This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/184788BACC5D11F0A87DB4B1DAE4EC9C.roa
File:                     184788BACC5D11F0A87DB4B1DAE4EC9C.roa (raw, json)
Hash identifier:          xT0GvPMBhORLi9vyFE0CPxNWZjA0GOrw2mJHepbAHrA=
Subject key identifier:   52:1E:70:93:66:AA:C0:C7:24:C4:83:D2:FA:66:25:1C:84:3B:5B:0E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018A71
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/184788BACC5D11F0A87DB4B1DAE4EC9C.roa
Signing time:             Fri 28 Nov 2025 13:21:06 +0000
ROA not before:           Fri 28 Nov 2025 13:20:59 +0000
ROA not after:            Fri 19 Dec 2025 13:20:59 +0000
asID:                     984
IP address blocks:        156.227.133.0/24 maxlen: 24
                          156.227.143.0/24 maxlen: 24
                          156.227.145.0/24 maxlen: 24
                          156.231.98.0/24 maxlen: 24
                          156.231.101.0/24 maxlen: 24
                          156.232.32.0/24 maxlen: 24
                          156.232.33.0/24 maxlen: 24
                          156.233.109.0/24 maxlen: 24
                          156.242.66.0/24 maxlen: 24
                          156.242.67.0/24 maxlen: 24
                          156.242.68.0/24 maxlen: 24
                          156.242.80.0/24 maxlen: 24
                          156.242.89.0/24 maxlen: 24
                          156.242.90.0/24 maxlen: 24
                          156.242.92.0/24 maxlen: 24
                          156.242.93.0/24 maxlen: 24
                          156.243.229.0/24 maxlen: 24
                          156.249.172.0/24 maxlen: 24
                          156.249.173.0/24 maxlen: 24
                          156.249.175.0/24 maxlen: 24
                          156.249.177.0/24 maxlen: 24
                          156.249.179.0/24 maxlen: 24
                          156.249.196.0/24 maxlen: 24
                          156.252.8.0/24 maxlen: 24
                          156.252.11.0/24 maxlen: 24
                          156.253.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100977 (0x18a71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 28 13:20:59 2025 GMT
            Not After : Dec 19 13:20:59 2025 GMT
        Subject: CN=6929a1c2-3658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:6f:e1:c1:b2:74:64:90:95:2a:74:1b:c3:
                    bc:33:09:a6:0a:5e:22:2a:6b:e2:e8:b7:89:2b:fd:
                    9c:ae:04:f6:b5:ed:8c:af:b3:11:4e:b5:b0:ee:e4:
                    71:9f:b1:4d:39:4d:b4:c0:d4:50:d7:42:e5:fc:20:
                    95:f7:8f:11:20:68:57:6a:7a:b1:0c:43:ec:28:b1:
                    dd:5f:2c:c8:20:65:87:ce:ac:41:f1:e1:6e:1d:99:
                    ba:70:0d:98:aa:19:ba:20:df:94:b9:bb:e0:91:99:
                    a5:20:e2:b9:c6:d4:23:f1:85:0d:2d:db:a7:e0:2b:
                    c1:01:7c:c5:9a:84:1d:4d:e2:02:c8:9c:94:4a:4f:
                    b1:31:50:92:e5:54:01:f5:01:a5:25:0a:ec:d0:4d:
                    32:c9:24:4c:36:fb:62:ce:66:b6:f6:3b:ea:e2:66:
                    58:26:36:f1:95:06:48:03:15:c0:00:3e:bf:e7:7d:
                    2a:8f:09:88:f2:92:b9:12:44:63:dd:59:84:49:98:
                    d7:4a:9c:b4:5c:c1:ab:2c:91:d6:38:c2:29:8d:98:
                    91:3e:6d:b0:89:7e:4c:48:b6:61:b4:04:26:ba:1d:
                    c9:b1:98:b8:a7:30:56:b8:e9:dc:74:2e:46:cb:0c:
                    22:7f:16:65:27:4b:21:12:ca:93:7b:d5:05:17:fc:
                    f3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1E:70:93:66:AA:C0:C7:24:C4:83:D2:FA:66:25:1C:84:3B:5B:0E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/184788BACC5D11F0A87DB4B1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.133.0/24
                  156.227.143.0/24
                  156.227.145.0/24
                  156.231.98.0/24
                  156.231.101.0/24
                  156.232.32.0/23
                  156.233.109.0/24
                  156.242.66.0-156.242.68.255
                  156.242.80.0/24
                  156.242.89.0-156.242.90.255
                  156.242.92.0/23
                  156.243.229.0/24
                  156.249.172.0/23
                  156.249.175.0/24
                  156.249.177.0/24
                  156.249.179.0/24
                  156.249.196.0/24
                  156.252.8.0/24
                  156.252.11.0/24
                  156.253.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:9f:c0:9b:90:3c:aa:35:91:94:73:42:1a:ea:96:49:37:af:
         65:0e:39:4c:8e:55:f4:bf:03:63:52:93:9c:22:17:12:0a:dd:
         95:c4:a6:64:7f:2f:0d:3a:3b:f5:b6:2b:9e:05:47:de:cc:67:
         3d:51:e3:25:b8:a6:cd:5b:80:69:6c:9c:64:30:a5:9d:24:c3:
         90:25:8d:4b:ca:d7:94:9c:32:3a:02:b7:48:c9:6a:4e:e3:ab:
         4e:bc:8c:91:a1:99:be:3e:c9:2e:1f:79:c6:33:d9:1a:73:1b:
         80:d7:db:ae:f3:21:1f:30:bb:59:cd:05:91:f1:9a:38:da:66:
         9f:ca:b0:72:72:46:c1:d3:62:7f:8f:c9:66:8b:f3:18:b1:63:
         30:95:c9:bd:f6:98:10:04:93:0e:f7:98:f7:0e:79:90:52:74:
         4c:cd:e6:1a:68:e1:f5:a3:1f:a2:eb:46:6a:e6:75:e8:bc:6d:
         4d:5a:c2:5a:45:84:47:fb:a7:93:31:a3:41:46:6e:e9:9c:44:
         0e:82:2c:16:56:ad:ba:85:d6:4a:06:9b:16:65:ec:c1:a4:b6:
         b2:80:96:33:41:a9:6a:d1:de:40:bd:1b:59:00:34:56:0a:50:
         f8:56:9b:dc:39:d3:3a:b5:b8:d0:8d:60:5d:c2:d3:d1:c8:d6:
         2f:05:2c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:48 2025 by rpki-client