This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C0A1B70D1BA11F0B0F311D8DAE4EC9C.roa
File:                     3C0A1B70D1BA11F0B0F311D8DAE4EC9C.roa (raw, json)
Hash identifier:          1EXrDdvx7a+uXOKLWn25j0wN56tPfeuXP6UV6S6mH5s=
Subject key identifier:   DD:E3:05:F2:66:85:6A:4D:41:F3:D8:73:39:B3:95:2D:95:33:2F:AE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018C81
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C0A1B70D1BA11F0B0F311D8DAE4EC9C.roa
Signing time:             Fri 05 Dec 2025 09:10:25 +0000
ROA not before:           Fri 05 Dec 2025 09:10:20 +0000
ROA not after:            Thu 08 Jan 2026 09:10:20 +0000
asID:                     62084
IP address blocks:        156.238.39.0/24 maxlen: 24
                          156.246.23.0/24 maxlen: 24
                          156.246.87.0/24 maxlen: 24
                          156.247.16.0/24 maxlen: 24
                          156.247.19.0/24 maxlen: 24
                          156.247.20.0/24 maxlen: 24
                          156.247.21.0/24 maxlen: 24
                          156.247.22.0/24 maxlen: 24
                          156.247.23.0/24 maxlen: 24
                          156.254.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101505 (0x18c81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  5 09:10:20 2025 GMT
            Not After : Jan  8 09:10:20 2026 GMT
        Subject: CN=6932a181-b630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bf:fa:a9:e9:e0:57:83:26:c1:42:24:ba:78:
                    8c:6a:e4:76:42:82:69:79:b0:60:f3:ca:80:d3:9e:
                    23:3c:a6:4d:4f:de:7b:c7:dd:2f:23:6c:eb:62:0c:
                    5a:50:db:2a:df:b4:c5:86:d0:22:e3:b0:df:4c:73:
                    f3:3d:10:be:31:5b:31:ad:89:2e:11:7c:32:40:eb:
                    bc:f8:f6:1a:48:e4:73:12:96:e9:21:c3:88:27:66:
                    6f:77:e1:44:27:70:95:d1:9f:be:af:9c:0b:d2:65:
                    01:13:1f:46:97:a9:44:26:76:0f:b2:d1:3e:24:30:
                    a8:65:b6:fd:72:cf:06:1e:e3:be:dd:f8:78:3c:43:
                    b5:81:29:9d:f7:c0:f9:7c:57:01:db:70:59:56:c0:
                    2c:a3:bf:ae:2b:c5:57:7d:6d:46:15:30:e9:dd:44:
                    d4:9c:83:a0:98:ac:b6:d5:0b:47:e2:c4:f7:10:c9:
                    7f:d9:72:95:10:84:48:7b:4a:25:0c:5b:57:87:d2:
                    71:19:dc:8e:5c:a2:4e:9c:79:f7:3e:d8:34:51:69:
                    e5:da:4d:3f:ac:95:45:6c:3c:25:fd:c9:17:a1:96:
                    3b:ec:48:e6:66:d9:13:e1:e8:9c:0a:bf:c3:b1:9f:
                    f6:b8:c5:14:62:b0:4c:03:80:bd:74:2f:b7:57:27:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E3:05:F2:66:85:6A:4D:41:F3:D8:73:39:B3:95:2D:95:33:2F:AE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C0A1B70D1BA11F0B0F311D8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.39.0/24
                  156.246.23.0/24
                  156.246.87.0/24
                  156.247.16.0/24
                  156.247.19.0-156.247.23.255
                  156.254.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:8d:92:47:37:1f:2a:06:64:97:90:2d:76:9c:73:9e:2d:1a:
         16:c5:33:8c:dd:7f:cb:36:27:c9:9b:bb:70:fd:c8:f8:35:4f:
         16:9a:f7:c2:cc:67:69:6a:95:fc:7d:bb:c6:88:05:12:4e:9b:
         61:57:96:0a:43:33:6a:9b:1b:b6:35:fc:1a:15:4a:2f:d9:64:
         fc:3f:71:e9:93:e8:5b:f1:46:9c:03:65:06:01:46:02:1c:ae:
         6d:cf:47:67:97:03:11:7e:21:0a:26:65:b6:95:5a:63:02:31:
         cf:81:c5:50:d2:48:8d:23:d4:c3:01:be:72:22:cf:48:22:a7:
         3f:4e:3d:9b:0d:f6:e7:be:6c:4f:36:3a:18:2d:66:e5:cf:14:
         4c:42:ca:8c:93:0b:9b:23:bc:f2:94:92:24:cb:32:cf:24:c5:
         5a:35:b8:19:f2:b4:e6:34:5d:84:93:b7:31:1b:b4:4b:b5:39:
         36:a1:8f:48:d0:08:f4:b8:42:6a:57:e2:ac:02:6f:6a:55:e5:
         02:d6:b8:aa:8f:78:2b:c4:83:f9:10:12:f9:85:ec:6c:91:33:
         44:89:74:14:4a:b5:29:28:ad:ee:bb:23:b5:cc:4b:00:89:00:
         24:b4:6a:cb:0a:f4:8a:6a:db:21:11:00:d5:88:a3:27:4c:03:
         69:4d:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:01:46 2025 by rpki-client