This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9569A24C47E11F0B721ECB2DAE4EC9C.roa
File:                     C9569A24C47E11F0B721ECB2DAE4EC9C.roa (raw, json)
Hash identifier:          Nv1fAReHYoKQAFrX9IUB2KP9sHrHa9eMADnGs69x3zA=
Subject key identifier:   09:34:8A:D6:CE:7A:38:02:B5:81:DF:80:5D:BE:45:9E:47:6D:B3:2E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01883E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9569A24C47E11F0B721ECB2DAE4EC9C.roa
Signing time:             Tue 18 Nov 2025 13:02:07 +0000
ROA not before:           Tue 18 Nov 2025 13:02:02 +0000
ROA not after:            Tue 30 Dec 2025 13:02:02 +0000
asID:                     62468
IP address blocks:        156.245.242.0/24 maxlen: 24
                          156.245.248.0/21 maxlen: 24
                          156.245.248.0/24 maxlen: 24
                          156.245.249.0/24 maxlen: 24
                          156.245.250.0/24 maxlen: 24
                          156.245.251.0/24 maxlen: 24
                          156.245.252.0/24 maxlen: 24
                          156.245.253.0/24 maxlen: 24
                          156.245.254.0/24 maxlen: 24
                          156.245.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100414 (0x1883e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 18 13:02:02 2025 GMT
            Not After : Dec 30 13:02:02 2025 GMT
        Subject: CN=691c6e4f-9708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:81:6b:29:c4:a1:2d:7c:9c:5f:5f:9c:cb:
                    5f:eb:5c:7c:f2:d3:30:47:74:c9:43:47:5b:0d:c1:
                    ff:8c:16:8f:2c:04:3e:4b:56:ef:88:04:bd:56:0c:
                    09:aa:f1:02:fe:18:2a:be:e5:3b:a5:50:09:37:e1:
                    43:a7:12:87:8b:cb:f3:b7:c6:e7:ae:77:62:ee:35:
                    6e:12:67:2e:9d:e0:83:81:59:06:ef:86:d1:c0:e6:
                    40:87:d1:14:3a:6b:af:26:de:74:10:83:8a:a5:20:
                    37:5a:19:00:ac:ee:26:bb:60:42:3c:f7:89:0b:2f:
                    b8:63:aa:e0:32:10:e6:bb:7b:24:9d:d4:5e:fd:84:
                    28:6a:60:af:b9:5f:5d:c4:c8:d4:da:98:9a:d1:78:
                    a6:c4:77:78:94:2a:a5:b8:41:16:cd:40:c9:78:a2:
                    2f:64:6e:38:89:93:ed:b6:c9:dc:bf:0f:68:9e:80:
                    c3:f9:6b:8e:fe:8c:0e:25:4b:5f:96:89:33:f4:5d:
                    fd:bd:d3:27:79:2f:7d:e7:6d:ba:25:40:22:29:63:
                    58:b8:fa:8f:05:4e:79:d7:0b:39:c8:3a:48:09:14:
                    ff:7a:cf:20:74:ae:32:9f:73:6c:ab:3c:7e:67:28:
                    85:29:73:fd:34:99:38:27:52:48:b6:e9:47:6e:d5:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:34:8A:D6:CE:7A:38:02:B5:81:DF:80:5D:BE:45:9E:47:6D:B3:2E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9569A24C47E11F0B721ECB2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.242.0/24
                  156.245.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b7:0f:99:0f:23:8d:a7:7c:c8:dc:40:0e:7b:ef:30:b6:da:c4:
         88:64:25:4f:45:94:3c:37:27:f9:f5:8c:b2:5c:57:f1:6c:37:
         57:83:b1:0f:57:3b:83:e6:74:3b:5f:8b:16:50:b2:a7:95:40:
         0f:c5:f4:d5:34:b9:51:11:14:54:d8:76:9b:ff:66:42:93:48:
         75:53:4c:0c:97:a0:13:58:a4:3b:e6:a6:30:8a:82:86:6e:38:
         20:76:d4:d2:8f:b0:19:1d:1c:6d:ab:95:32:8d:41:94:7f:57:
         c4:e2:ab:4b:67:c9:aa:e7:62:eb:ad:e0:04:99:b7:3b:1a:65:
         ae:9e:67:06:05:b1:61:f4:ac:f7:ea:0e:5c:4e:b4:7b:c8:9d:
         99:e8:8a:69:dd:e1:3a:5a:34:c9:b4:85:68:fa:c8:15:5a:c4:
         d8:74:85:8b:f0:07:4c:da:c4:22:12:4e:d6:fe:ff:03:a0:0a:
         5a:71:95:ab:a4:f1:3c:9a:fd:f4:6b:e2:d0:dc:1c:d1:35:3a:
         87:8e:a7:fa:c6:7c:a3:1f:60:3c:eb:44:b4:5d:bb:e5:d8:68:
         dd:82:e0:51:f4:25:7a:38:d7:52:76:8a:7c:e0:ac:fe:f4:39:
         a5:d2:cd:8c:ac:7e:a5:ba:e0:85:76:81:78:f1:86:7c:04:7f:
         fb:8a:3e:5a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAYg+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTE4MTMwMjAyWhcNMjUxMjMwMTMwMjAyWjAYMRYw
FAYDVQQDEw02OTFjNmU0Zi05NzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvpOBaynEoS18nF9fnMtf61x88tMwR3TJQ0dbDcH/jBaPLAQ+S1bviAS9
VgwJqvEC/hgqvuU7pVAJN+FDpxKHi8vzt8bnrndi7jVuEmcuneCDgVkG74bRwOZA
h9EUOmuvJt50EIOKpSA3WhkArO4mu2BCPPeJCy+4Y6rgMhDmu3skndRe/YQoamCv
uV9dxMjU2pia0XimxHd4lCqluEEWzUDJeKIvZG44iZPttsncvw9onoDD+WuO/owO
JUtflokz9F39vdMneS995226JUAiKWNYuPqPBU551ws5yDpICRT/es8gdK4yn3Ns
qzx+ZyiFKXP9NJk4J1JItulHbtXR5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAk0
itbOejgCtYHfgF2+RZ5HbbMuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DOTU2OUEyNEM0N0UxMUYwQjcyMUVDQjJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnPXyAwQDnPX4MA0GCSqGSIb3
DQEBCwUAA4IBAQC3D5kPI42nfMjcQA577zC22sSIZCVPRZQ8Nyf59YyyXFfxbDdX
g7EPVzuD5nQ7X4sWULKnlUAPxfTVNLlRERRU2Hab/2ZCk0h1U0wMl6ATWKQ75qYw
ioKGbjggdtTSj7AZHRxtq5UyjUGUf1fE4qtLZ8mq52LrreAEmbc7GmWunmcGBbFh
9Kz36g5cTrR7yJ2Z6Ipp3eE6WjTJtIVo+sgVWsTYdIWL8AdM2sQiEk7W/v8DoApa
cZWrpPE8mv30a+LQ3BzRNTqHjqf6xnyjH2A860S0Xbvl2GjdguBR9CV6ONdSdop8
4Kz+9Dml0s2MrH6luuCFdoF48YZ8BH/7ij5a
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:47:53 2025 by rpki-client