This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B43544ACEC311F0A5D1D3B2DAE4EC9C.roa
File:                     2B43544ACEC311F0A5D1D3B2DAE4EC9C.roa (raw, json)
Hash identifier:          oCrdFQuM8qa/cRwbHhrQ/lzuMN42yDsshS/5sImDl6k=
Subject key identifier:   CF:5C:31:A5:10:D4:26:0A:2E:9B:2D:56:86:4F:9F:40:6F:3C:15:41
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018AA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B43544ACEC311F0A5D1D3B2DAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 14:36:50 +0000
ROA not before:           Mon 01 Dec 2025 14:36:44 +0000
ROA not after:            Wed 31 Dec 2025 14:36:44 +0000
asID:                     62240
IP address blocks:        156.229.1.0/24 maxlen: 24
                          156.229.124.0/24 maxlen: 24
                          156.229.175.0/24 maxlen: 24
                          156.229.237.0/24 maxlen: 24
                          156.229.238.0/24 maxlen: 24
                          156.229.244.0/24 maxlen: 24
                          156.229.245.0/24 maxlen: 24
                          156.229.246.0/24 maxlen: 24
                          156.229.254.0/24 maxlen: 24
                          156.229.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101033 (0x18aa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  1 14:36:44 2025 GMT
            Not After : Dec 31 14:36:44 2025 GMT
        Subject: CN=692da801-850a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:49:6b:30:5a:f4:68:3c:b7:ac:a2:fc:75:
                    bd:c3:5b:f6:a7:0a:d4:81:09:49:80:33:ff:7f:ea:
                    9a:1d:64:c3:73:e7:8c:57:7c:49:a4:c7:3f:b7:37:
                    48:4b:de:10:6f:f3:f9:39:96:e9:6f:25:88:29:10:
                    e1:1f:b1:ac:79:71:59:fb:00:4e:1d:1e:20:a2:c8:
                    68:cc:b3:60:59:8c:dc:7c:41:a8:9f:90:73:36:6e:
                    85:f0:56:0d:ee:d4:e8:a4:d3:ac:df:35:c1:96:4e:
                    67:15:7b:a1:ac:07:3d:b8:5f:c1:31:6a:b6:79:ad:
                    61:10:cb:d4:38:5c:95:8c:8b:19:4c:45:5d:8c:5f:
                    f9:e4:0a:db:d3:38:5f:af:dd:04:31:90:5c:c6:38:
                    e2:ba:c9:53:8b:0b:d4:fe:83:08:43:0e:7f:6b:71:
                    46:61:69:77:ca:c5:01:0a:08:50:f1:1b:29:21:5e:
                    62:8d:92:5a:50:1c:b8:7d:53:b0:8b:f4:00:80:b8:
                    2d:cf:a6:5a:a4:6f:83:f8:53:26:57:35:32:74:e6:
                    cd:34:fb:37:2f:c3:7d:5c:26:28:64:fe:7d:f4:65:
                    f3:a4:1a:2c:97:a8:5d:a4:bd:d1:80:51:bf:98:9e:
                    21:cb:ba:89:11:82:b3:ed:7d:88:7d:50:63:3b:b1:
                    e9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5C:31:A5:10:D4:26:0A:2E:9B:2D:56:86:4F:9F:40:6F:3C:15:41
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B43544ACEC311F0A5D1D3B2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.1.0/24
                  156.229.124.0/24
                  156.229.175.0/24
                  156.229.237.0-156.229.238.255
                  156.229.244.0-156.229.246.255
                  156.229.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:c9:38:41:dd:53:ae:ea:cb:e0:df:4e:c9:2f:a8:0e:5d:a1:
         36:2c:bc:da:ec:22:fa:78:5d:12:49:30:4e:87:3f:5e:e1:bb:
         00:91:21:26:9a:88:67:8f:c1:89:2d:86:dd:5c:f1:37:c2:e8:
         25:3f:10:f3:b0:3d:7b:9c:96:53:b1:8f:0c:10:a6:33:0e:cc:
         3d:7f:1b:62:f1:01:34:c2:ac:45:fd:53:22:00:87:3d:0f:af:
         18:d4:51:55:27:84:70:34:fe:f1:7b:d6:1b:23:77:f4:45:2d:
         5c:44:2c:fb:2c:cd:b3:e6:88:77:c4:fc:1c:02:ca:84:80:28:
         28:f1:7e:90:cb:dc:aa:c4:3b:5b:d0:f5:dd:ee:f3:13:7f:2b:
         fe:8d:fc:d3:dd:0e:30:7e:4e:7f:b5:3d:b7:d9:3b:ef:06:69:
         3f:c1:6b:7e:46:3a:26:9c:25:e6:d9:9b:0f:01:b5:1b:9c:26:
         c1:66:ac:43:f8:21:57:70:56:36:33:a8:e0:47:40:33:08:93:
         a6:72:1f:a1:55:37:88:6d:9e:c7:cd:de:bd:42:e5:f0:66:e7:
         86:c1:f3:74:5a:64:78:fe:f8:b3:26:1b:85:c6:b8:d3:71:8e:
         32:33:bb:13:82:a5:fc:79:21:74:0c:b6:a8:a2:53:71:9d:80:
         b4:c5:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:03 2025 by rpki-client