This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/432BE922CF9611F09A8ECBDEDAE4EC9C.roa
File:                     432BE922CF9611F09A8ECBDEDAE4EC9C.roa (raw, json)
Hash identifier:          jhqL6NTZpmcWU5/3Vl5B/zJDhjrJkJR21c10BMjssWM=
Subject key identifier:   4D:52:8F:4D:B5:D7:70:5B:12:33:50:BA:46:91:47:87:B1:AA:A1:40
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018B03
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/432BE922CF9611F09A8ECBDEDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 15:47:53 +0000
ROA not before:           Tue 02 Dec 2025 15:47:48 +0000
ROA not after:            Sat 18 Nov 2028 15:47:48 +0000
asID:                     17561
IP address blocks:        156.228.109.0/24 maxlen: 24
                          156.228.110.0/24 maxlen: 24
                          156.228.111.0/24 maxlen: 24
                          156.228.112.0/24 maxlen: 24
                          156.228.113.0/24 maxlen: 24
                          156.228.114.0/24 maxlen: 24
                          156.228.115.0/24 maxlen: 24
                          156.228.116.0/24 maxlen: 24
                          156.228.117.0/24 maxlen: 24
                          156.228.118.0/24 maxlen: 24
                          156.228.119.0/24 maxlen: 24
                          156.228.121.0/24 maxlen: 24
                          156.228.122.0/24 maxlen: 24
                          156.228.123.0/24 maxlen: 24
                          156.228.124.0/24 maxlen: 24
                          156.228.125.0/24 maxlen: 24
                          156.228.126.0/24 maxlen: 24
                          156.228.127.0/24 maxlen: 24
                          156.228.128.0/24 maxlen: 24
                          156.228.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101123 (0x18b03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 15:47:48 2025 GMT
            Not After : Nov 18 15:47:48 2028 GMT
        Subject: CN=692f0a29-265f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:5c:82:29:b9:be:44:d8:8e:72:0b:37:e2:
                    1b:1e:ab:22:02:d6:92:91:86:bd:30:bf:30:c9:70:
                    18:73:b5:cf:85:ba:a1:91:97:00:88:ea:84:0a:b1:
                    5a:c9:65:a3:19:03:e2:e9:08:1b:f4:32:76:22:72:
                    72:8e:be:ff:99:8c:6f:7a:c1:50:c1:e4:36:67:b2:
                    12:d1:28:32:09:2b:87:4b:70:73:08:fd:9d:09:56:
                    b4:bc:bb:7a:07:6a:6d:d3:2d:21:52:13:d9:cc:4b:
                    38:b1:0f:70:b1:02:f1:06:94:2f:e9:86:cc:c1:20:
                    94:f3:3f:b3:47:a2:3c:4a:4c:e0:c1:16:dc:ce:47:
                    99:ea:5e:75:6e:44:da:a5:f6:78:14:28:9f:ea:db:
                    aa:86:90:6f:47:e1:91:7c:37:c7:17:08:2a:bf:48:
                    91:d0:2a:d2:d7:36:01:90:6e:c6:7f:8e:a1:98:e8:
                    f9:45:21:12:2d:16:10:50:26:45:a6:b3:95:c2:f0:
                    86:f9:29:6f:6e:1e:2c:68:1a:a2:f3:1e:9e:31:7d:
                    86:9c:a9:fb:e3:2e:87:0d:76:61:d4:3b:64:e0:c0:
                    0d:73:62:6a:42:1e:5c:95:35:d1:bd:26:4a:a9:90:
                    8f:11:d6:d3:2c:04:bb:a3:62:cc:a6:34:5b:e6:ab:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:52:8F:4D:B5:D7:70:5B:12:33:50:BA:46:91:47:87:B1:AA:A1:40
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/432BE922CF9611F09A8ECBDEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.109.0-156.228.119.255
                  156.228.121.0-156.228.129.255

    Signature Algorithm: sha256WithRSAEncryption
         42:c9:72:af:a3:d9:36:05:8f:ec:d8:a4:98:10:b3:4a:ff:0c:
         45:57:b1:69:df:04:dc:75:77:ae:e2:5b:42:6f:ca:5d:8c:e3:
         28:59:1e:9d:31:85:ae:29:af:eb:73:38:10:94:d5:6f:ce:80:
         a8:4f:b6:8c:ae:1f:65:c1:ac:e5:dc:85:03:45:c4:44:78:d5:
         16:dd:1c:be:bf:19:0a:49:41:c5:e2:68:79:a7:ee:1a:38:d9:
         38:8c:79:99:da:be:76:cb:d0:54:45:e6:c5:8f:b8:f2:84:da:
         fa:4a:1f:2e:eb:6e:f7:1a:b5:12:07:5e:7f:f7:55:8b:9d:0d:
         6b:30:6e:d1:4c:04:8c:ea:28:55:63:fb:14:68:29:0a:4d:da:
         57:e8:a0:19:be:66:d9:14:b8:01:83:1e:5b:67:a7:d7:b6:3b:
         b8:8b:19:e7:08:05:ba:ee:06:a3:3b:d0:69:a3:cb:70:2e:f9:
         b8:c2:2a:7a:bd:d0:87:1b:32:fa:3f:35:58:1b:c5:b1:fe:8e:
         d9:15:93:86:ea:b8:f6:dd:e6:10:84:31:d3:f3:6d:9c:5e:cf:
         73:6a:41:3c:6d:74:dd:ea:33:b4:bd:26:98:a0:dd:50:ff:91:
         e0:d3:aa:0c:35:62:39:18:93:58:6d:db:cf:2c:52:7a:d6:4e:
         01:cf:72:e1
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAYsDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjAyMTU0NzQ4WhcNMjgxMTE4MTU0NzQ4WjAYMRYw
FAYDVQQDEw02OTJmMGEyOS0yNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq/5cgim5vkTYjnILN+IbHqsiAtaSkYa9ML8wyXAYc7XPhbqhkZcAiOqE
CrFayWWjGQPi6Qgb9DJ2InJyjr7/mYxvesFQweQ2Z7IS0SgyCSuHS3BzCP2dCVa0
vLt6B2pt0y0hUhPZzEs4sQ9wsQLxBpQv6YbMwSCU8z+zR6I8SkzgwRbczkeZ6l51
bkTapfZ4FCif6tuqhpBvR+GRfDfHFwgqv0iR0CrS1zYBkG7Gf46hmOj5RSESLRYQ
UCZFprOVwvCG+Slvbh4saBqi8x6eMX2GnKn74y6HDXZh1Dtk4MANc2JqQh5clTXR
vSZKqZCPEdbTLAS7o2LMpjRb5qvdVQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFE1S
j02113BbEjNQukaRR4exqqFAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MzJCRTkyMkNGOTYxMUYwOUE4RUNCREVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACc5G0DBAOc5HAwDAMEAJzk
eQMEAZzkgDANBgkqhkiG9w0BAQsFAAOCAQEAQslyr6PZNgWP7NikmBCzSv8MRVex
ad8E3HV3ruJbQm/KXYzjKFkenTGFrimv63M4EJTVb86AqE+2jK4fZcGs5dyFA0XE
RHjVFt0cvr8ZCklBxeJoeafuGjjZOIx5mdq+dsvQVEXmxY+48oTa+kofLutu9xq1
Egdef/dVi50NazBu0UwEjOooVWP7FGgpCk3aV+igGb5m2RS4AYMeW2en17Y7uIsZ
5wgFuu4GozvQaaPLcC75uMIqer3Qhxsy+j81WBvFsf6O2RWThuq49t3mEIQx0/Nt
nF7Pc2pBPG103eoztL0mmKDdUP+R4NOqDDViORiTWG3bzyxSetZOAc9y4Q==
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:55 2025 by rpki-client