This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCB39BF6CFAC11F08C9054EADAE4EC9C.roa
File:                     DCB39BF6CFAC11F08C9054EADAE4EC9C.roa (raw, json)
Hash identifier:          sHnItOFXQKFi2etmoRsSkC2jWsK0VAHJeCAd4+XK9pU=
Subject key identifier:   74:A1:26:83:E0:72:3D:6F:F1:E9:C5:85:18:4E:CD:54:1C:AA:02:25
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018B43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCB39BF6CFAC11F08C9054EADAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 18:29:40 +0000
ROA not before:           Tue 02 Dec 2025 18:29:35 +0000
ROA not after:            Sun 19 Nov 2028 18:29:35 +0000
asID:                     17561
IP address blocks:        156.242.91.0/24 maxlen: 24
                          156.242.94.0/24 maxlen: 24
                          156.242.96.0/24 maxlen: 24
                          156.242.97.0/24 maxlen: 24
                          156.242.98.0/24 maxlen: 24
                          156.242.99.0/24 maxlen: 24
                          156.242.108.0/24 maxlen: 24
                          156.242.109.0/24 maxlen: 24
                          156.242.110.0/24 maxlen: 24
                          156.242.111.0/24 maxlen: 24
                          156.242.112.0/24 maxlen: 24
                          156.242.113.0/24 maxlen: 24
                          156.242.114.0/24 maxlen: 24
                          156.242.115.0/24 maxlen: 24
                          156.242.116.0/24 maxlen: 24
                          156.242.117.0/24 maxlen: 24
                          156.242.118.0/24 maxlen: 24
                          156.242.119.0/24 maxlen: 24
                          156.242.123.0/24 maxlen: 24
                          156.242.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101187 (0x18b43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 18:29:35 2025 GMT
            Not After : Nov 19 18:29:35 2028 GMT
        Subject: CN=692f3013-4588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8a:0a:33:4b:5b:20:47:3d:8f:ee:21:ff:a1:
                    8a:cb:d3:3d:1a:67:fa:ad:e7:a4:5c:46:2e:1b:44:
                    84:3b:73:bc:98:fb:14:54:76:fa:39:c3:b2:34:21:
                    56:51:12:b0:7d:1c:0a:7a:95:21:42:4b:4b:11:ea:
                    3f:0c:1d:f0:f5:36:64:f9:d3:d8:4a:7c:62:23:ce:
                    1f:7b:d2:4c:7b:97:e6:6e:21:c1:74:1b:71:29:46:
                    0a:7d:75:e3:58:61:61:e0:f4:01:f9:25:39:bf:40:
                    67:c0:af:64:5b:4a:03:5f:37:ad:87:15:a6:ff:97:
                    6f:b8:3a:f9:30:56:70:47:18:c8:05:09:a3:79:eb:
                    5c:f8:f9:4a:97:1b:40:38:6e:00:3e:ee:9c:7a:19:
                    7a:40:af:b5:69:d6:9c:f1:ac:d5:5d:a4:13:5d:8c:
                    6f:41:a0:d0:2c:ae:52:4c:3a:85:89:ba:2c:89:69:
                    81:20:8a:01:2f:35:fd:d2:38:b0:4a:9b:76:a9:e2:
                    b5:3c:cd:d7:24:f2:a4:2f:b9:75:45:88:e0:ad:64:
                    a4:2b:a8:e1:0d:9e:33:c1:0c:b9:12:4a:a0:0c:d5:
                    d8:22:ed:13:be:82:da:41:88:f4:13:a3:63:c6:8d:
                    28:9e:57:05:7d:a9:2d:63:bb:23:1c:0a:56:96:06:
                    d3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A1:26:83:E0:72:3D:6F:F1:E9:C5:85:18:4E:CD:54:1C:AA:02:25
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCB39BF6CFAC11F08C9054EADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.91.0/24
                  156.242.94.0/24
                  156.242.96.0/22
                  156.242.108.0-156.242.119.255
                  156.242.123.0-156.242.124.255

    Signature Algorithm: sha256WithRSAEncryption
         63:20:16:f9:b4:bb:9a:df:ea:d1:99:cd:39:d1:2f:1e:1b:0c:
         b5:e2:6a:aa:c6:01:0f:07:0b:eb:55:90:ac:59:d4:85:9a:04:
         24:50:d6:2b:6f:25:8b:6d:61:0f:c8:e8:67:1d:12:34:2f:ff:
         7a:38:81:75:c0:b9:e6:34:56:4a:b6:01:9e:d6:9f:d8:8e:c7:
         98:a1:7e:72:71:61:8e:4a:39:76:5f:2c:e8:a2:ec:60:1c:3e:
         1a:bc:81:cb:ab:9d:f3:64:41:91:13:2c:e7:4d:7f:ac:19:90:
         2d:fe:62:72:84:c7:92:6c:f9:10:16:5c:1c:ef:81:a9:5c:08:
         b1:18:69:d7:dc:95:b2:64:28:15:39:a8:af:12:c8:77:99:2a:
         94:f1:3c:e6:95:35:6b:a6:d8:43:37:74:53:af:dd:ab:86:3a:
         05:6b:b8:28:e1:a4:53:92:81:69:d8:8f:8d:8e:a5:cf:b0:a6:
         cf:80:59:fc:94:b8:f3:8c:b4:9e:06:d0:6c:31:d9:05:6b:1e:
         eb:6d:41:6e:9e:81:ad:0e:e6:85:82:27:48:27:29:d1:03:cd:
         84:4a:03:9c:bb:04:61:43:6c:71:0d:d7:8a:68:ad:a3:d8:b7:
         1e:9e:0e:fe:61:e7:1a:05:ce:ba:f8:92:c8:9c:3e:47:a1:82:
         73:27:b8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:16 2025 by rpki-client