This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEA1EDCACFA711F098790ECBDAE4EC9C.roa
File:                     BEA1EDCACFA711F098790ECBDAE4EC9C.roa (raw, json)
Hash identifier:          EthMI9tcMU6LWoLUtIAp3U9tORLp6xdV+qISTVyFX6U=
Subject key identifier:   C1:1F:4E:9F:D8:5C:8F:A5:B1:EA:4D:34:08:8C:4F:48:E1:9F:08:F1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018B39
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEA1EDCACFA711F098790ECBDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 17:53:02 +0000
ROA not before:           Tue 02 Dec 2025 17:52:57 +0000
ROA not after:            Mon 23 Mar 2026 17:52:57 +0000
asID:                     135377
IP address blocks:        156.229.18.0/24 maxlen: 24
                          156.229.19.0/24 maxlen: 24
                          156.229.20.0/24 maxlen: 24
                          156.229.21.0/24 maxlen: 24
                          156.229.22.0/24 maxlen: 24
                          156.229.23.0/24 maxlen: 24
                          156.229.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101177 (0x18b39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 17:52:57 2025 GMT
            Not After : Mar 23 17:52:57 2026 GMT
        Subject: CN=692f277d-be7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:87:7e:96:c2:29:7e:4d:be:8e:c5:44:6a:
                    ab:3d:65:26:17:7f:c7:17:7d:ed:cc:10:4c:79:f3:
                    d2:87:6e:b6:00:52:5b:79:0e:af:b3:e9:15:b5:4a:
                    92:d3:c9:6a:f3:49:e0:3b:e5:69:13:8c:2f:51:0c:
                    d9:a1:e5:87:7b:4b:13:bf:66:c3:78:bc:c2:ee:61:
                    8e:d4:25:68:2e:4f:b5:90:73:a9:8d:b6:bc:f9:da:
                    05:65:2b:74:26:e4:5e:b3:83:26:fb:fe:4e:1d:cc:
                    ea:51:9a:68:79:0e:3e:40:c0:53:94:32:e6:61:e2:
                    72:70:6c:06:b8:81:33:e8:05:1b:d2:da:c0:e1:1d:
                    64:c0:e4:2b:79:67:80:4e:df:53:d1:8d:79:2d:d4:
                    31:ee:93:55:5e:6f:d5:8b:90:e8:68:3a:ce:c7:62:
                    bb:92:da:42:c0:29:28:cd:00:27:aa:74:68:76:46:
                    a4:64:ae:4f:50:5c:d3:bc:5b:d5:66:1e:89:dd:34:
                    fe:d3:88:13:34:95:84:d8:c5:6b:a4:57:7c:72:68:
                    2e:c5:d5:c0:6e:5e:26:5e:dc:1c:1c:9d:14:d1:a4:
                    0c:38:17:9d:aa:af:40:25:16:d1:9d:e1:78:dc:9e:
                    9a:b7:17:5c:36:c2:df:8c:96:a9:dd:fb:7b:df:e6:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1F:4E:9F:D8:5C:8F:A5:B1:EA:4D:34:08:8C:4F:48:E1:9F:08:F1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEA1EDCACFA711F098790ECBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.18.0-156.229.25.255

    Signature Algorithm: sha256WithRSAEncryption
         79:f4:b5:33:34:24:6a:6b:b0:10:5c:83:61:32:c7:a9:df:d3:
         87:e5:a6:d3:a5:26:84:f9:6c:ae:cd:f5:66:1c:b3:af:b8:9b:
         50:6a:10:72:8a:4c:16:57:96:40:ad:4e:2b:21:a9:00:ec:d0:
         9e:8f:56:35:7a:f7:99:c4:b1:4c:a2:c1:7a:c7:c7:2e:40:28:
         48:2c:51:4e:4c:21:7b:84:dd:f4:99:f1:ad:c3:9f:9a:21:b4:
         31:aa:d8:ab:52:e8:3f:94:5d:af:8d:70:b6:a5:a2:7b:48:22:
         b1:20:2d:0c:f1:6e:67:1f:3d:c6:7a:f0:82:9e:7e:b0:e0:34:
         a3:e9:86:09:8f:8b:ea:a1:ee:84:c9:c7:4c:ed:8a:0b:9f:7a:
         f1:31:ee:d4:e8:8f:ec:85:44:05:dc:91:69:41:8a:e0:89:d5:
         09:58:e9:43:95:fa:9d:a8:b8:f4:82:c3:de:88:67:2b:46:e6:
         c0:16:27:a4:21:2d:77:56:9d:58:bd:8c:83:41:00:2c:d7:49:
         cb:eb:8e:55:e1:2d:b3:a6:7c:01:7b:bf:c5:71:63:e3:6b:41:
         65:cd:2a:21:80:7c:0e:fa:57:12:c1:88:1b:fd:63:14:72:48:
         4e:dd:b8:9e:fa:55:bc:1a:c9:9a:fd:44:9f:37:fd:cf:de:3c:
         77:3d:c1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:13 2025 by rpki-client