This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8630A27CDA5311F09E5449C2DAE4EC9C.roa
File:                     8630A27CDA5311F09E5449C2DAE4EC9C.roa (raw, json)
Hash identifier:          4AvHt76S/IKncbOlLKg3EATnifFrJt73xT5DL49NpVU=
Subject key identifier:   7E:2C:D4:8D:90:2F:92:1A:6F:AD:E4:8D:90:23:53:0B:A1:6B:2E:91
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018E9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8630A27CDA5311F09E5449C2DAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 07:47:52 +0000
ROA not before:           Tue 16 Dec 2025 07:47:47 +0000
ROA not after:            Sun 21 Dec 2025 07:47:47 +0000
asID:                     18013
IP address blocks:        156.239.243.0/24 maxlen: 24
                          156.239.244.0/22 maxlen: 24
                          156.239.244.0/23 maxlen: 24
                          156.239.244.0/24 maxlen: 24
                          156.239.245.0/24 maxlen: 24
                          156.239.246.0/23 maxlen: 24
                          156.239.246.0/24 maxlen: 24
                          156.239.247.0/24 maxlen: 24
                          156.239.248.0/21 maxlen: 24
                          156.239.248.0/22 maxlen: 24
                          156.239.248.0/23 maxlen: 24
                          156.239.248.0/24 maxlen: 24
                          156.239.249.0/24 maxlen: 24
                          156.239.250.0/23 maxlen: 24
                          156.239.250.0/24 maxlen: 24
                          156.239.251.0/24 maxlen: 24
                          156.239.252.0/22 maxlen: 24
                          156.239.252.0/23 maxlen: 24
                          156.239.252.0/24 maxlen: 24
                          156.239.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102042 (0x18e9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 16 07:47:47 2025 GMT
            Not After : Dec 21 07:47:47 2025 GMT
        Subject: CN=69410ea8-e2c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:10:b6:b9:64:78:a4:69:68:81:97:01:f0:
                    f4:2e:ef:fd:29:f2:fc:f4:86:22:08:95:80:b4:e9:
                    f5:ac:74:d6:2f:34:e0:b7:e1:67:fe:71:f4:47:92:
                    69:9e:b9:fb:b6:01:db:24:dc:0e:46:ab:9b:df:3a:
                    04:12:ea:11:67:0d:d0:20:17:2b:75:ed:82:6e:8b:
                    45:05:14:2a:ba:ad:3d:75:88:d7:8e:b7:a8:cc:c5:
                    06:80:18:4d:a4:01:3d:40:ef:4b:d1:d0:84:c9:20:
                    a0:03:83:45:7e:81:9c:00:c8:01:70:b8:93:99:98:
                    08:63:0a:fb:74:a0:bf:95:9d:c1:ab:64:2a:3b:fb:
                    5e:38:a5:71:42:81:3d:6b:20:c0:03:b9:88:2c:33:
                    28:04:07:d1:bd:a6:86:57:67:19:9f:b2:2f:3e:64:
                    46:22:06:bc:eb:7d:ee:fe:d4:72:19:7a:27:0b:a7:
                    20:c7:d1:00:f0:d5:3c:4d:d3:11:39:aa:23:1e:14:
                    6e:99:44:77:2d:60:49:0a:50:e7:3a:bb:de:94:79:
                    d0:53:1c:d9:ed:ac:14:64:26:ec:02:8f:b7:b3:c3:
                    9a:9c:09:9e:06:4c:8e:22:f3:f9:de:c6:e3:e1:f3:
                    48:ba:bc:d8:95:c0:78:db:53:a9:e2:e7:ca:60:0e:
                    05:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2C:D4:8D:90:2F:92:1A:6F:AD:E4:8D:90:23:53:0B:A1:6B:2E:91
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8630A27CDA5311F09E5449C2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.243.0-156.239.255.255

    Signature Algorithm: sha256WithRSAEncryption
         2b:c8:9c:58:ce:4d:8a:d6:dd:ee:be:9e:4e:d1:23:f0:36:be:
         1f:df:af:90:fc:4e:db:7d:b5:d4:b7:0b:0f:71:3f:d8:cb:54:
         95:1d:3f:b2:71:86:68:44:d5:9d:5e:9d:d1:31:92:44:c1:dd:
         dd:31:e6:12:b6:36:89:b7:2a:e1:1f:bb:e3:3c:36:0e:fd:4e:
         fa:74:7c:0d:ab:5b:f6:3b:de:1e:57:8f:86:35:04:ca:07:15:
         da:53:13:71:a1:ff:90:d0:a1:ee:44:a8:8b:f5:55:b3:4e:fd:
         01:5e:64:ce:91:35:2f:75:a9:30:49:04:ba:89:2c:5c:e7:ba:
         59:d0:ea:74:88:64:b0:4d:b3:78:2c:e0:f5:b9:26:04:72:b2:
         12:e0:5e:91:6d:da:ec:20:c3:29:3c:47:64:84:cd:ec:0c:e0:
         3e:78:db:0b:d7:34:c7:8f:14:f6:c8:d9:d2:eb:ef:51:89:d3:
         56:c6:28:e0:b0:af:19:df:e4:0a:5f:96:05:fe:d6:1d:17:8e:
         10:9c:ac:d3:9a:6c:d8:96:78:41:cc:d6:21:94:c1:1f:93:ad:
         3c:c4:59:bf:1e:2f:27:a9:e2:fb:1a:52:e1:43:f5:0f:fa:ef:
         d7:27:f7:5d:ea:ae:dc:d6:00:86:e6:50:a7:fe:8f:44:59:a8:
         7c:37:e3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:51:13 2025 by rpki-client