDN8eEYP2rRvf1lN7IdfbOY=
Subject key identifier:   FC:CB:83:9A:3A:49:13:18:5B:6D:C2:A8:73:BC:14:48:A2:F8:DF:A7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01910F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEE93004E03811F0804831B0DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 19:53:05 +0000
ROA not before:           Tue 23 Dec 2025 19:53:00 +0000
ROA not after:            Wed 28 Jan 2026 19:53:00 +0000
asID:                     44559
IP address blocks:        156.246.225.0/24 maxlen: 24
                          156.246.226.0/24 maxlen: 24
                          156.246.227.0/24 maxlen: 24
                          156.246.228.0/24 maxlen: 24
                          156.246.229.0/24 maxlen: 24
                          156.246.230.0/24 maxlen: 24
                          156.246.231.0/24 maxlen: 24
                          156.246.232.0/24 maxlen: 24
                          156.246.233.0/24 maxlen: 24
                          156.246.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102671 (0x1910f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 19:53:00 2025 GMT
            Not After : Jan 28 19:53:00 2026 GMT
        Subject: CN=694af321-997f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:d4:f4:06:af:31:c9:db:4b:79:ff:c3:a2:
                    28:f7:93:1a:07:17:33:aa:65:ce:cd:6d:6e:01:36:
                    d5:61:3e:f7:d8:ef:1a:d5:73:58:8e:1e:19:56:57:
                    33:f5:d7:a9:f6:01:4b:82:fa:c8:3a:06:1c:28:18:
                    b6:d5:ea:a4:b9:3a:7e:36:4c:65:93:83:a0:91:66:
                    fe:97:b6:c5:61:b6:27:18:9f:46:a3:28:be:fb:c4:
                    79:88:a2:bb:30:80:db:91:46:c3:bd:a0:8f:9c:05:
                    8f:04:ae:89:64:38:44:8c:90:da:aa:a8:5d:97:c6:
                    0f:a6:ca:96:81:ff:37:10:d1:b7:82:fb:97:7a:d6:
                    6e:0f:d9:33:89:73:60:64:19:79:85:c4:c0:3d:22:
                    72:2a:99:d3:64:e6:ab:4c:97:86:0b:ae:f7:ff:e9:
                    1a:c6:ac:41:b6:5a:b8:c6:8f:27:55:1f:a9:e9:e3:
                    cf:53:b8:ea:87:6e:5c:c1:70:f6:d2:96:9f:63:5e:
                    b4:f5:7f:81:a4:d2:ad:72:ca:b5:c3:af:85:17:58:
                    ee:35:06:27:a7:7c:fa:c8:8e:19:5e:e5:1d:79:63:
                    69:7d:82:7a:7a:44:cc:6b:08:78:f6:0c:8c:07:1f:
                    c1:aa:a5:df:dd:93:0f:44:31:7a:f3:78:10:c1:d2:
                    42:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CB:83:9A:3A:49:13:18:5B:6D:C2:A8:73:BC:14:48:A2:F8:DF:A7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEE93004E03811F0804831B0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.225.0-156.246.234.255

    Signature Algorithm: sha256WithRSAEncryption
         aa:59:cf:de:24:13:a5:1d:08:a7:3a:6a:12:21:21:40:b5:cf:
         ee:95:5f:3c:f3:88:76:cf:21:b3:04:20:cf:0d:9a:72:21:51:
         72:67:91:ff:cd:24:75:a1:7c:3e:a3:55:9f:6d:b0:4a:c1:ba:
         7d:be:a9:6f:c1:bb:e9:7a:64:6b:9e:35:f7:ef:30:1f:88:95:
         e5:30:4d:67:2f:37:0a:e2:9e:43:a5:4d:3d:8c:7f:e5:f7:95:
         fb:e9:d4:6c:bd:74:ac:f5:02:cf:18:00:ac:fe:1e:32:b7:c1:
         36:0c:08:61:0e:ce:f3:4f:7a:68:07:12:46:1f:51:18:37:76:
         b1:68:4d:34:d9:8f:c4:68:1d:a6:c7:3c:dd:7c:92:d8:d0:d9:
         b8:53:09:36:99:bc:f9:8f:09:88:eb:fe:9b:8f:03:b4:6b:36:
         f0:dd:2c:a6:c4:dd:49:f4:f6:39:78:8d:e4:e6:d9:29:4b:cb:
         6e:6d:83:be:b1:45:18:4d:e3:42:45:fd:c3:a3:d2:2d:fc:3d:
         f5:e0:01:3b:6f:e7:44:2b:a8:e1:11:e0:f2:2a:57:a2:bf:1a:
         0c:08:0a:8e:c9:58:e1:15:24:13:65:c5:c5:bf:95:51:c6:51:
         be:ea:d7:c1:ca:b6:c8:8b:9c:92:0a:b2:40:5d:dd:97:c8:a3:
         70:ed:f7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:40 2025 by rpki-client