This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/679C95A0D12F11F0904A82E7DAE4EC9C.roa
File:                     679C95A0D12F11F0904A82E7DAE4EC9C.roa (raw, json)
Hash identifier:          IBQI5CKLeMa2pFQ+5W8v+j2tQVcWTs/M90g82Prcgh0=
Subject key identifier:   C9:38:06:C0:C2:FC:70:1E:D4:74:22:4D:C5:4D:54:62:8B:2A:92:56
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018C57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/679C95A0D12F11F0904A82E7DAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 16:36:38 +0000
ROA not before:           Thu 04 Dec 2025 16:36:33 +0000
ROA not after:            Sat 07 Mar 2026 16:36:33 +0000
asID:                     138152
IP address blocks:        156.232.6.0/23 maxlen: 24
                          156.232.9.0/24 maxlen: 24
                          156.232.10.0/24 maxlen: 24
                          156.232.11.0/24 maxlen: 24
                          156.232.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101463 (0x18c57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  4 16:36:33 2025 GMT
            Not After : Mar  7 16:36:33 2026 GMT
        Subject: CN=6931b896-f0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:e6:c7:d6:c3:5a:24:12:81:9a:60:50:8d:
                    3b:f5:71:50:b3:1e:5a:cd:4a:dd:a1:ae:47:b5:fe:
                    37:7d:0e:6b:9e:aa:0d:2b:00:2b:f9:19:dd:d1:b2:
                    ef:4b:88:3b:a6:43:00:73:ab:5f:0e:fc:ea:52:80:
                    fd:36:b5:47:9c:ec:03:86:18:35:86:cd:57:b3:25:
                    f3:8f:96:5b:ff:f4:02:1a:bf:82:14:11:df:76:bd:
                    53:01:9c:4e:f8:ac:b7:b8:29:9f:33:f4:ab:1e:be:
                    07:c3:7d:4c:31:a7:1b:86:34:6a:6a:cf:71:8c:b1:
                    cf:0f:56:64:9d:d6:51:70:0c:8b:73:f5:2f:c4:a0:
                    fd:80:02:8d:a7:ed:03:d0:ff:93:66:48:d4:f9:f2:
                    b7:9d:ad:3b:9a:24:10:b4:f1:4d:c6:b7:7e:10:fc:
                    b0:3f:dc:e8:ac:ff:f3:7e:e2:e7:35:37:f0:fa:9f:
                    34:c5:24:ae:8f:1f:1a:b7:68:c0:36:3f:18:2c:73:
                    11:09:40:a0:4c:ed:c1:d0:b4:99:45:17:3b:a0:c4:
                    a5:46:24:e3:7e:7b:2e:e4:aa:b4:18:e0:b5:83:76:
                    77:57:6a:ea:0f:15:4b:d7:e9:26:19:64:0f:d8:14:
                    4d:26:ac:a4:b9:a8:60:2a:14:92:90:da:e8:5a:94:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:38:06:C0:C2:FC:70:1E:D4:74:22:4D:C5:4D:54:62:8B:2A:92:56
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/679C95A0D12F11F0904A82E7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.232.6.0/23
                  156.232.9.0-156.232.11.255
                  156.232.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:aa:e1:63:c9:f8:95:d5:50:04:dc:76:eb:74:b8:ba:cc:37:
         75:a0:60:d0:ab:bc:c5:f7:01:bd:11:e6:d8:e3:90:c4:73:70:
         f4:4f:5a:36:88:8a:fd:35:f6:84:14:2f:73:ae:fc:d3:8e:ea:
         21:56:ca:a3:2b:71:e2:35:4d:bf:1d:c4:4b:d4:07:2e:7f:9f:
         77:cf:1b:27:78:67:a6:0a:bb:fc:46:b8:b1:23:41:70:4e:83:
         68:8d:1e:8d:05:9a:90:28:ea:10:7d:90:b6:84:0b:35:fc:78:
         f2:79:83:c6:24:10:a2:56:40:f6:6f:2d:0d:60:72:2d:fe:9b:
         62:d5:bc:75:ed:0f:96:e5:1f:80:37:af:b9:1a:f4:e6:cb:fe:
         5b:b6:8c:4d:5b:fb:83:6f:2b:17:8f:b1:d1:a1:25:13:fe:e1:
         31:1a:c9:f0:a9:1b:b4:ba:c8:97:37:94:46:fb:ce:86:b6:6e:
         5f:54:58:3b:e9:d7:5b:c7:2b:a3:28:8a:bc:32:f9:55:43:6b:
         30:86:00:4d:78:0a:e8:93:e7:19:b8:f7:02:00:c5:03:16:3e:
         0f:c2:81:2c:5d:ae:98:54:da:bf:93:46:ca:c7:73:f3:8e:76:
         7c:da:e4:8c:2b:14:58:3b:25:48:f8:4f:1b:e6:61:65:91:b9:
         e6:e3:5e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:02:38 2025 by rpki-client