This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35C34F6ECE8D11F0BD02CBE6DAE4EC9C.roa
File:                     35C34F6ECE8D11F0BD02CBE6DAE4EC9C.roa (raw, json)
Hash identifier:          UzzMtJDM2goZ29f2yjma4RztUaqquWvNNez0wTQdjkE=
Subject key identifier:   7B:46:0D:35:BA:19:88:97:F3:F5:76:54:ED:96:96:43:60:1B:37:23
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018A8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35C34F6ECE8D11F0BD02CBE6DAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 08:10:34 +0000
ROA not before:           Mon 01 Dec 2025 08:10:29 +0000
ROA not after:            Wed 31 Dec 2025 08:10:29 +0000
asID:                     44559
IP address blocks:        156.248.6.0/24 maxlen: 24
                          156.248.7.0/24 maxlen: 24
                          156.248.20.0/24 maxlen: 24
                          156.248.21.0/24 maxlen: 24
                          156.248.23.0/24 maxlen: 24
                          156.249.19.0/24 maxlen: 24
                          156.249.80.0/24 maxlen: 24
                          156.249.81.0/24 maxlen: 24
                          156.249.83.0/24 maxlen: 24
                          156.249.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101003 (0x18a8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  1 08:10:29 2025 GMT
            Not After : Dec 31 08:10:29 2025 GMT
        Subject: CN=692d4d7a-3efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:2d:2a:b4:0b:6f:73:73:cc:23:b3:6c:10:
                    a6:9a:ae:5e:f9:ea:5e:67:6c:40:84:af:53:7e:b6:
                    5c:05:9f:29:cc:81:25:08:c8:a3:7a:9e:fe:a9:51:
                    e9:9c:63:ba:03:ca:cb:50:37:c4:15:01:06:97:cc:
                    05:00:1c:dd:33:90:1d:31:e5:28:f8:07:82:61:f9:
                    ea:93:44:40:72:53:36:e1:be:82:c5:dc:c7:ab:4a:
                    8e:1a:ad:db:46:2d:e1:5d:5a:0f:2c:ae:63:43:02:
                    1c:3f:df:fe:47:17:0c:b9:3c:a3:4e:f7:81:92:cf:
                    b6:77:c1:21:21:25:bb:bf:06:9c:b3:48:d8:67:5c:
                    20:33:73:2d:d4:ef:db:cf:4b:1b:97:13:23:87:2c:
                    32:0f:2e:d9:66:20:90:12:8d:a5:da:02:9b:3c:ad:
                    62:fa:a0:61:37:b4:57:2c:39:98:e3:41:8e:a5:a6:
                    65:12:46:62:3c:2c:79:20:bf:c2:6e:2f:46:03:fe:
                    ec:fd:8e:f2:34:4a:bd:de:a5:43:50:85:4f:8a:9d:
                    9e:5c:68:8f:bd:57:12:22:ca:cc:aa:b2:a6:7e:31:
                    ec:19:16:a5:e9:cf:85:2a:9b:4c:46:3a:bc:14:8b:
                    ac:5a:60:cd:a9:2d:0c:c3:5e:f1:38:cb:67:a0:8a:
                    3a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:46:0D:35:BA:19:88:97:F3:F5:76:54:ED:96:96:43:60:1B:37:23
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35C34F6ECE8D11F0BD02CBE6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.248.6.0/23
                  156.248.20.0/23
                  156.248.23.0/24
                  156.249.19.0/24
                  156.249.80.0/23
                  156.249.83.0/24
                  156.249.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:5a:4b:c6:06:81:ba:bd:0d:4d:2e:9f:17:89:b7:5b:3e:67:
         3c:92:29:a6:77:e8:de:49:5e:56:cd:e0:52:e6:13:ae:5c:15:
         0e:fb:0e:01:a9:24:54:20:32:f0:ab:29:bb:9c:7b:92:b0:78:
         23:2c:dc:6d:da:df:70:4f:c6:2f:33:9b:8f:b7:a7:2d:65:eb:
         1d:2b:7a:1e:f7:c5:88:95:e4:58:80:56:56:8e:c0:c1:62:bd:
         a2:f7:51:6c:41:7e:10:bc:09:6b:24:fc:6a:4c:b4:26:0f:3d:
         e6:8f:75:c5:44:36:c5:fd:66:4e:73:18:86:3f:80:c9:a4:ce:
         af:d0:84:30:2d:39:e5:f1:aa:28:62:50:cc:44:a8:71:cd:48:
         08:f0:88:cb:e5:75:36:4e:9d:64:1d:6c:15:2a:83:99:5b:27:
         d4:e2:f1:31:4f:fd:dc:2f:db:84:73:57:0d:8e:13:57:76:1e:
         21:2f:ff:c1:ee:9c:21:36:4f:2e:47:06:56:20:a5:a1:7e:50:
         1e:96:59:06:b0:3a:97:75:f6:a9:7e:88:ed:ff:15:c5:f9:9a:
         22:bf:92:ed:8f:41:cd:a5:ff:59:68:50:da:04:ff:8f:2d:40:
         5f:f9:19:61:d0:a8:c2:73:b2:f5:48:e1:ea:61:2a:a1:f2:cd:
         44:64:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:06 2025 by rpki-client