This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F25445B0BF1111F09FDC98ECDAE4EC9C.roa
File:                     F25445B0BF1111F09FDC98ECDAE4EC9C.roa (raw, json)
Hash identifier:          YDKfFH9MO0KCv0m8pSp2+/yNAbB9Aj6gEuKaDyDbWZE=
Subject key identifier:   B4:D3:5C:1D:E9:4E:C1:E6:F5:20:51:BE:32:E8:11:D9:C6:CC:11:4E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018680
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F25445B0BF1111F09FDC98ECDAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 15:20:25 +0000
ROA not before:           Tue 11 Nov 2025 15:20:21 +0000
ROA not after:            Tue 16 Dec 2025 15:20:21 +0000
asID:                     395793
IP address blocks:        156.243.245.0/24 maxlen: 24
                          156.243.250.0/24 maxlen: 24
                          156.243.251.0/24 maxlen: 24
                          156.243.252.0/24 maxlen: 24
                          156.243.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99968 (0x18680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 11 15:20:21 2025 GMT
            Not After : Dec 16 15:20:21 2025 GMT
        Subject: CN=69135439-ed37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:b0:c2:e4:9c:20:0a:c9:b4:31:c0:22:04:
                    f6:0a:7e:58:08:c7:61:47:c4:b6:67:85:c8:bf:f0:
                    6e:1b:28:9b:0e:6f:d7:47:9f:a3:3d:db:b3:6d:00:
                    71:dc:8c:79:dc:82:aa:39:9f:6f:98:b9:b6:cd:3d:
                    e4:ea:53:6a:35:cf:36:58:59:06:b7:ef:54:ea:8a:
                    39:4d:7d:2c:78:66:c2:04:65:ba:47:f0:15:41:5c:
                    f7:69:14:00:56:e7:36:d3:48:82:88:da:76:ea:bc:
                    f5:4d:4a:96:e4:b0:1b:27:20:a3:0c:0b:15:fd:b2:
                    78:5a:25:06:3b:0b:95:1a:7b:b9:80:8c:90:29:0f:
                    ed:38:2f:16:2d:db:d1:93:5a:5f:b4:ed:8f:44:8a:
                    98:7d:a0:53:29:cd:00:f3:39:79:2f:ed:7a:08:69:
                    f6:1a:b1:c4:ed:75:de:b1:d8:b8:58:a1:a4:53:d1:
                    0f:f6:b6:45:73:17:7b:a7:d6:3d:c9:4e:45:5b:59:
                    23:a6:ea:92:81:df:9b:02:e7:67:e2:29:48:ce:20:
                    3c:cc:97:63:27:c5:2f:24:ac:02:22:1d:93:0f:ab:
                    90:8a:66:c2:ba:44:68:a1:ab:b6:56:b3:5b:c6:0e:
                    40:db:d3:ef:54:9f:0d:1b:63:fb:80:85:24:2f:43:
                    4f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D3:5C:1D:E9:4E:C1:E6:F5:20:51:BE:32:E8:11:D9:C6:CC:11:4E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F25445B0BF1111F09FDC98ECDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.245.0/24
                  156.243.250.0-156.243.253.255

    Signature Algorithm: sha256WithRSAEncryption
         90:de:9d:9e:bd:f6:e3:fb:2a:f5:7d:6d:69:0c:a0:37:b9:40:
         21:98:43:a8:1f:36:a7:6b:05:49:9f:ae:ee:e8:f1:9b:ba:84:
         1b:e8:a1:fe:63:a7:62:88:11:34:89:10:3c:99:00:82:1f:3e:
         ce:c9:c8:c7:8e:40:8f:26:ee:12:41:89:cc:84:2d:23:63:13:
         18:09:c2:34:d7:98:56:d4:4e:a5:d8:01:94:c8:ae:df:8f:e8:
         bd:6a:c7:e0:7c:92:71:43:e7:9b:ae:8f:ab:3b:62:0d:23:63:
         13:46:38:74:ad:27:09:ce:87:46:1b:15:ff:48:0e:22:34:d1:
         05:d5:09:2e:a8:43:06:de:57:70:66:14:ae:16:98:2a:0c:2c:
         74:ee:93:04:52:42:bf:c4:68:8a:7f:f9:0e:6d:e8:6b:91:d1:
         3d:21:32:fb:c5:40:69:1c:d9:c0:2f:e9:1e:55:41:0e:76:00:
         4a:48:17:ca:7c:98:3c:3c:dc:6c:4b:ff:c5:e7:79:39:29:b4:
         e3:6b:19:2e:0b:2c:bf:ff:0c:2e:6d:4d:05:58:c3:5e:34:cb:
         57:24:f0:fe:56:77:22:4e:6a:63:f3:a8:65:59:e3:6c:ee:68:
         52:f8:22:7d:22:68:49:1f:a8:a0:a8:de:2e:11:fc:d7:d4:82:
         00:de:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:13 2025 by rpki-client