This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD92007CCEC311F095F0CFB8DAE4EC9C.roa
File:                     FD92007CCEC311F095F0CFB8DAE4EC9C.roa (raw, json)
Hash identifier:          23CYnZds7ZK4KiQm2+zKQDtP6XHyTs2g3mRHCmyZ/JQ=
Subject key identifier:   38:B1:7A:C5:A2:E0:EC:5B:8B:00:2B:DA:5F:A2:EB:C3:40:75:ED:30
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018AAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD92007CCEC311F095F0CFB8DAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 14:42:42 +0000
ROA not before:           Mon 01 Dec 2025 14:42:36 +0000
ROA not after:            Wed 31 Dec 2025 14:42:36 +0000
asID:                     62240
IP address blocks:        156.233.0.0/24 maxlen: 24
                          156.233.1.0/24 maxlen: 24
                          156.233.100.0/24 maxlen: 24
                          156.233.103.0/24 maxlen: 24
                          156.233.104.0/24 maxlen: 24
                          156.233.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101035 (0x18aab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  1 14:42:36 2025 GMT
            Not After : Dec 31 14:42:36 2025 GMT
        Subject: CN=692da962-e16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0e:4d:56:48:19:fd:1e:c0:f1:07:e3:90:c3:
                    aa:c9:ae:8d:8b:4c:86:c8:a9:ad:ad:50:1d:50:a2:
                    5b:43:8d:a1:c1:79:f2:46:21:86:1b:7f:32:66:22:
                    27:77:dd:ec:a5:ff:82:a5:2f:f9:1d:67:d3:4c:6d:
                    d0:1e:25:0b:bb:ad:85:45:a8:af:bc:e2:48:b4:72:
                    0c:bb:19:17:cd:de:38:22:58:81:41:93:91:d6:b5:
                    5a:2d:25:9d:fc:8f:30:aa:ea:47:e8:d7:04:a7:bc:
                    b1:16:6d:e6:9a:7c:09:aa:07:61:68:78:c8:46:8d:
                    2e:9e:ef:34:e4:1c:28:4e:25:f7:bf:08:1d:63:d8:
                    c0:76:20:5a:6f:20:cd:b1:ab:4d:1b:3e:3e:59:0e:
                    5b:ba:7e:22:f5:79:52:d6:31:4f:48:3e:20:52:c0:
                    b0:47:85:c4:53:2e:3c:74:4e:69:9d:b2:2e:33:c5:
                    37:a6:b0:04:d1:aa:df:60:48:0e:f4:4e:45:8a:bd:
                    52:fa:b5:5b:55:6f:cf:8b:ee:2f:d2:94:62:35:51:
                    39:1b:06:df:ac:f6:d9:03:74:07:f3:4e:ad:37:d8:
                    8f:c3:a1:f5:32:57:97:e1:06:7c:04:e7:d3:73:95:
                    bb:12:e7:fb:77:5e:c6:07:ee:36:f6:48:ca:ee:39:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B1:7A:C5:A2:E0:EC:5B:8B:00:2B:DA:5F:A2:EB:C3:40:75:ED:30
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD92007CCEC311F095F0CFB8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.0.0/23
                  156.233.100.0/24
                  156.233.103.0-156.233.105.255

    Signature Algorithm: sha256WithRSAEncryption
         a2:56:41:49:2c:db:2d:7f:7f:2f:cd:a8:c3:3f:10:e2:c5:cb:
         45:d9:9a:87:73:7e:d0:eb:68:ce:59:5a:4d:4b:a8:8e:dc:47:
         30:1d:4a:80:04:5a:32:f1:3c:11:01:91:a2:ff:5d:d8:b7:1a:
         c1:cf:03:ae:6d:6a:93:38:4b:40:34:b1:aa:f6:cb:c7:62:e8:
         2b:58:ff:3c:87:f2:79:e1:a5:89:77:7d:14:3d:51:36:90:82:
         ab:aa:d0:05:11:80:7d:25:b6:3d:34:4a:49:b2:94:ee:5e:99:
         f0:82:31:a8:1c:5b:3c:b0:e4:ba:5f:e4:42:a4:10:d3:48:b4:
         a3:b9:e1:32:6c:81:35:33:d0:96:36:38:15:1b:d8:95:a8:48:
         6a:bd:6c:34:e9:42:ba:94:1e:ec:1d:2d:7b:b2:cd:de:77:82:
         84:a9:f2:db:12:ae:a2:bc:ee:82:8b:9d:bc:a3:31:46:ab:2f:
         77:37:70:64:bd:d4:d7:1c:82:66:4c:17:46:09:f7:ac:e6:57:
         76:66:22:0b:b6:69:04:4e:5b:89:45:2c:be:5c:40:d7:3a:8f:
         d9:6f:07:5c:bd:74:22:92:3b:c2:df:59:fa:37:18:71:9c:b0:
         70:14:47:b8:de:9b:99:1f:26:0d:c8:b2:30:70:66:f1:aa:f2:
         52:cb:a9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:13 2025 by rpki-client