This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/876F6BB2BBD311F093309DF5DAE4EC9C.roa
File:                     876F6BB2BBD311F093309DF5DAE4EC9C.roa (raw, json)
Hash identifier:          InLHg8ClxcZSCsXLonwcKgt+Sqwv6TV2Kwi8Xb8Bh7c=
Subject key identifier:   06:E6:BE:AD:A3:D5:AA:9D:E5:70:D2:13:B3:0B:13:A0:2A:E5:D4:E1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0185B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/876F6BB2BBD311F093309DF5DAE4EC9C.roa
Signing time:             Fri 07 Nov 2025 12:16:04 +0000
ROA not before:           Fri 07 Nov 2025 12:15:54 +0000
ROA not after:            Thu 05 Feb 2026 12:15:54 +0000
asID:                     135377
IP address blocks:        156.229.28.0/24 maxlen: 24
                          156.229.50.0/24 maxlen: 24
                          156.229.54.0/24 maxlen: 24
                          156.229.236.0/24 maxlen: 24
                          156.229.247.0/24 maxlen: 24
                          156.242.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99765 (0x185b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  7 12:15:54 2025 GMT
            Not After : Feb  5 12:15:54 2026 GMT
        Subject: CN=690de304-5246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:28:5d:0c:18:ba:37:c7:6c:20:26:01:d6:
                    a6:61:bb:58:c1:ce:5d:9f:8c:23:2e:81:2b:26:31:
                    5f:ad:c3:a9:bd:67:91:c9:5e:9c:46:15:e2:13:79:
                    bd:c2:12:50:7b:93:a9:42:80:43:10:65:64:cb:d5:
                    a5:07:27:de:d2:bc:b8:9b:c7:fb:84:43:08:68:67:
                    77:db:bc:f7:82:73:e7:96:08:3c:c7:a4:03:a0:e9:
                    06:c7:32:42:72:8d:ac:0d:fd:a8:2f:a3:92:93:3d:
                    96:9e:24:de:62:29:9e:f8:04:d3:7e:c2:bd:e3:99:
                    f2:dc:fe:87:6a:33:39:32:67:fb:2a:a2:12:19:5b:
                    3b:44:e6:a5:38:a8:59:89:fe:d8:43:82:5f:40:39:
                    55:b2:26:32:e3:9c:fc:a0:39:ef:60:cc:08:bc:fa:
                    8c:d2:35:05:f0:c5:4a:45:11:f2:87:b8:c0:b5:15:
                    f0:20:a3:39:98:a9:f8:e6:b4:77:30:ca:9d:b5:e1:
                    66:7f:36:b9:53:c0:5e:2f:ce:02:70:42:1b:f9:6f:
                    f0:93:67:68:7a:97:8d:90:38:da:6d:ce:b9:d5:0c:
                    4a:46:8d:d8:82:5b:78:40:9a:44:92:a0:81:c1:28:
                    db:ba:56:5e:03:68:ad:6c:8a:81:4b:7d:9f:62:7b:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E6:BE:AD:A3:D5:AA:9D:E5:70:D2:13:B3:0B:13:A0:2A:E5:D4:E1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/876F6BB2BBD311F093309DF5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.28.0/24
                  156.229.50.0/24
                  156.229.54.0/24
                  156.229.236.0/24
                  156.229.247.0/24
                  156.242.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:db:2b:03:41:e0:5f:40:ad:62:2e:97:73:6e:4b:b1:f5:09:
         14:8c:73:fc:af:b1:f9:41:1f:16:45:af:f3:6c:2c:ec:0c:ef:
         01:e3:ec:80:0b:3c:16:68:57:16:c2:4a:e0:2d:da:ea:f9:0d:
         35:b2:ca:4f:2b:04:e1:2f:39:68:4a:35:81:27:63:5a:c7:7c:
         04:ef:e0:24:54:06:f3:66:8d:11:3c:f6:a9:ff:c3:cf:d1:9e:
         5d:f9:6b:76:d9:f3:f8:3f:e6:2b:c8:1f:33:c9:a6:84:21:57:
         01:9b:8e:c8:ea:e7:47:50:08:e1:21:61:89:0f:70:fd:b2:b9:
         54:4d:f0:3a:af:d3:c7:73:be:1e:82:d1:88:fd:8c:c3:46:9c:
         32:16:39:23:2a:67:86:a1:9c:4d:15:27:b9:dc:9b:1e:9e:8c:
         4a:36:d7:5a:cc:fb:60:7c:fe:0d:0f:a2:c7:e8:f9:be:28:05:
         cb:ad:fe:fa:97:20:5b:e4:57:a6:3b:22:08:ed:d5:c2:92:99:
         6d:92:1b:46:6a:26:23:3d:9a:f2:80:60:e3:0d:d5:66:a5:52:
         0c:43:a3:13:40:c7:fc:3e:19:99:c2:81:1e:4a:67:ad:eb:60:
         93:ee:67:c4:f0:69:71:32:a5:5d:69:fb:7a:d5:1b:92:47:e8:
         2d:18:3f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:59 2025 by rpki-client