This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25B64F94ED4711F098DBDE97DAE4EC9C.roa
File:                     25B64F94ED4711F098DBDE97DAE4EC9C.roa (raw, json)
Hash identifier:          q+yg3mqMbMtV1lCdk3V8tHupW3VXBHnZ8+FySWKAa54=
Subject key identifier:   BE:BD:41:32:CC:BD:3B:37:EA:53:95:1E:39:2C:24:2E:4D:59:E3:68
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0195C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25B64F94ED4711F098DBDE97DAE4EC9C.roa
Signing time:             Fri 09 Jan 2026 10:37:08 +0000
ROA not before:           Fri 09 Jan 2026 10:37:03 +0000
ROA not after:            Sun 18 Jan 2026 10:37:03 +0000
asID:                     152705
IP address blocks:        156.239.224.0/19 maxlen: 24
                          156.239.240.0/20 maxlen: 24
                          156.239.240.0/21 maxlen: 24
                          156.239.240.0/22 maxlen: 24
                          156.239.240.0/23 maxlen: 24
                          156.239.240.0/24 maxlen: 24
                          156.239.241.0/24 maxlen: 24
                          156.239.242.0/23 maxlen: 24
                          156.239.242.0/24 maxlen: 24
                          156.239.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 Jan 2026 10:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103876 (0x195c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  9 10:37:03 2026 GMT
            Not After : Jan 18 10:37:03 2026 GMT
        Subject: CN=6960da54-faee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:8f:10:db:fc:84:37:5b:67:fc:ee:46:fa:
                    42:7f:13:3a:75:8f:4a:82:65:28:ee:1e:ff:18:9a:
                    0c:77:2d:68:bc:44:2b:e5:5c:b3:7a:3b:fa:9a:5d:
                    3f:a9:0c:6d:f0:82:f7:35:1f:ea:1c:a5:bc:dc:1c:
                    a4:f7:ed:91:c8:7d:58:da:70:ac:c4:20:b4:c6:fe:
                    7f:c7:d9:d2:11:04:18:d1:59:79:8d:ea:3d:17:90:
                    af:c2:d9:fa:2e:cf:5f:0d:5e:c9:bb:53:b4:df:29:
                    d9:4b:7a:20:5b:9b:03:c9:d8:66:17:69:6d:74:a9:
                    2d:3b:fd:d5:1d:5c:e0:e4:e2:51:af:89:c9:e8:28:
                    cb:02:d8:37:62:01:32:99:d8:ed:ca:23:52:3d:57:
                    64:4d:fa:38:5d:69:29:da:d4:31:00:bd:a2:40:df:
                    87:c1:2a:30:66:78:b3:a3:e7:15:51:52:51:1a:27:
                    c0:72:17:ac:10:46:12:6b:97:9a:bd:99:6e:e7:b4:
                    78:7c:c3:8b:aa:b7:4b:6d:c5:7e:62:e1:61:f9:e1:
                    69:b7:6f:c7:c1:bd:82:bf:6b:2a:75:06:d6:93:44:
                    e5:69:4e:32:ca:bd:89:c5:3b:1c:d3:10:50:79:3c:
                    2f:4a:15:72:a6:b6:87:3e:72:fc:ae:a9:94:91:a5:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BD:41:32:CC:BD:3B:37:EA:53:95:1E:39:2C:24:2E:4D:59:E3:68
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25B64F94ED4711F098DBDE97DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:51:18:43:46:db:3e:10:ed:52:cb:5b:5d:1a:07:1f:e7:27:
         81:f8:bd:97:11:5c:7c:fd:f6:d7:de:96:f6:46:df:3c:df:84:
         7e:45:60:c7:93:35:3d:42:3c:3a:f1:f0:25:7f:8d:79:a2:23:
         d1:50:fe:1a:3d:cd:0d:85:da:f4:9f:fb:82:8b:88:cb:16:e6:
         fd:d7:ce:e6:d0:66:60:45:ef:5f:7a:f6:f4:57:a3:e3:2c:38:
         a4:fc:d8:12:f4:d5:cc:66:47:bc:1e:6d:9d:79:a3:14:d4:a0:
         ef:a9:30:13:a5:50:a9:bf:c1:b5:d7:84:0c:9a:4e:98:13:48:
         4a:9f:4d:0b:e4:7c:41:8e:9e:25:9c:61:d9:dd:96:e4:3c:70:
         5f:f9:04:19:ae:4e:85:1c:bd:41:57:78:60:20:16:ab:93:58:
         5b:64:ce:4b:e3:5b:a3:ba:71:70:46:50:b0:43:7c:06:62:76:
         60:49:08:c6:9b:9d:f8:88:22:41:83:39:b7:d1:20:9f:c8:2c:
         03:97:1a:5f:3e:fe:1d:68:60:21:98:bc:94:cd:a3:b5:3b:26:
         cb:04:ba:26:ff:ec:ec:33:e2:0f:2d:e3:2a:63:04:39:cf:f1:
         8d:e7:94:d5:07:40:97:3c:3b:e3:05:f6:d6:f2:e0:74:88:3a:
         87:0e:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:11 2026 by rpki-client