This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7E54A68C47D11F0A68DD2ACDAE4EC9C.roa
File:                     E7E54A68C47D11F0A68DD2ACDAE4EC9C.roa (raw, json)
Hash identifier:          wI0UjO0DbnqUvBv9IOdKhqrMgAcZ1vf2FGjnX3jS5dk=
Subject key identifier:   9E:F4:E4:DE:CE:74:5B:00:7C:31:CF:D3:09:C8:86:0B:E0:8A:07:86
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01883C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7E54A68C47D11F0A68DD2ACDAE4EC9C.roa
Signing time:             Tue 18 Nov 2025 12:55:49 +0000
ROA not before:           Tue 18 Nov 2025 12:55:42 +0000
ROA not after:            Tue 30 Dec 2025 12:55:42 +0000
asID:                     62468
IP address blocks:        156.245.188.0/24 maxlen: 24
                          156.245.189.0/24 maxlen: 24
                          156.245.198.0/23 maxlen: 24
                          156.245.198.0/24 maxlen: 24
                          156.245.199.0/24 maxlen: 24
                          156.245.200.0/22 maxlen: 24
                          156.245.209.0/24 maxlen: 24
                          156.245.210.0/24 maxlen: 24
                          156.245.242.0/23 maxlen: 24
                          156.245.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100412 (0x1883c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 18 12:55:42 2025 GMT
            Not After : Dec 30 12:55:42 2025 GMT
        Subject: CN=691c6cd5-a91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:91:27:fb:9c:44:e3:bf:de:e2:31:36:59:24:
                    ef:1b:25:96:7a:48:87:05:35:3e:9b:69:a5:9b:7a:
                    09:b6:82:ce:e3:d6:03:bc:40:65:46:5a:b2:2f:2c:
                    be:e8:c9:1e:a9:e0:36:df:42:65:6e:8e:99:ba:a4:
                    04:e9:18:c6:7c:fe:db:66:16:2c:41:e2:77:31:e0:
                    70:f6:f1:af:a1:47:59:95:57:13:a6:88:2d:f7:eb:
                    7a:c6:1b:1c:be:03:e5:de:6a:b3:b0:ad:6b:3a:a0:
                    da:e1:69:88:20:52:2b:79:b2:15:b6:77:0d:72:6c:
                    96:2f:09:68:fe:f1:24:d3:83:57:b7:7e:ef:0c:33:
                    1d:11:4e:74:ca:b8:b4:af:63:2b:19:39:40:89:71:
                    13:39:b0:c9:f7:c1:26:ee:a2:f1:62:3a:39:91:45:
                    f8:0f:46:c0:8b:b6:f7:94:15:a7:71:ba:12:e8:9a:
                    01:cb:81:55:5a:fa:b9:cf:e9:85:04:ac:d0:46:84:
                    ae:e4:5c:dd:0c:cf:0a:d6:c4:f1:b9:f8:62:b9:44:
                    fc:57:f0:a9:c5:2d:6c:9d:d9:72:a4:ed:de:32:8f:
                    b5:39:50:2c:ca:db:b8:34:5b:a6:b7:f5:dc:c0:dd:
                    19:ed:b9:df:dc:a1:7c:12:f3:72:ac:6e:49:00:8e:
                    81:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F4:E4:DE:CE:74:5B:00:7C:31:CF:D3:09:C8:86:0B:E0:8A:07:86
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7E54A68C47D11F0A68DD2ACDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.188.0/23
                  156.245.198.0-156.245.203.255
                  156.245.209.0-156.245.210.255
                  156.245.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:63:01:c6:68:98:e1:95:b3:29:cd:1b:cd:f9:00:1a:1a:a6:
         27:d1:9a:64:b7:31:45:c4:a6:10:6d:66:f8:51:5b:a6:a3:06:
         97:c6:f0:57:d8:2a:77:2c:b0:03:6a:94:62:a5:98:27:3e:25:
         6b:97:84:30:09:ce:1a:f3:d4:56:de:81:ee:1e:60:19:fd:dd:
         28:c3:1c:2a:0e:28:0a:fe:bc:c1:27:d3:48:c9:c6:3d:dd:88:
         a3:fb:bf:b9:59:95:05:2f:23:0c:28:e5:b6:64:36:62:57:9f:
         7a:cc:73:23:24:9e:0c:94:94:b9:82:49:27:d8:1c:1e:e6:fb:
         9c:55:dc:58:2d:1a:a7:d7:05:38:85:56:32:8e:41:0f:ff:a3:
         a2:76:e0:f2:87:37:34:af:51:83:ba:20:9a:bb:7a:86:0c:b3:
         ec:9c:12:14:fe:68:94:48:db:12:db:b1:7c:8d:42:3c:9d:d8:
         60:16:36:c9:e3:5b:f8:1d:57:36:7f:d2:1c:f3:9e:8f:de:93:
         7a:58:89:a6:3d:e1:8d:e7:18:59:f5:82:7e:92:55:fe:d3:1a:
         82:8d:ca:57:7e:b4:e7:f9:2f:98:51:64:32:dc:15:8e:f9:0d:
         41:f7:dc:86:f2:36:f6:2c:6a:52:65:92:fa:3c:db:c2:24:34:
         17:2f:f5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:58 2025 by rpki-client