This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA129AE4CEC411F0891BE2BDDAE4EC9C.roa
File:                     CA129AE4CEC411F0891BE2BDDAE4EC9C.roa (raw, json)
Hash identifier:          3lAr5hTr8aW3KlH9kpun35y6bCF00yjIraufgwtFIDM=
Subject key identifier:   9D:DB:9B:91:B6:D3:89:7B:E6:D1:84:CB:6A:CF:34:86:C7:21:BC:6A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018AAD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA129AE4CEC411F0891BE2BDDAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 14:48:25 +0000
ROA not before:           Mon 01 Dec 2025 14:48:20 +0000
ROA not after:            Wed 31 Dec 2025 14:48:20 +0000
asID:                     214238
IP address blocks:        156.239.21.0/24 maxlen: 24
                          156.239.22.0/24 maxlen: 24
                          156.241.40.0/24 maxlen: 24
                          156.241.42.0/24 maxlen: 24
                          156.241.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101037 (0x18aad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  1 14:48:20 2025 GMT
            Not After : Dec 31 14:48:20 2025 GMT
        Subject: CN=692daab9-d776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:17:b6:1d:75:24:f9:c7:ec:17:e7:90:21:
                    63:2b:97:3c:79:0c:1a:d1:90:1b:83:10:a0:95:44:
                    41:14:8e:1d:5d:e8:1b:f6:f1:ca:15:80:75:76:a9:
                    3f:30:d0:b7:0c:10:5b:da:25:53:67:bd:f0:80:b1:
                    d4:96:17:6e:d0:0c:e8:26:6b:4e:0b:fb:bc:b8:a6:
                    7e:66:a8:34:b0:d7:b2:0f:50:f4:2a:3f:bf:d7:8b:
                    56:19:eb:3a:c6:7e:3e:30:98:bc:e5:83:a4:f6:77:
                    96:e8:65:b4:4f:7b:d2:07:c8:19:82:ef:9d:8e:3a:
                    c2:80:c6:b3:ae:b2:73:81:85:d6:2a:6c:3b:e3:4d:
                    a4:a6:5a:28:34:ff:c3:b3:c4:94:17:e9:17:d3:4f:
                    3b:8e:ae:c4:62:f6:73:db:cb:65:f7:fa:e4:21:e7:
                    06:0b:91:8f:88:cb:b8:45:fd:e7:cb:61:26:4c:8d:
                    3c:b6:c3:92:e6:a4:7b:d3:17:e7:f6:36:90:a3:90:
                    04:c4:d5:3d:77:8a:a9:cd:60:2e:cc:1e:6b:2d:76:
                    7e:62:9e:36:12:a7:19:d2:0a:f1:ed:9f:e2:93:b5:
                    12:86:27:bf:d0:b1:ab:40:c4:cb:a7:a4:f4:57:17:
                    46:25:b8:05:bd:de:eb:1c:08:e8:ca:9e:50:59:62:
                    ad:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DB:9B:91:B6:D3:89:7B:E6:D1:84:CB:6A:CF:34:86:C7:21:BC:6A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA129AE4CEC411F0891BE2BDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.21.0-156.239.22.255
                  156.241.40.0/24
                  156.241.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:08:4e:31:4b:5c:59:d4:55:dd:4d:9a:5b:9b:45:e4:26:c6:
         c5:e7:7f:20:e6:d3:d6:89:d1:95:d2:1e:48:60:13:b0:4b:6a:
         c3:31:b9:d5:c1:be:53:d3:04:7b:9c:63:4a:4f:1d:c1:5e:19:
         2c:bb:05:d5:64:0f:3a:71:0d:50:3c:6f:49:b9:38:81:fb:d3:
         8d:a7:b3:69:03:45:28:72:02:d8:a3:74:5b:66:9d:8a:a7:11:
         ec:83:df:b1:d6:a7:36:c9:96:b1:17:43:49:67:d3:e4:3e:15:
         0e:28:3e:bc:6a:46:51:1e:a8:b6:35:ae:45:1a:41:9c:8c:e6:
         4d:2f:53:03:f5:35:f3:2f:3d:8a:a6:34:ba:5c:3e:d1:45:42:
         99:65:fb:46:9f:b4:a1:9d:16:51:69:d2:b3:9b:18:b7:e6:16:
         4b:06:75:39:a6:cd:bc:54:e9:46:85:c2:cc:a9:d7:89:a6:01:
         91:2d:53:ae:9e:83:d4:f4:a3:de:6e:20:c7:60:bd:e6:d5:db:
         5f:0d:fa:2a:47:2c:3b:a3:e0:d0:23:7d:a9:86:9e:30:c2:bc:
         ba:14:40:4a:da:4c:df:c0:da:32:45:9d:54:e9:1b:0a:df:e2:
         fa:7c:f1:5a:f7:c5:b4:47:41:3c:81:db:79:b3:d5:19:71:1e:
         f0:4b:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:58 2025 by rpki-client