This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81023944DB1311F09746FF78DAE4EC9C.roa
File:                     81023944DB1311F09746FF78DAE4EC9C.roa (raw, json)
Hash identifier:          lfT9YxSDV+Pw/cwun5tNMk+T0EO4MWwsGyjgbetUCDk=
Subject key identifier:   06:89:BC:C7:CB:25:25:D8:2C:4B:3E:DD:23:E1:8F:47:D2:07:43:C6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018F11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81023944DB1311F09746FF78DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 06:42:07 +0000
ROA not before:           Wed 17 Dec 2025 06:42:01 +0000
ROA not after:            Sun 21 Dec 2025 06:42:01 +0000
asID:                     18013
IP address blocks:        156.239.238.0/24 maxlen: 24
                          156.239.239.0/24 maxlen: 24
                          156.239.240.0/20 maxlen: 24
                          156.239.240.0/21 maxlen: 24
                          156.239.240.0/22 maxlen: 24
                          156.239.240.0/23 maxlen: 24
                          156.239.240.0/24 maxlen: 24
                          156.239.241.0/24 maxlen: 24
                          156.239.242.0/23 maxlen: 24
                          156.239.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102161 (0x18f11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 06:42:01 2025 GMT
            Not After : Dec 21 06:42:01 2025 GMT
        Subject: CN=694250bf-1d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:aa:e7:bb:a8:d3:d7:7a:e1:0a:9b:12:fd:
                    ff:f7:f9:b0:24:6a:20:55:a9:74:69:b3:24:9e:a4:
                    5b:54:45:7a:ad:b4:ba:49:75:36:62:a9:57:23:aa:
                    5c:d3:7a:3d:3f:f2:0c:e1:d3:e9:ef:be:42:a9:a5:
                    8a:f4:89:92:d2:f8:af:16:78:70:6e:bb:cd:f1:1b:
                    51:c0:69:8f:b3:55:3c:27:18:f9:d9:29:fb:c1:f3:
                    37:5c:12:dd:a2:c0:1e:2f:7e:dc:96:82:82:89:7d:
                    cc:0b:9c:e8:da:e9:dd:e7:95:86:16:f6:f5:2e:61:
                    d5:f8:51:8b:a7:eb:e7:be:4e:08:a3:30:bb:ae:71:
                    4c:41:7d:a0:da:a3:53:1a:33:45:fb:42:45:0f:f8:
                    e6:72:23:82:d4:dc:4e:33:32:ac:21:7a:d4:ee:b1:
                    2a:0c:6c:c2:86:f1:17:71:e6:20:ee:cf:44:f3:d9:
                    90:7a:82:76:e5:bf:6d:6b:5a:e7:9c:65:d1:2a:79:
                    68:65:33:da:c7:84:53:a4:8b:f6:66:9e:e5:21:5d:
                    a5:65:45:e5:35:a3:7d:dd:30:5f:69:18:a5:91:c9:
                    6b:63:08:69:80:7d:87:b5:ab:e6:73:de:d8:79:75:
                    fc:33:d3:94:71:12:b4:2a:d4:73:90:3c:e6:55:0e:
                    01:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:89:BC:C7:CB:25:25:D8:2C:4B:3E:DD:23:E1:8F:47:D2:07:43:C6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81023944DB1311F09746FF78DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.238.0-156.239.255.255

    Signature Algorithm: sha256WithRSAEncryption
         25:3e:4b:7d:30:11:a6:14:f3:e2:c3:3d:60:fd:16:24:08:36:
         1d:30:19:64:4f:aa:6d:7e:07:b7:02:ba:10:24:4c:ef:52:12:
         08:aa:17:44:5b:19:28:5b:02:30:4c:22:5a:1e:22:4d:a8:eb:
         c4:25:d8:fe:f8:37:e4:3d:b2:ba:c6:e4:fe:15:e8:fd:8f:8b:
         25:5c:9c:4a:86:5c:df:f9:62:60:c7:df:d7:d6:84:ab:6e:05:
         b9:98:3c:1e:89:48:f9:08:e9:1c:21:7f:7e:c8:f9:bf:85:70:
         14:1c:cb:9c:64:57:01:32:b0:78:b1:2a:03:9d:0b:e3:56:86:
         15:20:89:c9:87:02:52:e9:7a:6f:48:1b:e6:af:5c:eb:8d:87:
         02:c0:e2:14:87:87:6b:a1:9c:ba:71:e4:39:2c:99:a2:77:75:
         28:eb:03:ba:20:99:6f:63:85:87:af:0e:6c:c5:09:e1:f1:ca:
         43:52:95:50:f9:86:d3:03:61:39:b3:39:c4:c1:4b:df:ce:f2:
         e7:9e:29:ad:20:c7:88:01:95:67:71:16:bb:93:07:97:ce:66:
         93:68:d0:42:4a:63:46:35:8b:d4:f6:20:87:4d:48:ba:7d:7a:
         d1:87:0d:ee:17:58:0c:82:4c:d3:d1:6b:6d:45:1e:b3:36:d9:
         50:2f:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:51:30 2025 by rpki-client