This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5497408ACEC911F0BC3D88D8DAE4EC9C.roa
File:                     5497408ACEC911F0BC3D88D8DAE4EC9C.roa (raw, json)
Hash identifier:          lUW5rBw0mqZGyOn+8t3T7b5RamIZHWkbBmLsjUweakE=
Subject key identifier:   FB:F2:4E:99:DB:32:A6:8E:10:0F:F0:CD:0B:9D:5B:03:64:46:63:AD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018ABB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5497408ACEC911F0BC3D88D8DAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 15:20:55 +0000
ROA not before:           Mon 01 Dec 2025 15:20:50 +0000
ROA not after:            Wed 31 Dec 2025 15:20:50 +0000
asID:                     44559
IP address blocks:        156.243.191.0/24 maxlen: 24
                          156.243.216.0/24 maxlen: 24
                          156.243.217.0/24 maxlen: 24
                          156.243.219.0/24 maxlen: 24
                          156.243.220.0/24 maxlen: 24
                          156.243.221.0/24 maxlen: 24
                          156.243.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101051 (0x18abb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  1 15:20:50 2025 GMT
            Not After : Dec 31 15:20:50 2025 GMT
        Subject: CN=692db257-30b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:72:93:50:07:3d:51:fb:88:a4:54:05:2c:
                    46:ee:f7:22:70:ff:a8:c5:9a:7e:5f:d4:73:6d:eb:
                    a9:a2:1a:f7:33:21:b2:b9:19:6e:e3:f8:37:b3:ea:
                    f4:b4:b3:c6:b4:b1:08:c8:be:67:ed:8c:6a:10:0f:
                    d5:55:e6:50:8b:80:b7:b8:1b:d7:73:f7:82:63:16:
                    fa:e6:1f:b9:1c:39:4d:aa:fb:5f:d7:60:3f:78:95:
                    8e:76:2d:26:8a:60:e8:2b:49:41:55:52:6e:4c:30:
                    d5:2f:45:4a:a9:d7:97:b7:ab:24:15:6c:97:74:b0:
                    54:c0:72:69:af:1b:66:1c:59:71:db:cf:f6:de:68:
                    81:4b:31:e4:c1:fd:bc:9d:c5:ee:d9:fd:5f:c6:ef:
                    c1:54:c2:e4:36:6b:7b:10:65:40:33:31:33:53:a4:
                    38:33:35:d3:07:41:2e:1e:d9:17:a2:3b:4d:65:9f:
                    5b:e5:a8:7e:26:a5:48:a6:9a:0b:87:c5:29:7d:e5:
                    48:c7:a7:94:93:c7:cd:d0:7d:fc:2e:e4:c3:d0:28:
                    81:7b:8a:e6:3a:21:85:d8:68:cf:b3:ac:77:1b:58:
                    5c:e1:c6:13:ea:4f:22:00:3a:69:21:5d:a3:38:60:
                    0a:47:44:00:54:7e:ba:ec:73:ef:3c:e3:2f:12:0e:
                    15:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F2:4E:99:DB:32:A6:8E:10:0F:F0:CD:0B:9D:5B:03:64:46:63:AD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5497408ACEC911F0BC3D88D8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.191.0/24
                  156.243.216.0/23
                  156.243.219.0-156.243.222.255

    Signature Algorithm: sha256WithRSAEncryption
         31:84:34:5f:bd:b2:e4:fe:ed:e6:ea:83:21:8d:81:97:40:1f:
         19:9c:da:25:00:98:44:89:d3:c7:fd:ac:74:3d:20:42:ed:db:
         d2:1a:b9:2f:2a:59:3a:64:7a:31:4d:a1:f3:0c:d0:b9:c6:02:
         21:c9:e8:7a:51:46:cf:f9:21:f2:13:04:d6:52:05:eb:82:92:
         42:ab:ec:fb:be:04:06:49:bd:6f:b4:ba:3b:8b:5a:ec:93:ff:
         dc:67:c3:6f:1b:79:cd:8c:0f:c8:7b:18:06:16:4c:e6:5d:50:
         b3:24:fb:b6:a8:15:27:cb:b9:ec:7f:39:ae:f4:67:55:55:14:
         23:62:01:27:32:f2:07:ba:1a:b0:4b:32:dd:1a:ad:3a:ae:29:
         7f:cd:85:d1:f9:ae:0e:41:d6:22:f9:de:43:33:f7:7c:3f:04:
         e5:c8:a6:de:6c:f1:3f:6d:d4:38:94:3e:6c:e7:a5:68:c0:57:
         e0:8c:e2:3d:63:42:3b:7b:ce:52:0b:6b:e5:50:c8:06:f2:07:
         6e:f3:99:5d:10:85:2d:59:27:e3:99:74:14:94:99:4f:01:cd:
         cf:80:2c:8b:6c:f0:5f:7d:d1:06:d7:ea:cc:b4:0b:b2:c2:59:
         f3:51:4e:19:5a:a7:35:ee:ad:ce:c8:46:3c:73:4c:22:dc:17:
         07:77:51:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:47:55 2025 by rpki-client