This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38697398CC4311F0834E7993DAE4EC9C.roa
File:                     38697398CC4311F0834E7993DAE4EC9C.roa (raw, json)
Hash identifier:          WzeMdsEe9WNu7bilCinrrEVZ9ixV+pCdob3dlJKYNQ0=
Subject key identifier:   D9:2B:84:EA:E1:AE:8D:76:E8:1F:54:C4:FA:90:CE:7D:C0:10:DC:EE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018A4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38697398CC4311F0834E7993DAE4EC9C.roa
Signing time:             Fri 28 Nov 2025 10:15:55 +0000
ROA not before:           Fri 28 Nov 2025 10:15:48 +0000
ROA not after:            Sun 28 Dec 2025 10:15:48 +0000
asID:                     48031
IP address blocks:        156.246.140.0/24 maxlen: 24
                          156.246.141.0/24 maxlen: 24
                          156.246.142.0/24 maxlen: 24
                          156.246.143.0/24 maxlen: 24
                          156.246.144.0/24 maxlen: 24
                          156.246.145.0/24 maxlen: 24
                          156.246.146.0/24 maxlen: 24
                          156.246.147.0/24 maxlen: 24
                          156.246.148.0/24 maxlen: 24
                          156.246.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100943 (0x18a4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 28 10:15:48 2025 GMT
            Not After : Dec 28 10:15:48 2025 GMT
        Subject: CN=6929765b-c8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:b1:03:7b:a1:24:72:bc:96:0b:27:77:fc:
                    3c:81:1d:ea:a5:5e:5f:8c:22:05:99:e6:db:79:99:
                    cb:43:48:ca:80:14:4d:ad:30:1e:ae:bb:bf:2e:6c:
                    b2:0c:5e:2e:40:01:e9:c1:5e:7f:4e:ad:08:97:42:
                    d2:c2:a9:87:be:36:0e:e0:3a:d1:f6:23:c9:b6:ae:
                    c5:0e:18:e4:04:fb:e5:6a:45:83:40:2a:73:47:2e:
                    80:6b:d5:ad:6b:6d:0d:40:bb:9f:b5:2f:db:d9:83:
                    7e:7e:be:87:5a:f3:d6:58:84:47:46:43:04:21:7c:
                    7a:66:f9:f2:62:6f:94:ee:d7:32:03:03:c3:17:73:
                    a1:4d:ab:4a:53:1c:98:14:94:65:ae:b4:42:7a:b7:
                    7d:e8:85:c9:4d:1e:d9:03:74:09:f0:62:4f:23:a1:
                    43:5d:27:fa:6d:bc:22:a7:92:d9:b6:0f:11:76:d2:
                    98:a7:b9:57:e8:0e:ae:1a:a0:ef:c5:75:57:79:b3:
                    25:71:cb:3c:b6:1e:d6:43:09:c0:84:19:13:3f:4e:
                    c5:43:82:4b:d0:a3:29:94:04:e9:d4:9a:ea:3a:ea:
                    3b:bf:bb:8f:f3:dd:ba:c6:a8:3e:0b:83:13:76:f4:
                    74:63:f3:13:11:b0:ac:4b:aa:1f:4b:23:ef:2f:fa:
                    03:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2B:84:EA:E1:AE:8D:76:E8:1F:54:C4:FA:90:CE:7D:C0:10:DC:EE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38697398CC4311F0834E7993DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.140.0-156.246.149.255

    Signature Algorithm: sha256WithRSAEncryption
         70:2c:71:00:3b:51:0d:d6:df:56:ca:e1:a3:65:98:39:9d:26:
         4e:b3:f8:7a:da:e8:1b:4a:57:33:de:3b:e9:3d:58:6f:82:aa:
         82:18:06:0a:f4:9b:f4:08:a8:54:3a:e7:0e:4c:50:9c:6c:7f:
         69:6f:8c:21:1b:65:d9:a7:eb:be:a3:03:f0:14:c2:34:b6:45:
         64:e3:3a:36:38:e8:ea:85:ed:b9:5f:3d:ef:a1:a3:38:6e:86:
         f7:32:99:d9:a9:8b:b5:f8:b5:af:9b:d7:a8:36:b0:41:a6:87:
         e3:87:84:cc:c6:0a:30:fb:ee:e9:d8:7f:5a:11:70:2e:24:f9:
         f2:2c:7b:c5:19:14:13:29:8f:49:c9:4a:f1:f6:31:37:bc:57:
         f4:3a:07:4f:1e:89:10:f3:01:5b:43:88:97:d7:5d:c0:0b:26:
         09:91:78:e6:36:d0:ca:8f:a1:c1:d1:19:ac:8a:84:1a:4b:9d:
         34:21:da:02:68:86:ae:a9:21:7f:b6:b5:34:44:26:8f:66:9a:
         62:91:9e:d7:37:f5:a2:ad:0a:c0:96:01:47:8e:5d:01:62:9f:
         ca:a0:c0:16:f4:96:ab:a2:57:02:25:91:5e:2d:f5:af:c4:32:
         62:75:a1:87:5b:30:fc:e4:2d:4c:b6:79:52:8c:12:bf:27:ce:
         93:18:c0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:13 2025 by rpki-client