This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42551AB4CFA511F0B5075FBCDAE4EC9C.roa
File:                     42551AB4CFA511F0B5075FBCDAE4EC9C.roa (raw, json)
Hash identifier:          6ZXi/+MIoKRp0WpR7xPZRicU//QEdYLY2llWxBZ8/MI=
Subject key identifier:   B1:77:77:C8:9D:DC:96:BA:C6:DB:F6:EE:83:32:CE:B8:3E:2E:C1:F3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018B2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42551AB4CFA511F0B5075FBCDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 17:35:14 +0000
ROA not before:           Tue 02 Dec 2025 17:35:08 +0000
ROA not after:            Sun 19 Nov 2028 17:35:08 +0000
asID:                     17561
IP address blocks:        156.252.87.0/24 maxlen: 24
                          156.252.88.0/24 maxlen: 24
                          156.252.89.0/24 maxlen: 24
                          156.252.90.0/24 maxlen: 24
                          156.252.91.0/24 maxlen: 24
                          156.252.92.0/24 maxlen: 24
                          156.252.93.0/24 maxlen: 24
                          156.252.94.0/24 maxlen: 24
                          156.252.95.0/24 maxlen: 24
                          156.252.132.0/24 maxlen: 24
                          156.252.133.0/24 maxlen: 24
                          156.252.134.0/24 maxlen: 24
                          156.252.135.0/24 maxlen: 24
                          156.252.136.0/24 maxlen: 24
                          156.252.137.0/24 maxlen: 24
                          156.252.138.0/24 maxlen: 24
                          156.252.139.0/24 maxlen: 24
                          156.252.140.0/24 maxlen: 24
                          156.252.141.0/24 maxlen: 24
                          156.252.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101166 (0x18b2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 17:35:08 2025 GMT
            Not After : Nov 19 17:35:08 2028 GMT
        Subject: CN=692f2352-7185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:ac:ef:ba:8b:23:20:a1:9a:b5:e9:85:e8:
                    74:a6:df:19:cc:8d:7a:32:c6:da:3e:67:63:9f:ca:
                    d7:d7:e6:d5:de:a9:b9:9d:7f:95:57:e0:04:95:c4:
                    f4:38:66:2a:db:bd:8d:b8:d1:eb:62:12:4c:c3:1a:
                    c5:00:8a:13:06:34:38:9b:a2:b7:be:fc:47:70:56:
                    85:e3:ae:de:f3:d2:8d:89:b6:95:c3:52:10:48:12:
                    82:0b:a4:f4:8c:80:ac:7b:16:a5:2a:26:12:5b:da:
                    e1:23:6e:7e:5f:de:b3:23:a4:f2:c5:4b:c0:ae:53:
                    28:ca:b1:56:8e:f6:7e:98:61:94:99:bd:7a:c3:3e:
                    e7:41:67:4d:ea:99:f5:0e:32:66:d8:0a:54:ea:65:
                    40:b7:fb:89:c4:be:32:e9:86:7d:1c:1d:6d:96:97:
                    02:95:bc:7d:94:98:bc:6f:3e:3e:6a:b0:56:ce:77:
                    c5:13:4d:8b:c2:51:c9:a9:64:45:d3:67:bd:51:47:
                    4a:da:aa:44:c9:e4:9e:96:0a:18:5d:a8:12:05:56:
                    31:c8:7c:cd:e6:aa:50:7c:59:30:99:8b:b9:dc:ab:
                    40:08:2a:30:d5:33:52:cb:13:85:9d:87:7b:d2:67:
                    26:90:25:09:84:7e:bf:59:02:79:73:93:90:db:7d:
                    98:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:77:77:C8:9D:DC:96:BA:C6:DB:F6:EE:83:32:CE:B8:3E:2E:C1:F3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42551AB4CFA511F0B5075FBCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.87.0-156.252.95.255
                  156.252.132.0-156.252.142.255

    Signature Algorithm: sha256WithRSAEncryption
         14:20:81:cd:73:d7:3b:6f:10:3f:20:1e:81:93:c7:53:cb:33:
         40:df:da:8e:3b:e4:fa:bc:0c:49:ef:15:03:15:bc:4c:08:42:
         53:3e:d5:fb:28:5d:12:2c:35:1a:f6:33:4e:f7:f3:7b:e5:be:
         33:34:7d:98:ce:55:b2:e6:0e:cf:3d:95:c9:d6:46:8f:5c:e7:
         d9:35:18:5a:3c:c4:87:8d:83:85:a7:b1:45:2a:b1:57:52:3d:
         82:be:3d:f6:1f:e8:c1:98:22:0c:c8:93:4e:5f:70:c5:77:c9:
         5f:e9:4a:0b:aa:52:24:64:aa:31:fa:2c:19:c4:f4:55:5d:6f:
         cd:b1:4a:a9:8e:99:93:3d:e6:f3:18:24:3c:00:c5:34:13:7f:
         06:b2:e8:4f:64:b9:f6:c0:4d:fb:d0:0b:14:0e:ba:d0:a1:c2:
         55:54:65:23:1e:a8:7e:a1:03:c2:32:b9:06:a8:c2:cd:f6:5b:
         60:be:1d:65:80:df:de:5e:4e:ee:5a:81:fa:1a:eb:13:b6:25:
         d4:92:f7:75:6a:aa:f8:f2:a9:c2:71:f7:04:8b:e3:0f:f6:2b:
         a8:f6:80:ef:01:66:d0:72:7d:22:44:7b:5e:73:47:73:e5:ce:
         e5:db:d0:ce:47:6b:18:ce:3b:91:51:53:ca:cf:b9:c7:05:04:
         bc:be:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:55 2025 by rpki-client