This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E447506D02211F092A571D8DAE4EC9C.roa
File:                     7E447506D02211F092A571D8DAE4EC9C.roa (raw, json)
Hash identifier:          bfWlHi7k0pJ3pe81PiWXjArUpd9x9r063OSgBuVk1Ps=
Subject key identifier:   AB:D0:96:CC:70:DD:B7:E9:04:57:B8:28:69:A4:C0:13:6B:D7:E6:0F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018B7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E447506D02211F092A571D8DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 08:31:42 +0000
ROA not before:           Wed 03 Dec 2025 08:31:37 +0000
ROA not after:            Sat 06 Jun 2026 08:31:37 +0000
asID:                     328608
IP address blocks:        156.253.237.0/24 maxlen: 24
                          156.253.238.0/24 maxlen: 24
                          156.253.239.0/24 maxlen: 24
                          156.253.240.0/24 maxlen: 24
                          156.253.241.0/24 maxlen: 24
                          156.253.242.0/24 maxlen: 24
                          156.253.243.0/24 maxlen: 24
                          156.253.244.0/24 maxlen: 24
                          156.253.245.0/24 maxlen: 24
                          156.253.246.0/24 maxlen: 24
                          156.253.247.0/24 maxlen: 24
                          156.253.248.0/24 maxlen: 24
                          156.253.249.0/24 maxlen: 24
                          156.253.250.0/24 maxlen: 24
                          156.255.64.0/24 maxlen: 24
                          156.255.65.0/24 maxlen: 24
                          156.255.66.0/24 maxlen: 24
                          156.255.67.0/24 maxlen: 24
                          156.255.80.0/24 maxlen: 24
                          156.255.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101245 (0x18b7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  3 08:31:37 2025 GMT
            Not After : Jun  6 08:31:37 2026 GMT
        Subject: CN=692ff56e-8288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:e9:1c:f8:82:64:2e:18:27:e6:be:82:f6:
                    12:88:a5:cb:f3:60:4e:b7:80:52:3a:a8:21:6f:15:
                    a8:a0:4d:28:ef:44:68:49:1a:06:d9:f0:f6:89:57:
                    ff:47:74:ea:0b:22:a1:3d:18:0b:eb:ca:a8:12:08:
                    0a:56:16:bb:a6:6e:f1:a8:a7:41:f4:26:1e:eb:49:
                    fa:19:d1:37:14:d7:bf:96:ac:27:f5:2e:9d:c6:ba:
                    7a:9c:fc:5f:41:ca:83:22:a3:48:d8:89:e1:4a:b2:
                    be:f2:b4:e7:75:4d:f0:69:eb:f1:e6:de:35:ad:38:
                    4c:87:21:e0:17:ac:f9:0e:12:58:ee:79:48:18:b0:
                    c1:fa:ec:e8:aa:4c:0f:31:49:16:cd:14:e9:a8:e1:
                    16:96:4f:96:6f:62:09:b0:0e:b8:eb:6d:19:fe:88:
                    ce:b1:36:48:bd:79:bd:9f:b3:15:8c:c5:ec:7b:a0:
                    00:f5:87:bc:9d:a0:ca:e4:30:eb:20:a5:4e:38:2f:
                    b6:9c:64:5b:83:14:91:0d:4f:86:c8:bd:fe:4a:05:
                    d6:b4:70:18:a4:8e:02:de:e9:79:03:a8:1e:f7:ee:
                    f7:0e:07:46:4d:2e:4d:a6:dd:87:26:36:b1:37:4a:
                    3a:2b:07:a4:c7:a9:07:f7:8a:52:13:94:1a:46:51:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D0:96:CC:70:DD:B7:E9:04:57:B8:28:69:A4:C0:13:6B:D7:E6:0F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E447506D02211F092A571D8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.237.0-156.253.250.255
                  156.255.64.0/22
                  156.255.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:06:e2:f8:61:e6:c2:70:6e:69:dc:32:bb:68:9c:79:33:76:
         fe:33:3d:14:d8:2d:7e:0e:97:56:bb:12:89:7a:52:86:26:b5:
         20:34:fd:16:0f:32:07:ea:dd:c3:d4:9c:ee:12:12:82:b0:b1:
         08:85:45:e0:1a:2e:2f:0a:b9:22:93:30:83:d8:f4:90:1a:ac:
         f9:51:89:f9:94:c7:ff:47:aa:aa:a6:b7:27:04:ed:da:ad:1c:
         75:9c:19:59:5e:ae:29:4a:6d:14:62:3d:37:ad:bb:c9:7f:65:
         54:36:af:ea:f7:25:45:26:90:db:04:29:95:14:b6:a7:f5:4b:
         c0:58:32:82:33:63:77:fa:4f:6e:df:52:0d:f8:90:ef:19:05:
         64:e5:1b:22:0f:8b:ee:d2:ba:6a:57:fc:41:f0:2a:89:fb:ea:
         45:eb:c2:88:ab:00:ff:60:79:f8:12:43:e3:23:e7:e4:1f:b7:
         55:ea:70:70:8d:49:a4:a1:1b:55:31:93:cd:80:33:af:1b:39:
         0e:7c:97:c5:ca:0e:c1:f0:0f:3c:6d:6e:d1:26:0c:b9:cd:9b:
         f6:05:82:85:c1:0c:04:7f:6b:b1:b4:b3:49:fd:63:fa:19:f0:
         bd:4a:ae:b9:3e:04:1f:d6:61:70:bc:0f:81:7a:59:43:4a:06:
         0a:80:03:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:18:20 2025 by rpki-client