This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43ACCE60D41A11F09070B8B6DAE4EC9C.roa
File:                     43ACCE60D41A11F09070B8B6DAE4EC9C.roa (raw, json)
Hash identifier:          gCkKNtvatsmkE+rK19uUR2voIb8tYvqbc7PCx+aUQvI=
Subject key identifier:   1F:C5:FA:A9:98:47:DC:60:16:33:67:59:42:7A:44:60:E8:79:A7:65
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018D1C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43ACCE60D41A11F09070B8B6DAE4EC9C.roa
Signing time:             Mon 08 Dec 2025 09:42:52 +0000
ROA not before:           Mon 08 Dec 2025 09:42:47 +0000
ROA not after:            Sat 20 Dec 2025 09:42:47 +0000
asID:                     141883
IP address blocks:        156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.242.10.0/23 maxlen: 24
                          156.242.12.0/22 maxlen: 24
                          156.246.0.0/20 maxlen: 24
                          156.246.16.0/23 maxlen: 24
                          156.249.28.0/22 maxlen: 24
                          156.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 09:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101660 (0x18d1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  8 09:42:47 2025 GMT
            Not After : Dec 20 09:42:47 2025 GMT
        Subject: CN=69369d9c-0407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:6d:5d:fd:e7:8d:74:bb:8d:ba:a2:66:40:
                    b5:25:59:35:5c:0b:f2:2d:a9:ae:14:ce:4b:88:72:
                    af:33:3a:53:4c:76:38:1e:2b:79:f9:60:bf:1f:e2:
                    b6:58:1e:4b:bf:0e:5f:41:26:08:93:86:9e:c7:28:
                    7b:4a:62:7f:7f:f8:c8:07:13:27:a6:33:10:9d:0f:
                    34:9c:f5:3e:f4:ce:5c:fd:95:d6:a9:74:ad:95:19:
                    cc:80:7d:cd:df:d7:16:d4:c5:24:e9:d8:9b:36:50:
                    06:73:34:0a:7f:60:1f:65:3f:8f:be:0c:c6:70:fb:
                    74:8b:94:30:08:83:fd:d7:58:83:df:de:3d:dd:3b:
                    17:2a:85:b0:1c:8b:74:af:e0:4a:ff:45:ab:85:7a:
                    84:06:89:21:05:3b:c0:30:45:28:8b:cc:b3:61:02:
                    cd:55:aa:bf:08:0e:90:a9:c8:cd:09:35:95:ab:44:
                    03:e8:88:5d:23:69:f8:5c:38:58:ab:f6:ec:b1:60:
                    15:c5:e1:86:bd:d7:48:b2:42:5f:79:44:6b:0a:4c:
                    f5:fa:9d:a5:f3:e0:16:84:35:48:47:fe:10:28:27:
                    f3:40:a1:e4:d6:44:bf:62:66:09:d2:33:1c:31:62:
                    09:37:cf:dc:c0:61:c2:dc:c4:93:7f:90:0d:20:a2:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C5:FA:A9:98:47:DC:60:16:33:67:59:42:7A:44:60:E8:79:A7:65
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43ACCE60D41A11F09070B8B6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.0.0-156.240.55.255
                  156.242.10.0-156.242.15.255
                  156.246.0.0-156.246.17.255
                  156.249.28.0/22
                  156.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:90:90:e9:21:c4:9d:8b:74:2e:1b:1a:37:3a:65:e2:ab:b9:
         e2:f8:4d:c2:a8:1a:b4:1f:2a:f0:57:3d:ac:0c:c7:a0:2d:c5:
         42:d2:74:8c:73:12:a6:48:12:d1:6a:76:7b:4f:ac:07:30:0f:
         c0:f4:3a:ff:e1:df:b8:25:e2:11:92:fb:c9:04:72:80:0a:b6:
         e3:a0:10:42:10:6d:ce:d1:a7:26:93:58:d4:25:e0:6c:62:44:
         42:24:99:71:74:3d:f7:44:be:57:97:a8:1d:a4:b0:d1:74:5d:
         52:9a:7a:7c:d0:24:45:e9:e7:27:6e:13:80:0c:1c:8e:c8:03:
         e4:e9:36:86:32:15:57:16:27:3c:17:5e:4d:73:b5:a9:48:17:
         d9:b4:f6:82:21:e6:0e:45:bd:89:ed:60:22:f7:25:e2:9a:f6:
         d7:b3:70:e4:04:c8:fa:72:7e:45:65:b7:c3:46:f9:d5:b6:a4:
         c0:1d:f6:c1:5c:c8:03:c4:25:1d:b7:44:80:96:db:ab:46:45:
         41:ba:79:6a:9a:66:e2:36:9f:19:5f:46:b4:6d:91:db:ba:25:
         4d:8d:fa:9f:78:d7:23:58:c3:e0:c6:6a:0b:88:6a:ef:82:b9:
         45:16:55:b6:b7:8c:43:02:e9:c0:82:ed:a7:8d:cc:df:9a:71:
         dd:d1:02:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:32:47 2025 by rpki-client