This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD55271CC14111F09CF619C1DAE4EC9C.roa
File:                     BD55271CC14111F09CF619C1DAE4EC9C.roa (raw, json)
Hash identifier:          82eV6rH8Jh3AdEj74UpwzPvaw25zMWYHyZV/AHsw7hI=
Subject key identifier:   08:0B:12:DD:1A:A0:50:BA:65:B1:96:97:D2:56:92:8C:91:EF:86:B7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018773
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD55271CC14111F09CF619C1DAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 10:07:35 +0000
ROA not before:           Fri 14 Nov 2025 10:07:30 +0000
ROA not after:            Tue 16 Dec 2025 10:07:30 +0000
asID:                     22773
IP address blocks:        156.233.214.0/24 maxlen: 24
                          156.233.215.0/24 maxlen: 24
                          156.233.220.0/24 maxlen: 24
                          156.233.221.0/24 maxlen: 24
                          156.233.222.0/24 maxlen: 24
                          156.233.223.0/24 maxlen: 24
                          156.233.240.0/24 maxlen: 24
                          156.233.241.0/24 maxlen: 24
                          156.233.242.0/24 maxlen: 24
                          156.238.144.0/24 maxlen: 24
                          156.242.241.0/24 maxlen: 24
                          156.242.242.0/24 maxlen: 24
                          156.242.243.0/24 maxlen: 24
                          156.242.244.0/24 maxlen: 24
                          156.242.245.0/24 maxlen: 24
                          156.242.246.0/24 maxlen: 24
                          156.243.108.0/24 maxlen: 24
                          156.243.109.0/24 maxlen: 24
                          156.243.110.0/24 maxlen: 24
                          156.243.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100211 (0x18773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 14 10:07:30 2025 GMT
            Not After : Dec 16 10:07:30 2025 GMT
        Subject: CN=6916ff66-016c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:d4:af:d3:ba:37:32:66:96:e8:8f:59:14:
                    b0:77:11:ac:f5:0d:c8:9d:c6:dc:2a:fd:b2:a2:2f:
                    5b:e3:c3:db:6d:74:e2:bd:d6:bc:9e:88:fe:7e:8a:
                    e2:b2:ae:47:98:96:61:6d:79:fb:b0:54:57:ca:8f:
                    95:00:92:e5:c9:2b:10:0d:6a:08:45:20:df:be:fb:
                    c5:15:91:57:ac:8d:d8:97:86:05:46:76:6e:be:91:
                    14:4e:48:ca:01:33:32:da:13:0a:15:39:31:27:8c:
                    58:fe:58:a9:ae:75:25:1d:56:04:fc:e0:f9:2d:50:
                    64:cb:8c:8a:cd:7a:05:c7:16:60:e2:d1:5e:08:cb:
                    55:be:c1:a7:1b:e3:57:84:8c:f0:95:70:93:dd:40:
                    78:9a:ab:f6:7d:d2:d4:77:4e:a2:60:18:e9:8c:4b:
                    fb:3d:fb:0f:24:7c:09:7d:45:d5:c6:12:58:af:05:
                    7b:0e:ab:da:2c:4e:7f:8a:54:40:a8:c2:29:5f:59:
                    45:a8:60:c9:37:a3:da:eb:ab:87:ec:30:c6:4f:98:
                    02:f5:57:af:9f:7d:6d:b9:f1:18:18:cc:48:ac:a0:
                    d8:5a:ae:9a:21:31:1b:e8:e3:29:5d:39:f7:35:c5:
                    7c:20:d8:55:8b:6b:ad:4e:74:43:01:e0:c3:00:d5:
                    d3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0B:12:DD:1A:A0:50:BA:65:B1:96:97:D2:56:92:8C:91:EF:86:B7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD55271CC14111F09CF619C1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.214.0/23
                  156.233.220.0/22
                  156.233.240.0-156.233.242.255
                  156.238.144.0/24
                  156.242.241.0-156.242.246.255
                  156.243.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:1f:1a:49:79:db:90:97:4b:f9:6e:29:b7:49:c8:dd:f4:cb:
         88:c9:be:92:00:c6:10:69:1b:b8:6f:ec:a4:66:f6:58:b1:4b:
         ea:df:04:2e:6d:b0:a4:45:c7:d8:e4:5d:15:6f:cd:74:dc:cb:
         e9:86:f4:86:8b:1f:37:09:52:ab:43:a4:fe:91:2a:ff:5f:8f:
         17:8b:cf:1c:4c:71:5b:ed:05:3f:73:ac:4f:48:1d:3f:c0:49:
         57:61:d3:8e:76:2a:cb:3f:88:b6:ed:2e:d2:37:5e:c9:5d:c5:
         79:19:71:2a:76:ff:fe:d1:0e:51:2b:7d:01:f0:02:e9:50:24:
         b9:24:4c:ba:df:e2:1d:98:23:2b:9e:9b:e8:1e:1f:16:e3:32:
         0f:22:dd:73:16:89:37:dc:e7:08:d0:27:06:8f:86:81:b0:c2:
         66:d7:bd:8e:36:9f:7f:3b:75:2a:1d:ae:e2:b8:00:a0:59:ac:
         81:80:9b:44:64:38:de:52:f3:05:99:08:ea:6e:c8:af:3f:dd:
         7d:83:e5:e4:66:42:59:a2:0f:c6:07:03:f5:20:b9:91:28:4a:
         1d:57:f9:6e:a7:56:90:67:a6:f5:7b:e7:41:3a:21:25:19:c7:
         cc:03:ee:14:0d:08:59:60:f1:2a:10:6d:35:17:d7:8e:5b:25:
         94:3c:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:07 2025 by rpki-client