This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/271023BCDB3E11F0A22A387FDAE4EC9C.roa
File:                     271023BCDB3E11F0A22A387FDAE4EC9C.roa (raw, json)
Hash identifier:          /2NgBA2UMFo2e6zd+gYr7UGG/Zgk1L7W1yTTZ7FzUoM=
Subject key identifier:   53:7A:09:BE:F1:5A:DB:78:1F:0C:7A:89:A7:7C:3C:10:F3:14:A7:CE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018F62
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/271023BCDB3E11F0A22A387FDAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 11:47:26 +0000
ROA not before:           Wed 17 Dec 2025 11:47:19 +0000
ROA not after:            Sat 27 Dec 2025 11:47:19 +0000
asID:                     395793
IP address blocks:        156.230.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102242 (0x18f62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 11:47:19 2025 GMT
            Not After : Dec 27 11:47:19 2025 GMT
        Subject: CN=6942984e-7528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d6:c0:bd:29:8f:c6:0f:e6:db:f6:cd:10:c4:
                    93:09:23:8f:3d:15:8c:95:06:b6:c2:54:1f:d2:b2:
                    40:fb:62:4d:5b:89:15:19:06:6b:9e:ef:a3:2d:fa:
                    9f:05:f6:ff:dd:47:b0:eb:dc:b8:00:9e:ec:5f:58:
                    8c:f9:cc:e9:b9:80:5e:08:7c:bc:3a:b8:60:a7:b4:
                    c7:96:4f:b2:90:78:2d:8c:99:83:0c:4d:ec:13:63:
                    c6:24:aa:ac:78:39:30:78:52:35:96:a9:73:f0:69:
                    22:67:3d:78:15:cc:ed:09:26:d0:61:00:ae:4a:f8:
                    a8:56:fa:46:2f:0f:5a:89:d5:6d:61:01:10:5b:ca:
                    69:5c:b6:1b:36:eb:61:f1:9c:0f:90:fb:72:1a:3e:
                    2e:53:ec:5c:39:65:ae:63:b0:8f:1a:fc:4f:97:60:
                    3a:82:76:95:c4:8b:37:8a:0b:6e:0b:6c:d3:26:9a:
                    e1:4d:f9:7d:a8:a2:9c:ed:05:a9:ae:a6:9c:26:34:
                    6a:bc:6f:f5:69:1e:53:01:47:16:4e:02:ab:fa:6b:
                    73:06:5e:c6:f5:f0:27:d7:59:65:16:e0:ff:d3:d3:
                    f5:d1:b8:65:39:c8:48:31:54:a6:4f:a5:a6:5e:2f:
                    7b:42:7c:e3:5b:38:dc:81:d9:52:77:a8:6c:17:c0:
                    46:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7A:09:BE:F1:5A:DB:78:1F:0C:7A:89:A7:7C:3C:10:F3:14:A7:CE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/271023BCDB3E11F0A22A387FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:23:e4:a6:85:0c:1d:09:9e:f9:2c:09:06:d9:2d:3c:c5:39:
         d0:05:8e:81:95:66:1b:8d:64:d9:38:e2:75:aa:4b:db:d0:ec:
         34:9d:51:2f:7f:70:02:4e:1e:a4:84:2e:25:22:27:40:c2:23:
         3b:c3:24:d9:8b:f9:9f:43:d2:1d:11:73:cf:65:1e:e1:c9:c2:
         d5:db:7f:10:31:d1:de:56:d1:ae:3e:5c:d2:a1:f7:3a:83:aa:
         1c:ad:7b:ec:b6:69:79:a1:39:46:4c:c1:a6:a1:11:44:42:3d:
         b4:c5:58:d8:4f:36:73:6f:e5:16:0c:92:1d:1a:21:e4:9a:f2:
         20:7b:65:78:be:95:46:da:cd:7a:1e:34:56:b8:c0:84:68:3f:
         e6:87:a1:57:b1:90:89:9f:83:48:07:1f:1b:4d:58:b3:42:b4:
         c7:bb:02:de:02:92:46:c7:ee:90:88:3b:7c:b6:f0:44:5f:f1:
         f4:05:7c:db:8c:62:d8:5a:e4:a1:c3:4d:1d:b8:78:ab:cc:bb:
         1c:55:46:2b:3c:4b:80:b7:92:90:9e:13:9d:c4:23:d2:7e:24:
         5d:19:1d:b4:f6:26:59:d2:35:5c:64:ca:88:f5:92:a0:c7:c7:
         cb:75:3c:05:f5:98:db:b5:ad:03:29:02:6b:d0:e1:13:cd:4d:
         f1:ef:7b:30
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAY9iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjE3MTE0NzE5WhcNMjUxMjI3MTE0NzE5WjAYMRYw
FAYDVQQDEw02OTQyOTg0ZS03NTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzNbAvSmPxg/m2/bNEMSTCSOPPRWMlQa2wlQf0rJA+2JNW4kVGQZrnu+j
LfqfBfb/3Uew69y4AJ7sX1iM+czpuYBeCHy8Orhgp7THlk+ykHgtjJmDDE3sE2PG
JKqseDkweFI1lqlz8GkiZz14FcztCSbQYQCuSvioVvpGLw9aidVtYQEQW8ppXLYb
Nuth8ZwPkPtyGj4uU+xcOWWuY7CPGvxPl2A6gnaVxIs3igtuC2zTJprhTfl9qKKc
7QWprqacJjRqvG/1aR5TAUcWTgKr+mtzBl7G9fAn11llFuD/09P10bhlOchIMVSm
T6WmXi97QnzjWzjcgdlSd6hsF8BGswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFN6
Cb7xWtt4Hwx6iad8PBDzFKfOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNzEwMjNCQ0RCM0UxMUYwQTIyQTM4N0ZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOafMA0GCSqGSIb3DQEBCwUA
A4IBAQClI+SmhQwdCZ75LAkG2S08xTnQBY6BlWYbjWTZOOJ1qkvb0Ow0nVEvf3AC
Th6khC4lIidAwiM7wyTZi/mfQ9IdEXPPZR7hycLV238QMdHeVtGuPlzSofc6g6oc
rXvstml5oTlGTMGmoRFEQj20xVjYTzZzb+UWDJIdGiHkmvIge2V4vpVG2s16HjRW
uMCEaD/mh6FXsZCJn4NIBx8bTVizQrTHuwLeApJGx+6QiDt8tvBEX/H0BXzbjGLY
WuShw00duHirzLscVUYrPEuAt5KQnhOdxCPSfiRdGR209iZZ0jVcZMqI9ZKgx8fL
dTwF9Zjbta0DKQJr0OETzU3x73sw
-----END CERTIFICATE-----
Generated at Wed Dec 17 20:44:56 2025 by rpki-client