This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFB0BD28C15311F0B8030AB2DAE4EC9C.roa
File:                     DFB0BD28C15311F0B8030AB2DAE4EC9C.roa (raw, json)
Hash identifier:          JwKcsdkoFYU4GylNucrg0+ildu2lhLEPW+lVp8MRtSA=
Subject key identifier:   2D:F6:C7:09:2B:1F:80:25:50:6C:C1:B4:EA:A7:8A:0D:57:23:E4:94
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01878F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFB0BD28C15311F0B8030AB2DAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 12:17:23 +0000
ROA not before:           Fri 14 Nov 2025 12:17:15 +0000
ROA not after:            Wed 17 Dec 2025 12:17:15 +0000
asID:                     153671
IP address blocks:        156.231.70.0/23 maxlen: 24
                          156.231.88.0/22 maxlen: 24
                          156.231.92.0/22 maxlen: 24
                          156.238.12.0/23 maxlen: 24
                          156.238.28.0/22 maxlen: 24
                          156.238.60.0/22 maxlen: 24
                          156.242.64.0/23 maxlen: 24
                          156.242.100.0/22 maxlen: 24
                          156.242.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100239 (0x1878f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 14 12:17:15 2025 GMT
            Not After : Dec 17 12:17:15 2025 GMT
        Subject: CN=69171dd3-1b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:ec:65:5a:97:54:83:b0:92:be:77:76:24:
                    dc:c7:55:e5:0e:f9:15:0f:80:90:96:f8:d2:31:f7:
                    48:e8:62:72:77:0f:1e:60:be:13:27:0c:32:f5:6a:
                    59:10:8d:52:06:8f:12:9d:28:ad:9a:52:a3:f5:a6:
                    ee:67:f2:40:78:e1:93:86:2d:cc:2d:ec:63:f6:b3:
                    96:38:68:b8:3c:26:2f:69:e5:ac:44:8c:d5:52:2e:
                    42:f2:af:cd:4d:b2:f5:fd:dc:c1:34:6f:44:cd:04:
                    74:f2:6c:50:d8:62:66:06:a1:3f:40:46:1e:03:7e:
                    39:b0:9a:bd:88:74:0b:e5:fb:7a:4d:27:b1:74:9f:
                    e3:5e:11:07:e8:29:71:02:03:5e:6b:d3:f1:81:3c:
                    08:07:4a:3a:5f:90:4e:95:68:d4:4e:2a:82:ef:86:
                    30:83:6d:7b:bb:bd:bf:2e:1d:15:74:e5:06:7d:b4:
                    46:c8:3c:f6:81:c7:e4:c2:54:41:65:01:a3:0a:bb:
                    f6:9c:57:cc:1c:6d:39:02:a6:f1:0f:0d:ed:14:18:
                    4b:e1:43:fd:87:b0:71:7a:96:78:0b:15:57:33:d8:
                    7b:c9:ef:0c:71:a7:18:db:a6:a8:e2:a3:ea:9b:ff:
                    a1:02:78:fc:84:85:f5:56:0c:00:66:5d:40:85:53:
                    2c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F6:C7:09:2B:1F:80:25:50:6C:C1:B4:EA:A7:8A:0D:57:23:E4:94
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFB0BD28C15311F0B8030AB2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.70.0/23
                  156.231.88.0/21
                  156.238.12.0/23
                  156.238.28.0/22
                  156.238.60.0/22
                  156.242.64.0/23
                  156.242.100.0-156.242.107.255

    Signature Algorithm: sha256WithRSAEncryption
         33:51:df:53:30:e9:04:4a:c7:e7:c3:da:6b:e5:0b:a2:68:08:
         19:7e:24:e6:59:29:d0:77:02:8d:0f:76:cd:36:35:f4:08:ce:
         95:77:97:bd:84:0e:35:5c:9a:ab:5f:c6:6d:95:ff:54:5d:71:
         c2:68:38:4a:13:09:ab:9d:c8:a4:35:ca:28:28:12:98:e7:31:
         92:00:d1:08:02:1e:d5:40:e7:b4:04:85:c5:b7:36:6d:91:b0:
         35:2b:d9:17:ce:7d:7f:08:02:17:51:db:ea:2a:e2:81:d8:59:
         ef:04:54:2b:fd:fa:94:14:8f:03:6f:16:29:f7:3a:00:e3:8c:
         b0:4c:5f:d5:af:66:81:6f:b6:4d:fb:21:e5:16:aa:ab:2f:42:
         f8:3d:cf:ab:14:89:d4:04:9f:60:cc:17:f3:50:df:84:6f:f5:
         03:22:0b:3a:69:21:f7:96:ee:92:76:83:4a:47:5c:18:46:74:
         21:66:89:e8:d3:41:5e:3a:0c:b8:53:ad:da:68:5b:dd:da:27:
         25:5e:b8:e6:fd:d0:8a:56:31:b8:7c:73:be:eb:40:e4:fb:cb:
         b7:79:bb:8e:91:51:86:7d:40:8d:8f:d5:11:a5:f9:aa:bd:fe:
         27:48:6c:b1:7f:f5:66:03:ea:68:55:54:85:14:07:61:fe:88:
         5a:c4:7b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:03 2025 by rpki-client