This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D15228E2CC2B11F0AED9B783DAE4EC9C.roa
File:                     D15228E2CC2B11F0AED9B783DAE4EC9C.roa (raw, json)
Hash identifier:          ufbCrsbd6oOkC6s/oEHKR/j9Vtoz0pulrXC2Z+lOyGY=
Subject key identifier:   69:61:D1:08:40:C8:9C:10:76:A9:33:47:A3:78:8B:35:E0:7F:15:B6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018A17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D15228E2CC2B11F0AED9B783DAE4EC9C.roa
Signing time:             Fri 28 Nov 2025 07:28:22 +0000
ROA not before:           Fri 28 Nov 2025 07:28:17 +0000
ROA not after:            Sun 28 Dec 2025 07:28:17 +0000
asID:                     44559
IP address blocks:        156.246.199.0/24 maxlen: 24
                          156.246.200.0/24 maxlen: 24
                          156.246.201.0/24 maxlen: 24
                          156.246.202.0/24 maxlen: 24
                          156.246.203.0/24 maxlen: 24
                          156.246.204.0/24 maxlen: 24
                          156.246.205.0/24 maxlen: 24
                          156.246.206.0/24 maxlen: 24
                          156.246.207.0/24 maxlen: 24
                          156.246.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100887 (0x18a17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 28 07:28:17 2025 GMT
            Not After : Dec 28 07:28:17 2025 GMT
        Subject: CN=69294f16-144a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:d7:71:fa:c1:e6:73:7a:2c:6b:9d:44:41:
                    58:05:58:6f:a6:2d:e9:75:a6:90:27:ef:54:49:6e:
                    5d:f0:66:17:45:a0:f5:e9:de:fc:aa:9b:36:e3:c7:
                    96:10:91:c6:06:e1:c7:68:33:82:2b:c4:04:6b:bf:
                    4f:a3:8a:aa:f8:60:ce:c2:70:cd:78:91:9d:de:4e:
                    ad:bd:e6:75:44:8e:0c:30:f8:8c:0e:9b:73:4d:26:
                    42:45:1c:dd:14:3e:f8:77:c7:f2:92:d1:74:a2:36:
                    32:4e:28:b0:46:a0:42:12:33:e3:81:b1:9d:95:24:
                    9d:89:c5:95:55:50:f9:60:01:04:cc:be:29:d3:ff:
                    e5:aa:bc:56:5b:9c:cd:3a:ed:74:78:46:b2:8f:73:
                    5f:e2:65:6c:64:32:ca:80:89:97:c8:fd:d7:5c:25:
                    41:33:21:41:f5:28:d1:ef:cb:52:47:62:3d:18:28:
                    10:4a:6c:e6:b7:7a:e4:b7:58:7b:8c:6f:dc:69:2c:
                    c8:bb:eb:aa:56:e1:ad:fb:cd:df:89:3a:9e:c9:22:
                    97:b6:af:66:a3:f6:2f:b3:a8:8d:61:d7:8e:21:35:
                    27:ab:d6:b1:4d:11:d0:06:cc:78:65:70:ea:a0:7f:
                    e7:e1:dd:ec:98:b3:c1:e4:67:19:c3:90:74:fe:4b:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:61:D1:08:40:C8:9C:10:76:A9:33:47:A3:78:8B:35:E0:7F:15:B6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D15228E2CC2B11F0AED9B783DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.199.0-156.246.208.255

    Signature Algorithm: sha256WithRSAEncryption
         2a:f0:2a:9c:13:9d:e7:0e:f9:4c:ec:81:e3:85:35:09:9c:36:
         fd:a0:7e:bc:2c:a0:ef:45:07:ee:8d:31:fd:67:db:a8:55:f3:
         7d:b7:18:9b:b2:ac:91:f5:8c:fa:f3:65:65:c4:19:c9:96:2d:
         6e:9d:53:ed:76:e9:f9:55:d3:b5:3b:f5:29:02:3e:ae:9f:c4:
         3b:d9:5c:1f:17:08:6a:d0:43:ed:a1:80:7c:1f:53:6d:eb:00:
         64:1e:a1:83:f0:52:1a:c0:0b:63:17:e4:1b:c4:77:99:0e:47:
         3c:95:0b:3c:d8:2e:3c:01:51:4a:60:15:40:f1:7d:ca:8e:03:
         60:c6:0c:cd:79:76:3c:d9:46:ca:62:5a:ca:22:3f:06:73:c2:
         3b:0e:95:57:f2:f8:ae:52:98:6c:22:31:e2:76:b7:70:e0:34:
         82:7a:ee:bd:38:9e:3f:46:65:ae:91:2a:bf:7d:8b:40:1f:c6:
         e1:b8:a5:60:f4:49:52:3f:cd:57:8e:1c:75:ba:22:82:c7:60:
         bc:c2:ea:41:78:df:dc:90:17:00:ea:66:6e:b8:e6:e6:71:9f:
         ad:22:f4:c2:3a:2a:b4:75:27:1b:a8:37:38:01:1f:7a:6e:fe:
         ab:f7:97:d5:5a:32:1f:a3:cd:a8:f7:15:df:39:d3:78:6a:cb:
         9b:7c:62:3d
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAYoXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTI4MDcyODE3WhcNMjUxMjI4MDcyODE3WjAYMRYw
FAYDVQQDEw02OTI5NGYxNi0xNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvUrXcfrB5nN6LGudREFYBVhvpi3pdaaQJ+9USW5d8GYXRaD16d78qps2
48eWEJHGBuHHaDOCK8QEa79Po4qq+GDOwnDNeJGd3k6tveZ1RI4MMPiMDptzTSZC
RRzdFD74d8fyktF0ojYyTiiwRqBCEjPjgbGdlSSdicWVVVD5YAEEzL4p0//lqrxW
W5zNOu10eEayj3Nf4mVsZDLKgImXyP3XXCVBMyFB9SjR78tSR2I9GCgQSmzmt3rk
t1h7jG/caSzIu+uqVuGt+83fiTqeySKXtq9mo/Yvs6iNYdeOITUnq9axTRHQBsx4
ZXDqoH/n4d3smLPB5GcZw5B0/ks2vQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGlh
0QhAyJwQdqkzR6N4izXgfxW2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMTUyMjhFMkNDMkIxMUYwQUVEOUI3ODNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc9scDBACc9tAwDQYJKoZI
hvcNAQELBQADggEBACrwKpwTnecO+UzsgeOFNQmcNv2gfrwsoO9FB+6NMf1n26hV
8323GJuyrJH1jPrzZWXEGcmWLW6dU+126flV07U79SkCPq6fxDvZXB8XCGrQQ+2h
gHwfU23rAGQeoYPwUhrAC2MX5BvEd5kORzyVCzzYLjwBUUpgFUDxfcqOA2DGDM15
djzZRspiWsoiPwZzwjsOlVfy+K5SmGwiMeJ2t3DgNIJ67r04nj9GZa6RKr99i0Af
xuG4pWD0SVI/zVeOHHW6IoLHYLzC6kF439yQFwDqZm645uZxn60i9MI6KrR1Jxuo
NzgBH3pu/qv3l9VaMh+jzaj3Fd8503hqy5t8Yj0=
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:58 2025 by rpki-client