This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17EFACACCFA111F0B5E53DA3DAE4EC9C.roa
File:                     17EFACACCFA111F0B5E53DA3DAE4EC9C.roa (raw, json)
Hash identifier:          ykKRk2RjiS8YDNtk9FdOfjmzCdy9zi1mv3I5+1dkZGY=
Subject key identifier:   E9:91:EC:0D:27:97:8B:3B:64:69:AD:E4:33:E2:9A:0E:B6:25:4C:85
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018B22
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17EFACACCFA111F0B5E53DA3DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 17:05:25 +0000
ROA not before:           Tue 02 Dec 2025 17:05:20 +0000
ROA not after:            Sat 18 Nov 2028 17:05:20 +0000
asID:                     17561
IP address blocks:        156.231.87.0/24 maxlen: 24
                          156.231.99.0/24 maxlen: 24
                          156.231.100.0/24 maxlen: 24
                          156.231.102.0/24 maxlen: 24
                          156.231.103.0/24 maxlen: 24
                          156.231.104.0/24 maxlen: 24
                          156.231.107.0/24 maxlen: 24
                          156.231.118.0/24 maxlen: 24
                          156.231.119.0/24 maxlen: 24
                          156.231.120.0/24 maxlen: 24
                          156.231.122.0/24 maxlen: 24
                          156.231.123.0/24 maxlen: 24
                          156.231.124.0/24 maxlen: 24
                          156.231.125.0/24 maxlen: 24
                          156.231.126.0/24 maxlen: 24
                          156.231.127.0/24 maxlen: 24
                          156.231.130.0/24 maxlen: 24
                          156.231.131.0/24 maxlen: 24
                          156.231.132.0/24 maxlen: 24
                          156.231.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101154 (0x18b22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 17:05:20 2025 GMT
            Not After : Nov 18 17:05:20 2028 GMT
        Subject: CN=692f1c55-3092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:a8:93:50:62:1a:62:96:6e:e2:ab:0c:ea:
                    f9:ac:d4:36:d7:7a:ac:42:06:c5:8f:ac:49:37:01:
                    67:45:5d:9a:0e:68:0e:ab:12:17:f9:be:a2:65:88:
                    ad:77:e7:7a:9b:5f:f4:a2:b3:4b:2b:f8:38:4e:8d:
                    20:58:fe:04:6a:94:1c:95:47:1f:7f:d8:cb:c7:27:
                    24:7f:e8:2a:b0:63:da:23:ed:84:9c:42:e4:5d:8e:
                    64:63:9f:b3:68:0b:45:3a:53:43:c4:8e:62:31:94:
                    0a:e2:12:ed:84:1d:cf:2d:49:1c:6a:02:7a:5f:2f:
                    7e:36:77:87:e0:62:dd:44:65:91:0a:29:61:fb:68:
                    c4:b5:b0:59:0f:55:53:93:aa:22:df:a5:68:da:b0:
                    d5:79:aa:f6:65:b8:37:c9:55:68:f2:b0:6f:b4:a1:
                    ef:46:dd:dc:be:14:d9:6e:19:68:0f:20:63:28:1d:
                    ca:41:59:5b:f3:0c:99:06:2e:8c:4a:41:6c:f5:f5:
                    61:4d:bc:09:d2:e8:57:82:18:40:92:e8:0d:f8:9f:
                    36:79:40:dc:7f:38:7d:17:64:9b:ba:aa:15:e4:33:
                    c0:1d:f4:e3:59:3c:71:b0:73:9c:3f:df:58:d8:2d:
                    d7:1b:99:2f:78:8e:57:44:ed:f7:fa:de:09:80:49:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:91:EC:0D:27:97:8B:3B:64:69:AD:E4:33:E2:9A:0E:B6:25:4C:85
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17EFACACCFA111F0B5E53DA3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.87.0/24
                  156.231.99.0-156.231.100.255
                  156.231.102.0-156.231.104.255
                  156.231.107.0/24
                  156.231.118.0-156.231.120.255
                  156.231.122.0-156.231.127.255
                  156.231.130.0-156.231.132.255
                  156.231.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ae:6a:bd:9a:b6:3d:99:ae:de:28:7e:7a:45:3d:bd:08:64:
         f3:5d:bc:b5:7b:32:57:f7:3c:5b:79:96:0e:5e:1a:3b:55:a3:
         ed:da:d8:c0:6d:fc:30:26:86:52:0f:17:90:a2:0c:55:ab:26:
         1a:0d:f1:69:ef:bd:db:46:65:f1:47:02:7e:d8:01:c8:25:70:
         16:b1:35:3d:e1:9b:ea:91:60:0c:6f:da:54:45:23:ae:0f:51:
         7d:6d:88:15:0c:a4:a3:be:5e:c7:69:34:41:26:81:67:d7:b3:
         d2:08:5e:88:53:ea:cf:14:29:d9:af:16:ec:d7:01:77:07:ce:
         d9:f0:7d:22:84:bf:04:07:70:09:36:54:bf:db:aa:e5:09:c5:
         03:35:82:7c:db:64:56:e7:4f:ef:e2:45:07:f5:1e:e7:f1:f1:
         54:88:1e:9e:37:ed:4f:35:f2:e3:56:58:e8:a1:d3:d5:fd:94:
         75:1e:6e:70:3b:76:9f:76:75:73:d6:c5:d5:0b:e5:44:28:92:
         3c:af:98:96:a7:ae:02:f9:4e:5a:87:77:f6:9d:fa:36:8b:b4:
         1c:ef:20:da:9e:89:65:39:fb:cb:e2:51:07:46:5e:fe:b1:14:
         88:76:af:2b:54:ec:f5:21:e2:1b:36:e6:ea:e6:53:ad:ce:d8:
         3b:b0:56:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:21 2025 by rpki-client