This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5E33160CE8F11F085395178DAE4EC9C.roa
File:                     D5E33160CE8F11F085395178DAE4EC9C.roa (raw, json)
Hash identifier:          tvqI2DEykWuxEdJ/aDbii94KuvfA7sXgWW+0JPyuvsU=
Subject key identifier:   CB:86:D2:2E:68:B3:9B:6F:A4:9F:5F:67:EE:D7:F6:B7:80:A5:94:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018A91
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5E33160CE8F11F085395178DAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 08:29:22 +0000
ROA not before:           Mon 01 Dec 2025 08:29:15 +0000
ROA not after:            Wed 31 Dec 2025 08:29:15 +0000
asID:                     44559
IP address blocks:        156.239.140.0/24 maxlen: 24
                          156.239.142.0/24 maxlen: 24
                          156.239.143.0/24 maxlen: 24
                          156.239.154.0/24 maxlen: 24
                          156.239.155.0/24 maxlen: 24
                          156.243.32.0/24 maxlen: 24
                          156.243.33.0/24 maxlen: 24
                          156.243.80.0/24 maxlen: 24
                          156.243.132.0/24 maxlen: 24
                          156.243.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101009 (0x18a91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  1 08:29:15 2025 GMT
            Not After : Dec 31 08:29:15 2025 GMT
        Subject: CN=692d51e1-788c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:96:4b:49:c4:5d:be:62:30:f2:9d:7f:01:
                    79:51:47:e3:7c:fd:24:6e:29:b5:82:3f:59:f9:51:
                    df:5f:de:f0:79:32:c7:f1:c9:28:1a:1d:d3:39:2e:
                    a8:5b:c0:fb:f6:39:c6:c5:03:96:f6:39:2d:30:e1:
                    f4:54:4c:81:83:22:84:6e:31:c4:17:ef:f4:ec:3d:
                    54:bc:4d:18:c0:c4:48:0c:28:f0:b3:66:93:42:ca:
                    32:36:83:40:bf:3d:c8:79:ee:27:39:2c:12:78:07:
                    4b:a1:ba:34:f5:39:73:69:bf:78:22:24:fe:1e:ab:
                    54:bd:d1:ff:2b:dc:22:24:9c:83:b5:2b:68:e5:e9:
                    d8:5e:f6:e2:ae:d0:07:93:ec:8d:5b:cb:6e:97:3e:
                    a4:68:2f:1d:0b:d7:25:f5:13:3d:5f:dd:c5:be:d4:
                    c3:a9:81:be:96:eb:5c:9a:10:8a:43:90:db:b2:a5:
                    9b:72:31:b2:ba:ee:de:65:b9:c9:47:29:ab:2f:34:
                    2a:87:1f:f4:20:cf:0e:98:03:3d:55:e0:c5:cf:42:
                    d0:55:e2:f6:b2:12:49:bc:96:62:dd:e7:52:53:96:
                    84:c5:12:8c:9e:1e:61:38:1e:ca:56:58:fa:86:c7:
                    28:f4:94:00:b0:cf:2b:f6:e7:d6:c2:d3:70:02:25:
                    6d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:86:D2:2E:68:B3:9B:6F:A4:9F:5F:67:EE:D7:F6:B7:80:A5:94:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5E33160CE8F11F085395178DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.140.0/24
                  156.239.142.0/23
                  156.239.154.0/23
                  156.243.32.0/23
                  156.243.80.0/24
                  156.243.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:90:a5:31:e0:7a:16:20:af:38:b9:1b:40:68:08:c0:49:d5:
         c6:f4:8a:82:17:29:eb:9b:0a:95:39:c2:df:86:4f:43:64:63:
         44:ff:2c:92:3b:b3:74:c1:64:96:d4:c9:02:80:16:b6:b8:15:
         0e:a7:db:4b:d8:7e:49:e3:21:38:30:20:e2:2d:aa:c1:0e:06:
         c1:9e:fe:3c:6a:cc:0d:e3:7f:1e:e1:52:21:a8:fb:26:fd:cf:
         bb:a5:f4:cb:47:25:6a:6f:2e:10:7a:62:1f:19:2a:b3:84:96:
         93:bd:e3:38:69:36:5e:83:95:6f:bb:df:b0:0a:98:e6:9a:52:
         dd:ad:9b:66:a2:31:11:2f:94:cc:57:96:52:43:66:08:fc:29:
         ad:6d:b8:05:86:5c:2c:2d:99:29:cf:bc:5a:a9:68:51:38:87:
         f1:14:6f:86:ea:03:c0:5c:09:b4:d9:37:ce:3c:ae:52:3d:c6:
         f2:b7:13:6b:35:4f:be:e1:06:51:20:58:18:a1:09:a4:6d:ab:
         19:d6:54:2c:6c:76:c5:94:28:24:2a:f3:c5:f9:51:50:2c:ba:
         30:5e:cd:11:8e:e7:a5:b4:64:78:66:3e:41:80:0d:05:00:f8:
         0b:af:f3:4a:86:7a:8e:ab:9a:3c:e6:6b:67:41:4d:33:e0:80:
         33:19:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:21 2025 by rpki-client