This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/304BECC6CF7D11F081725AC4DAE4EC9C.roa
File:                     304BECC6CF7D11F081725AC4DAE4EC9C.roa (raw, json)
Hash identifier:          e2s+LTm0qUDxxSipcGSHUoTl9hoANVDLOe5OJTh2x+o=
Subject key identifier:   64:52:DF:FD:9C:DB:E5:05:28:E6:5A:91:30:53:72:7D:3C:29:A8:12
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018AD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/304BECC6CF7D11F081725AC4DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 12:48:24 +0000
ROA not before:           Tue 02 Dec 2025 12:48:16 +0000
ROA not after:            Fri 20 Oct 2028 12:48:16 +0000
asID:                     17561
IP address blocks:        156.224.84.0/24 maxlen: 24
                          156.224.85.0/24 maxlen: 24
                          156.224.86.0/24 maxlen: 24
                          156.224.87.0/24 maxlen: 24
                          156.224.92.0/24 maxlen: 24
                          156.224.93.0/24 maxlen: 24
                          156.224.94.0/24 maxlen: 24
                          156.224.95.0/24 maxlen: 24
                          156.224.96.0/24 maxlen: 24
                          156.224.97.0/24 maxlen: 24
                          156.224.98.0/24 maxlen: 24
                          156.225.67.0/24 maxlen: 24
                          156.225.73.0/24 maxlen: 24
                          156.240.99.0/24 maxlen: 24
                          156.249.137.0/24 maxlen: 24
                          156.249.138.0/24 maxlen: 24
                          156.249.147.0/24 maxlen: 24
                          156.249.148.0/24 maxlen: 24
                          156.249.149.0/24 maxlen: 24
                          156.249.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101072 (0x18ad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 12:48:16 2025 GMT
            Not After : Oct 20 12:48:16 2028 GMT
        Subject: CN=692ee018-6b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:eb:70:ec:30:bc:db:c8:19:c6:7e:9c:77:11:
                    9c:9f:17:62:1d:c4:ec:fd:f4:71:95:ce:9b:9f:8f:
                    71:ab:71:31:c7:1e:fc:0c:6d:3e:93:74:38:e7:ac:
                    b7:a8:b1:b7:0d:c9:81:e0:c0:23:86:18:39:7e:be:
                    0c:f0:7f:0d:7a:40:77:a9:fe:d2:f7:d9:00:40:14:
                    cf:3a:14:ba:69:a0:6c:d5:4f:e4:d6:24:03:50:e5:
                    4a:30:9b:e3:e3:b9:09:e1:77:02:62:91:41:88:00:
                    77:d7:e2:a8:e8:8e:25:4b:05:36:9b:f3:70:86:bc:
                    cf:12:f0:68:7a:15:e9:2f:f3:2f:8c:3c:ab:6c:9d:
                    7c:f5:ba:60:32:ad:2e:d4:0d:6a:e4:66:7a:50:7d:
                    73:e6:06:30:78:cf:67:fd:db:f5:7b:e6:34:8e:21:
                    7d:1d:a2:2d:4f:45:57:47:ba:c9:d3:f9:3b:06:e2:
                    7b:35:c4:6a:56:6d:37:1d:8a:b6:43:8b:f1:26:9a:
                    b5:04:ef:86:dd:ba:20:bf:fb:71:dd:57:a7:c9:e5:
                    3e:6c:e2:9e:6d:c3:a4:06:2e:d9:3b:37:f0:5f:7e:
                    9b:51:7a:7f:2e:0a:c9:e4:cc:9c:ea:4c:a4:c2:4e:
                    f7:6b:59:13:5d:e9:88:bb:68:bc:aa:01:f5:f5:1a:
                    68:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:52:DF:FD:9C:DB:E5:05:28:E6:5A:91:30:53:72:7D:3C:29:A8:12
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/304BECC6CF7D11F081725AC4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.84.0/22
                  156.224.92.0-156.224.98.255
                  156.225.67.0/24
                  156.225.73.0/24
                  156.240.99.0/24
                  156.249.137.0-156.249.138.255
                  156.249.147.0-156.249.149.255
                  156.249.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:82:87:d8:06:e4:20:3f:d3:ce:48:06:27:cb:83:96:e7:fb:
         41:0a:d6:61:f5:e4:f0:be:0d:bd:bc:07:02:1b:48:ba:f8:0d:
         52:4a:8d:38:4c:49:7d:d7:22:de:d3:34:75:a6:50:33:57:75:
         d0:7f:24:70:dd:d6:83:f7:79:03:1f:b7:50:81:84:eb:12:8e:
         23:3e:d1:7a:21:eb:4c:be:23:1b:72:84:36:4f:8c:76:b7:23:
         aa:ab:46:4b:3c:11:74:38:0f:c0:db:f7:2e:56:03:c4:0e:e8:
         d5:61:b7:d7:5d:d6:d9:1c:f2:81:70:c6:1e:23:e7:1b:db:43:
         9f:72:51:39:f1:af:83:fd:b2:31:ef:cd:59:50:54:dc:09:bf:
         e3:e4:46:09:c9:27:de:f1:cc:36:a8:7a:e2:18:7a:e5:9e:50:
         0d:18:c7:fd:2d:13:da:a4:8e:d6:ce:39:84:fa:86:5c:0a:85:
         4b:f6:91:9b:bf:7d:f6:45:66:08:78:39:ad:e0:00:d6:69:9c:
         75:37:73:ed:86:74:41:5a:3f:c0:05:2c:dd:db:29:6a:6f:c9:
         c2:71:80:e3:d5:43:77:3b:36:a4:07:1e:06:6e:cb:54:87:38:
         4a:a7:54:55:d0:c2:f0:9a:65:ab:30:97:06:8d:32:8b:f0:a8:
         1e:69:44:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:56 2025 by rpki-client