This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43BBDEACCEC811F083CC0ED2DAE4EC9C.roa
File:                     43BBDEACCEC811F083CC0ED2DAE4EC9C.roa (raw, json)
Hash identifier:          DLte6TTNxXimnWiNdayUffCeKlD3nLaBfsSKOlkzess=
Subject key identifier:   5F:B5:C9:C4:92:15:55:DD:17:3B:26:5B:0D:2A:65:B0:D1:E0:F4:2A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018AB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43BBDEACCEC811F083CC0ED2DAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 15:13:18 +0000
ROA not before:           Mon 01 Dec 2025 15:13:13 +0000
ROA not after:            Wed 31 Dec 2025 15:13:13 +0000
asID:                     44559
IP address blocks:        156.233.8.0/24 maxlen: 24
                          156.233.9.0/24 maxlen: 24
                          156.233.33.0/24 maxlen: 24
                          156.233.35.0/24 maxlen: 24
                          156.233.40.0/24 maxlen: 24
                          156.233.43.0/24 maxlen: 24
                          156.233.46.0/24 maxlen: 24
                          156.233.49.0/24 maxlen: 24
                          156.233.50.0/24 maxlen: 24
                          156.233.52.0/24 maxlen: 24
                          156.233.53.0/24 maxlen: 24
                          156.233.55.0/24 maxlen: 24
                          156.233.57.0/24 maxlen: 24
                          156.233.59.0/24 maxlen: 24
                          156.233.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101045 (0x18ab5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  1 15:13:13 2025 GMT
            Not After : Dec 31 15:13:13 2025 GMT
        Subject: CN=692db08e-ba99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:46:0e:38:73:7f:86:5a:79:26:99:07:ae:
                    c6:9c:ea:c7:e8:0d:83:31:6a:f0:dc:b7:d2:8b:1a:
                    5a:f4:51:4e:5a:dc:2f:92:ee:8e:d6:8e:3a:62:45:
                    7c:c3:ce:0f:8c:d2:37:d2:2f:ce:8f:40:d4:06:0f:
                    98:f0:e3:e4:27:c2:c8:5e:c8:a8:97:ed:8c:9b:5e:
                    6f:82:85:c5:b3:21:11:5d:a5:c0:a9:33:30:e6:81:
                    a0:e0:8a:5c:a3:6b:b1:56:c1:8b:a1:f3:71:60:eb:
                    41:33:77:0c:10:ce:31:ea:9a:12:83:c6:ca:eb:07:
                    0c:5f:62:59:ae:7d:1b:af:90:ba:1a:4e:0e:59:c0:
                    0a:fe:c3:7f:cd:26:68:ba:d7:2d:64:87:a2:bb:9b:
                    6b:90:15:fb:ed:e1:6e:5f:3b:59:08:59:ac:c4:f9:
                    8a:85:c6:00:c1:71:ca:b8:c8:54:4e:b3:cd:9e:7e:
                    a7:5a:81:14:59:23:b6:0b:bd:75:e5:8d:f5:15:58:
                    7f:a5:b4:bd:ab:2e:01:cd:a1:8a:54:da:70:39:32:
                    06:89:51:4d:36:ca:a5:8a:37:c6:60:d5:25:df:19:
                    d4:f6:68:f3:dc:7c:cb:66:fd:a0:ee:36:ae:f6:41:
                    b2:fb:57:ab:0e:55:c9:b0:d4:92:de:d3:8f:bf:1d:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B5:C9:C4:92:15:55:DD:17:3B:26:5B:0D:2A:65:B0:D1:E0:F4:2A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43BBDEACCEC811F083CC0ED2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.8.0/23
                  156.233.33.0/24
                  156.233.35.0/24
                  156.233.40.0/24
                  156.233.43.0/24
                  156.233.46.0/24
                  156.233.49.0-156.233.50.255
                  156.233.52.0/23
                  156.233.55.0/24
                  156.233.57.0/24
                  156.233.59.0/24
                  156.233.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:5d:14:9a:26:97:ab:73:98:0d:c7:07:ea:cd:3a:c7:2c:84:
         e7:a3:10:90:cf:56:71:74:1c:6a:bb:86:81:31:db:a8:68:cc:
         fa:72:7b:7f:cf:74:6b:3e:3d:dd:c7:ee:06:22:ce:de:81:c5:
         f9:da:3f:c7:0f:c6:cd:ae:1d:22:8f:1c:a7:5b:53:f3:bf:6a:
         96:3f:d2:55:c1:4a:6f:49:07:cb:6f:f5:27:fa:4d:51:00:98:
         a8:66:66:29:65:55:06:aa:66:42:ac:12:02:f3:0f:7a:0c:48:
         4a:09:99:2a:ee:3f:5d:b5:fc:10:66:42:e4:e4:03:1a:b7:7d:
         63:92:f3:b4:6b:60:9e:e6:d9:0c:59:90:64:e9:84:0e:23:03:
         2e:24:ca:e6:9f:ba:59:ad:68:84:cd:14:15:2a:fa:6b:02:23:
         24:9e:05:32:ce:a4:41:91:7a:38:c1:1d:dc:2a:86:e9:b6:d2:
         6f:11:3d:73:69:60:b5:1d:b8:e0:85:bc:20:b9:d3:32:3b:3c:
         92:99:e1:41:d3:c8:f6:04:78:ab:54:ca:d6:89:02:6d:29:36:
         30:2f:bf:65:63:9f:f1:a7:88:a7:79:2c:0d:9f:10:66:c6:7e:
         72:4a:ad:65:cd:62:0c:9f:6b:ee:33:e4:91:78:6e:58:19:22:
         ef:e5:51:7a
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIDAYq1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjAxMTUxMzEzWhcNMjUxMjMxMTUxMzEzWjAYMRYw
FAYDVQQDEw02OTJkYjA4ZS1iYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuNNGDjhzf4ZaeSaZB67GnOrH6A2DMWrw3LfSixpa9FFOWtwvku6O1o46
YkV8w84PjNI30i/Oj0DUBg+Y8OPkJ8LIXsiol+2Mm15vgoXFsyERXaXAqTMw5oGg
4Ipco2uxVsGLofNxYOtBM3cMEM4x6poSg8bK6wcMX2JZrn0br5C6Gk4OWcAK/sN/
zSZoutctZIeiu5trkBX77eFuXztZCFmsxPmKhcYAwXHKuMhUTrPNnn6nWoEUWSO2
C7115Y31FVh/pbS9qy4BzaGKVNpwOTIGiVFNNsqlijfGYNUl3xnU9mjz3HzLZv2g
7jau9kGy+1erDlXJsNSS3tOPvx1dvwIDAQABo4IC7DCCAugwHQYDVR0OBBYEFF+1
ycSSFVXdFzsmWw0qZbDR4PQqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80M0JCREVBQ0NFQzgxMUYwODNDQzBFRDJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQBnOkIAwQAnOkhAwQAnOkjAwQA
nOkoAwQAnOkrAwQAnOkuMAwDBACc6TEDBACc6TIDBAGc6TQDBACc6TcDBACc6TkD
BACc6TsDBACc6T4wDQYJKoZIhvcNAQELBQADggEBAAddFJoml6tzmA3HB+rNOscs
hOejEJDPVnF0HGq7hoEx26hozPpye3/PdGs+Pd3H7gYizt6BxfnaP8cPxs2uHSKP
HKdbU/O/apY/0lXBSm9JB8tv9Sf6TVEAmKhmZillVQaqZkKsEgLzD3oMSEoJmSru
P121/BBmQuTkAxq3fWOS87RrYJ7m2QxZkGTphA4jAy4kyuafulmtaITNFBUq+msC
IySeBTLOpEGRejjBHdwqhum20m8RPXNpYLUduOCFvCC50zI7PJKZ4UHTyPYEeKtU
ytaJAm0pNjAvv2Vjn/GniKd5LA2fEGbGfnJKrWXNYgyfa+4z5JF4blgZIu/lUXo=
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:10 2025 by rpki-client