This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BDA906ACE8911F0A31AE0CDDAE4EC9C.roa
File:                     2BDA906ACE8911F0A31AE0CDDAE4EC9C.roa (raw, json)
Hash identifier:          l6e8pCLbOeF7Q4fAKFH36g5HiTjEFOR7e3IqTrPnUyQ=
Subject key identifier:   E3:A6:C2:E9:42:44:D9:D5:2D:EA:00:75:A5:5D:3B:59:DA:44:92:41
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018A87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BDA906ACE8911F0A31AE0CDDAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 07:41:39 +0000
ROA not before:           Mon 01 Dec 2025 07:41:35 +0000
ROA not after:            Wed 31 Dec 2025 07:41:35 +0000
asID:                     44559
IP address blocks:        156.238.180.0/24 maxlen: 24
                          156.238.182.0/24 maxlen: 24
                          156.239.17.0/24 maxlen: 24
                          156.239.19.0/24 maxlen: 24
                          156.239.20.0/24 maxlen: 24
                          156.239.132.0/24 maxlen: 24
                          156.239.133.0/24 maxlen: 24
                          156.239.135.0/24 maxlen: 24
                          156.243.228.0/24 maxlen: 24
                          156.249.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100999 (0x18a87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  1 07:41:35 2025 GMT
            Not After : Dec 31 07:41:35 2025 GMT
        Subject: CN=692d46b3-b9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:0d:10:c9:36:03:96:5c:3f:e7:75:68:6b:
                    6f:4b:1a:24:8f:bd:e8:4b:80:fb:69:d9:2f:70:a1:
                    48:e4:d4:bd:fe:09:c6:b5:91:c9:29:87:56:4e:45:
                    6c:25:d2:c5:3d:6e:27:10:f3:c1:f1:dd:c7:3c:23:
                    cd:70:60:33:9c:3e:f6:61:42:cc:4c:76:97:8a:3c:
                    34:e2:75:1c:4e:c7:c0:14:ee:5d:db:6c:20:9e:d2:
                    a9:f8:43:47:21:4d:38:fe:92:d8:7f:43:81:d3:6b:
                    e8:f9:8a:bd:a6:55:82:d9:78:16:53:d2:68:f6:44:
                    8d:76:0e:56:dd:73:92:0d:c3:60:b1:9f:b4:51:13:
                    a9:e8:61:a5:18:3c:cf:fd:2f:56:f0:dc:55:e9:ee:
                    84:fb:ad:ce:c6:3f:01:4e:af:31:e4:9c:2a:f8:95:
                    98:7b:5c:88:b1:d0:fc:79:e7:11:e0:be:1b:69:44:
                    ff:67:10:4c:37:7c:b3:8e:92:78:10:75:2f:5b:6c:
                    47:bc:9e:21:e6:d0:e1:18:9c:e2:4e:99:59:3e:a6:
                    20:d7:8f:7e:72:0f:06:d4:a4:d4:f5:83:88:60:47:
                    ab:98:1d:d8:ba:10:4d:8d:f5:b6:27:43:ee:6a:90:
                    a8:80:8a:30:fd:76:da:47:0a:27:36:49:81:9b:3e:
                    85:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A6:C2:E9:42:44:D9:D5:2D:EA:00:75:A5:5D:3B:59:DA:44:92:41
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BDA906ACE8911F0A31AE0CDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.180.0/24
                  156.238.182.0/24
                  156.239.17.0/24
                  156.239.19.0-156.239.20.255
                  156.239.132.0/23
                  156.239.135.0/24
                  156.243.228.0/24
                  156.249.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a5:66:3f:e5:1d:dc:57:37:05:66:8a:ba:14:cd:3a:1a:7f:
         34:bc:d2:10:dd:80:79:16:a8:5a:31:4c:d5:68:5b:d3:a3:a7:
         ca:07:ce:9d:36:01:d6:88:6c:6a:c3:15:89:df:8b:41:13:44:
         1a:cc:6c:df:07:cd:12:b9:f2:9a:ec:33:53:7c:90:53:84:e4:
         1a:92:a0:b8:45:f5:0c:a1:c6:b7:1d:dc:d5:ac:5e:b3:d2:89:
         f7:d1:5e:17:06:a4:c1:18:45:ff:37:c7:f3:0b:88:64:44:4f:
         e5:f1:b3:40:db:fa:0d:b2:e3:88:a1:23:b1:3a:e5:53:b7:ae:
         1f:47:c4:d6:26:12:a5:13:bc:4f:7f:a5:fc:fe:10:c5:b4:64:
         fc:7b:ec:77:4a:a6:09:f4:04:2d:6c:08:2f:47:7f:b9:b8:10:
         1d:2c:ee:0f:73:11:d0:ab:8a:87:22:04:aa:0d:5e:47:b3:b2:
         32:2d:a6:cd:c6:ac:6c:49:4d:e8:d5:17:71:ac:79:6b:96:6c:
         d0:2f:8f:18:a4:98:71:4d:be:58:d3:18:74:8c:aa:39:9b:65:
         27:5d:2f:55:55:da:58:26:36:f7:98:88:de:32:09:87:86:17:
         07:39:9f:21:89:4f:3f:b4:6f:6b:fd:c0:47:33:59:87:88:6c:
         72:1c:de:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:07 2025 by rpki-client