This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/688606ECDB1411F0A820487FDAE4EC9C.roa
File:                     688606ECDB1411F0A820487FDAE4EC9C.roa (raw, json)
Hash identifier:          Rr9S52x+n8wtbJgD5YN9aZZbaYK4ayQY7kkS28463ac=
Subject key identifier:   83:A2:78:07:7E:C1:89:A2:37:04:EB:9A:67:6D:83:2A:3E:F8:27:42
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018F13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/688606ECDB1411F0A820487FDAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 06:48:36 +0000
ROA not before:           Wed 17 Dec 2025 06:48:30 +0000
ROA not after:            Sun 21 Dec 2025 06:48:30 +0000
asID:                     18013
IP address blocks:        156.239.243.0/24 maxlen: 24
                          156.239.244.0/22 maxlen: 24
                          156.239.244.0/23 maxlen: 24
                          156.239.244.0/24 maxlen: 24
                          156.239.245.0/24 maxlen: 24
                          156.239.246.0/23 maxlen: 24
                          156.239.246.0/24 maxlen: 24
                          156.239.247.0/24 maxlen: 24
                          156.239.248.0/21 maxlen: 24
                          156.239.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102163 (0x18f13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 06:48:30 2025 GMT
            Not After : Dec 21 06:48:30 2025 GMT
        Subject: CN=69425244-c5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:66:70:23:c9:62:f7:93:1a:72:32:a4:c9:a1:
                    06:36:25:27:d3:af:39:e0:9f:73:5f:03:1b:6d:33:
                    52:7c:da:b0:93:db:af:5d:28:11:e2:84:62:3c:26:
                    68:ff:b7:7a:8f:ba:bc:e9:87:f3:f1:fb:13:34:37:
                    14:94:f8:29:2f:c4:cb:9f:d7:5d:c5:dd:eb:11:36:
                    ba:55:16:d9:28:c7:3a:db:df:ab:e9:9c:f0:af:b7:
                    ea:06:0d:65:2d:a8:12:71:57:46:f0:e3:8f:5f:54:
                    46:81:54:dc:26:c2:53:9b:6d:72:d1:7c:ab:32:68:
                    2f:2d:84:59:8e:2d:fb:fb:aa:28:82:5f:5d:b1:2b:
                    c3:53:2e:ba:16:7f:25:80:77:4f:fb:6c:ec:4e:1d:
                    6f:30:64:63:01:99:a9:74:27:40:52:3e:ba:36:09:
                    81:1d:53:b6:ec:f8:7b:30:9f:c1:11:32:2d:7d:4d:
                    03:5e:0d:d5:76:5a:8e:09:11:92:4c:96:8f:71:c0:
                    15:a7:f4:f2:af:e1:be:bb:ec:2d:13:99:f9:e5:b1:
                    e4:c5:e5:42:11:b3:67:13:d0:0f:e0:15:97:69:7c:
                    8c:3d:df:da:64:ac:a7:7f:80:f7:b9:33:ee:ef:f4:
                    90:2e:5b:4a:2d:16:a8:13:50:16:f0:aa:09:53:dc:
                    47:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A2:78:07:7E:C1:89:A2:37:04:EB:9A:67:6D:83:2A:3E:F8:27:42
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/688606ECDB1411F0A820487FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.243.0-156.239.255.255

    Signature Algorithm: sha256WithRSAEncryption
         a4:e4:1f:ae:f7:92:56:d6:42:f1:1d:f5:68:3b:a0:d4:4b:da:
         fb:73:32:7c:73:d0:32:bf:33:3d:78:10:8b:3d:9e:03:1c:7d:
         e4:86:56:39:3c:be:2c:0a:60:a1:f4:3f:27:9a:71:2f:c3:1d:
         f6:f6:95:01:bf:13:09:0f:d2:95:cd:c0:b2:b5:fe:aa:84:16:
         2e:5a:ed:fa:91:e9:f6:53:4e:46:b6:44:6d:75:2e:fc:4e:46:
         3f:35:dc:56:bb:1e:8a:79:54:de:12:5d:69:2e:61:5a:22:4c:
         d2:6b:fc:3d:54:e1:86:65:ca:c6:e5:52:ee:5e:62:b0:27:c2:
         ea:a8:32:66:10:24:61:3b:b8:36:e5:24:fa:76:47:75:e8:51:
         97:26:a2:c7:5a:87:dc:dd:78:43:7a:87:f2:a3:8f:5a:03:0e:
         d6:8c:a6:9c:e7:d1:92:e3:40:58:f1:ae:e4:99:5c:f5:a4:84:
         8f:1b:a0:55:fd:7c:88:78:9e:10:23:95:e7:26:40:c6:95:55:
         97:1e:38:61:9f:cb:65:62:ad:bb:f0:36:da:4f:da:20:54:56:
         f7:95:7d:f5:1a:69:ec:25:29:cc:4c:4a:ef:f7:82:6e:07:74:
         b7:5f:1b:e1:54:33:bc:bb:c5:6e:87:7b:6a:a4:da:23:dd:c4:
         d3:61:94:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:52:22 2025 by rpki-client