This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B53A24D8CC2C11F085D8CD89DAE4EC9C.roa
File:                     B53A24D8CC2C11F085D8CD89DAE4EC9C.roa (raw, json)
Hash identifier:          l6QFHnL5gc2f7jFZbOVZv4wHTI2E/J1dfGgsmkTyr7g=
Subject key identifier:   0A:04:42:41:5E:93:ED:54:00:B4:D3:3C:5F:40:6D:B0:D3:A2:BC:C8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018A19
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B53A24D8CC2C11F085D8CD89DAE4EC9C.roa
Signing time:             Fri 28 Nov 2025 07:34:44 +0000
ROA not before:           Fri 28 Nov 2025 07:34:35 +0000
ROA not after:            Sun 28 Dec 2025 07:34:35 +0000
asID:                     44559
IP address blocks:        156.246.209.0/24 maxlen: 24
                          156.246.210.0/24 maxlen: 24
                          156.246.211.0/24 maxlen: 24
                          156.246.212.0/24 maxlen: 24
                          156.246.213.0/24 maxlen: 24
                          156.246.214.0/24 maxlen: 24
                          156.246.215.0/24 maxlen: 24
                          156.246.216.0/24 maxlen: 24
                          156.246.217.0/24 maxlen: 24
                          156.246.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100889 (0x18a19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 28 07:34:35 2025 GMT
            Not After : Dec 28 07:34:35 2025 GMT
        Subject: CN=69295094-3f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:36:fe:a9:76:e6:f0:de:24:ca:03:8a:6e:
                    84:90:65:5c:89:ac:0a:d1:29:a6:e0:61:0f:30:6f:
                    23:df:51:ca:e3:2e:08:e4:e3:b3:eb:a8:26:33:a8:
                    95:e3:9b:05:ba:29:3e:72:2f:69:5d:bd:10:ea:2a:
                    1d:bf:a1:7a:ca:56:ba:f2:7f:fd:90:a9:6f:de:0b:
                    7a:fb:91:c3:9d:8e:b0:dd:82:cf:b6:b5:c6:e4:f8:
                    26:76:e8:ab:00:f7:bb:75:bd:04:a2:ce:c9:e9:5a:
                    19:74:97:d3:ad:2d:72:c5:b9:0a:d8:fd:b1:07:8b:
                    19:7a:a8:44:5e:ab:32:ec:1e:fd:c8:26:e4:0f:43:
                    29:47:a3:bf:fc:87:f5:42:f6:44:ad:59:b4:d6:8b:
                    54:16:44:34:23:c1:1c:e6:a6:9c:4c:93:18:0e:08:
                    c1:ee:3f:d9:09:fe:df:03:a7:f8:2d:a3:91:84:7e:
                    de:13:94:46:f2:cf:da:99:6b:67:76:07:12:71:5d:
                    31:b7:2c:4a:53:a7:8b:a8:ca:f9:49:9d:25:1f:f5:
                    dc:22:8b:58:66:a1:cb:a3:1a:c9:31:72:5b:e3:59:
                    52:e3:31:55:42:99:5c:72:88:e7:33:02:b6:65:7a:
                    ef:59:3f:ed:d5:92:2c:d7:8c:f3:ed:9d:45:96:a8:
                    c2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:04:42:41:5E:93:ED:54:00:B4:D3:3C:5F:40:6D:B0:D3:A2:BC:C8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B53A24D8CC2C11F085D8CD89DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.209.0-156.246.218.255

    Signature Algorithm: sha256WithRSAEncryption
         79:ea:26:94:dc:a2:f2:ec:c7:bf:28:9b:fa:c1:51:06:cc:e0:
         02:ca:79:15:49:c9:81:10:b0:b8:80:04:f7:0a:2a:c0:f5:10:
         20:4f:7b:0c:16:0e:05:b6:c9:07:63:fd:32:30:86:8d:49:13:
         5d:f7:26:a3:cb:33:06:7b:71:98:ea:52:c7:4e:0b:31:bc:bc:
         b6:f9:63:1d:20:97:ae:94:82:10:61:dd:c9:4c:8f:98:ac:4c:
         1b:2d:54:44:33:2c:27:ed:c6:83:0f:4a:a0:27:1a:58:85:22:
         b5:8e:d1:87:81:b4:85:a1:bf:5f:d2:fe:41:33:7a:80:32:67:
         6d:8d:83:80:44:13:d8:46:a2:69:7f:c5:21:7b:a4:3d:9e:e5:
         6e:cf:40:4b:4e:f4:3d:a0:30:55:2f:fb:8e:fd:bb:71:dc:02:
         50:df:27:c2:e0:68:79:1e:b1:09:36:0c:52:e2:eb:b2:8d:fb:
         6f:f4:38:d5:25:16:38:eb:92:0f:06:d7:44:1b:72:5e:dd:a2:
         2d:56:a6:b0:3f:df:ed:3d:9a:75:6c:34:0c:38:46:0e:05:91:
         38:cf:a8:26:26:c5:5f:e2:40:30:64:e1:3f:80:2d:43:38:c1:
         7b:a1:ff:ca:89:dd:79:70:51:a8:33:15:b2:81:3a:f0:36:5b:
         77:ca:53:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:07 2025 by rpki-client