This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2796EA32CFA411F09F1E10B6DAE4EC9C.roa
File:                     2796EA32CFA411F09F1E10B6DAE4EC9C.roa (raw, json)
Hash identifier:          T4oUNx0Gi5yRFu1hlbPrmMzQV+igW+0DHLx2GfAMHl0=
Subject key identifier:   63:5F:D7:2E:76:4D:D9:D3:4A:74:5E:99:20:2D:C7:62:F9:0F:15:D3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018B2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2796EA32CFA411F09F1E10B6DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 17:27:20 +0000
ROA not before:           Tue 02 Dec 2025 17:27:15 +0000
ROA not after:            Sun 19 Nov 2028 17:27:15 +0000
asID:                     17561
IP address blocks:        156.252.29.0/24 maxlen: 24
                          156.252.68.0/24 maxlen: 24
                          156.252.69.0/24 maxlen: 24
                          156.252.70.0/24 maxlen: 24
                          156.252.71.0/24 maxlen: 24
                          156.252.72.0/24 maxlen: 24
                          156.252.73.0/24 maxlen: 24
                          156.252.74.0/24 maxlen: 24
                          156.252.75.0/24 maxlen: 24
                          156.252.76.0/24 maxlen: 24
                          156.252.77.0/24 maxlen: 24
                          156.252.78.0/24 maxlen: 24
                          156.252.79.0/24 maxlen: 24
                          156.252.80.0/24 maxlen: 24
                          156.252.81.0/24 maxlen: 24
                          156.252.82.0/24 maxlen: 24
                          156.252.83.0/24 maxlen: 24
                          156.252.84.0/24 maxlen: 24
                          156.252.85.0/24 maxlen: 24
                          156.252.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101164 (0x18b2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 17:27:15 2025 GMT
            Not After : Nov 19 17:27:15 2028 GMT
        Subject: CN=692f2178-6d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:9d:4e:1b:d3:7b:c3:82:fa:c3:f3:58:34:
                    33:5b:d0:7c:42:ba:60:62:32:8f:18:a4:0a:30:41:
                    68:bb:4b:3e:a6:ed:e3:35:d5:3b:91:8d:1a:9b:49:
                    76:64:1c:b1:09:68:29:ac:25:18:91:f0:ad:6a:5c:
                    c6:78:52:fe:f3:cd:c9:72:d5:4b:c0:d2:4e:25:d3:
                    87:3e:73:be:60:de:12:07:be:be:3a:b0:8d:18:11:
                    a0:20:0c:fa:3d:76:b8:b2:8b:fa:ae:6e:20:81:e6:
                    40:bd:cc:1e:19:4f:a1:72:01:ef:b4:74:1e:33:8f:
                    e8:b0:0c:6b:e8:e1:18:c4:05:44:a6:71:ad:31:3c:
                    e6:7a:73:8b:96:1f:ae:b9:e3:b4:ad:f2:d7:ad:39:
                    56:58:d7:8a:3e:c6:75:ec:69:26:00:0f:8e:b1:63:
                    01:d7:b9:01:96:fd:a8:cc:ed:db:d1:13:eb:bf:ea:
                    c2:2f:6f:f2:75:1b:f9:9a:f9:1c:b4:35:1e:06:ce:
                    77:ec:93:6b:9e:11:79:ea:46:a1:42:4d:af:ed:0c:
                    9e:29:33:bd:7c:49:b0:f3:c5:d8:28:21:d1:83:c9:
                    1e:ea:c7:e4:21:a1:cb:0e:da:f1:22:52:49:e3:db:
                    44:5f:a7:3d:01:c7:62:f3:c7:75:eb:67:4f:62:6e:
                    ad:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5F:D7:2E:76:4D:D9:D3:4A:74:5E:99:20:2D:C7:62:F9:0F:15:D3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2796EA32CFA411F09F1E10B6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.29.0/24
                  156.252.68.0-156.252.86.255

    Signature Algorithm: sha256WithRSAEncryption
         3b:02:8c:44:3c:20:46:e3:a9:f5:18:01:61:6a:67:50:19:27:
         d1:81:6b:63:f0:5e:33:88:7d:70:db:1d:5e:90:55:f8:9b:50:
         e5:dd:2c:96:87:24:ea:d8:04:43:c8:a7:6d:aa:20:89:16:7f:
         67:51:a6:ec:3a:b5:a0:33:74:1a:ca:f6:64:47:f4:ae:25:4e:
         0c:a2:c0:e5:e0:de:2e:39:3a:e6:e4:b4:06:02:58:33:be:ae:
         f7:49:48:f6:63:f5:88:b1:4f:7d:72:12:ec:9c:ad:4a:cf:3c:
         7c:70:d2:87:ad:e0:12:44:73:f8:f2:83:ee:2e:51:56:ac:c8:
         75:71:8f:17:3e:36:72:a2:ad:8e:41:18:86:38:c6:ce:37:44:
         b7:5f:50:9c:5e:5e:f1:61:b8:84:35:02:27:51:ac:b4:1d:b0:
         c2:f2:4b:70:eb:71:00:ca:ad:49:67:87:1a:bf:5a:54:8e:54:
         9d:89:83:cd:bb:c6:6b:76:f6:aa:c0:25:82:b2:04:98:ae:ca:
         4f:6f:0c:cf:2e:d5:6a:06:af:c0:6e:31:bd:65:9d:b8:ea:c9:
         16:0d:1c:d8:56:9e:55:cb:d4:6a:fb:a5:0d:62:e8:3d:49:c3:
         ff:bd:14:3a:bc:5d:5e:10:ba:ec:dc:02:9e:91:72:97:ea:ed:
         ae:6e:82:5c
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAYssMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjAyMTcyNzE1WhcNMjgxMTE5MTcyNzE1WjAYMRYw
FAYDVQQDEw02OTJmMjE3OC02ZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwKSdThvTe8OC+sPzWDQzW9B8QrpgYjKPGKQKMEFou0s+pu3jNdU7kY0a
m0l2ZByxCWgprCUYkfCtalzGeFL+883JctVLwNJOJdOHPnO+YN4SB76+OrCNGBGg
IAz6PXa4sov6rm4ggeZAvcweGU+hcgHvtHQeM4/osAxr6OEYxAVEpnGtMTzmenOL
lh+uueO0rfLXrTlWWNeKPsZ17GkmAA+OsWMB17kBlv2ozO3b0RPrv+rCL2/ydRv5
mvkctDUeBs537JNrnhF56kahQk2v7QyeKTO9fEmw88XYKCHRg8ke6sfkIaHLDtrx
IlJJ49tEX6c9Acdi88d162dPYm6tawIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGNf
1y52TdnTSnRemSAtx2L5DxXTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNzk2RUEzMkNGQTQxMUYwOUYxRTEwQjZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAnPwdMAwDBAKc/EQDBACc/FYw
DQYJKoZIhvcNAQELBQADggEBADsCjEQ8IEbjqfUYAWFqZ1AZJ9GBa2PwXjOIfXDb
HV6QVfibUOXdLJaHJOrYBEPIp22qIIkWf2dRpuw6taAzdBrK9mRH9K4lTgyiwOXg
3i45OubktAYCWDO+rvdJSPZj9YixT31yEuycrUrPPHxw0oet4BJEc/jyg+4uUVas
yHVxjxc+NnKirY5BGIY4xs43RLdfUJxeXvFhuIQ1AidRrLQdsMLyS3DrcQDKrUln
hxq/WlSOVJ2Jg827xmt29qrAJYKyBJiuyk9vDM8u1WoGr8BuMb1lnbjqyRYNHNhW
nlXL1Gr7pQ1i6D1Jw/+9FDq8XV4QuuzcAp6Rcpfq7a5uglw=
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:04 2025 by rpki-client