This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ADE3D34BFBD11F093D871ABDAE4EC9C.roa
File:                     4ADE3D34BFBD11F093D871ABDAE4EC9C.roa (raw, json)
Hash identifier:          jOxRdyJd26ks93Wfbo3NqdAyU90V06UtNwm98iNA+ZE=
Subject key identifier:   49:4D:4C:E1:27:58:8B:50:2C:81:54:4F:A5:A4:92:3E:C0:D7:9E:EE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0186C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ADE3D34BFBD11F093D871ABDAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 11:46:58 +0000
ROA not before:           Wed 12 Nov 2025 11:46:53 +0000
ROA not after:            Mon 18 May 2026 11:46:53 +0000
asID:                     55020
IP address blocks:        156.224.16.0/23 maxlen: 24
                          156.224.18.0/23 maxlen: 24
                          156.224.20.0/22 maxlen: 24
                          156.224.24.0/22 maxlen: 24
                          156.224.28.0/23 maxlen: 24
                          156.224.30.0/23 maxlen: 24
                          156.224.63.0/24 maxlen: 24
                          156.235.96.0/21 maxlen: 24
                          156.235.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100039 (0x186c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 12 11:46:53 2025 GMT
            Not After : May 18 11:46:53 2026 GMT
        Subject: CN=691473b2-bacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:96:e6:90:c4:1f:c5:f5:2f:7c:22:56:7f:
                    46:09:80:84:9c:f5:1c:cb:a8:61:b2:7f:2c:ab:a7:
                    04:0d:60:86:9d:5a:b7:78:7b:aa:66:71:da:12:4f:
                    3d:d8:15:85:26:59:da:07:78:8d:26:23:24:07:f8:
                    1e:e9:ac:34:00:03:06:e7:6e:52:24:e2:cc:9c:ed:
                    e5:17:54:aa:a8:2f:ed:82:46:c7:67:0b:7f:49:50:
                    47:a8:19:ec:e0:f1:43:89:e4:fb:d7:ec:1b:f1:b4:
                    a5:ad:b7:13:23:09:26:07:31:08:62:d6:f6:80:3b:
                    60:41:c3:89:75:5a:c1:ab:10:68:37:65:3a:dc:50:
                    f7:47:6c:5d:f3:95:a2:c8:4c:04:0f:a6:59:e3:9d:
                    6b:80:c9:3f:60:5d:8b:f8:b3:a2:21:8c:25:7d:4e:
                    61:1d:b1:64:54:62:8f:63:70:ab:06:f1:7e:5e:52:
                    c4:25:9f:f0:cc:4d:25:a4:9b:9f:e7:28:56:c4:26:
                    a0:c2:cf:5b:df:3c:8d:be:9b:ba:aa:9a:c8:21:06:
                    f5:0a:24:f2:65:b7:31:bf:2e:e8:e5:9c:63:b0:34:
                    d8:ed:08:5b:54:c4:10:50:70:4d:ee:d0:ce:8f:9b:
                    cd:03:d2:0e:63:e9:74:49:13:d1:79:f9:75:37:6c:
                    6b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4D:4C:E1:27:58:8B:50:2C:81:54:4F:A5:A4:92:3E:C0:D7:9E:EE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4ADE3D34BFBD11F093D871ABDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.16.0/20
                  156.224.63.0/24
                  156.235.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:ac:8d:3e:c6:03:1a:0c:f3:1e:6a:2d:0d:e0:4b:11:e6:4a:
         e5:9f:f5:be:86:93:18:7d:c2:bc:3b:f2:c5:33:c7:32:ab:5e:
         a6:17:17:28:7d:bb:e5:09:a7:ff:57:1d:f7:83:5c:e8:c5:7d:
         8a:c4:d4:97:e5:3b:bf:c6:b5:0a:8c:89:3d:4b:e1:34:aa:2a:
         6e:4f:01:b3:d0:70:3e:bd:46:df:b1:8a:04:45:51:c2:33:97:
         4b:8f:51:e0:b6:e2:56:46:93:b6:82:8a:07:e0:2a:30:89:a1:
         bd:d6:7c:94:34:83:c9:e8:ed:c6:ff:32:6b:14:39:45:d9:1c:
         01:77:a6:61:bf:f0:e3:a3:36:99:97:7e:24:b3:3a:99:d2:b3:
         5d:19:54:ce:d3:cd:4c:6f:9c:90:a9:7e:89:cb:f7:d8:7d:01:
         66:c4:07:ac:30:9a:6e:f7:df:4c:2e:1e:4f:3f:21:46:8e:1f:
         70:0b:b7:58:8e:66:d1:72:30:91:1b:32:21:d6:5d:ce:ae:6b:
         7b:55:4e:58:85:cc:4a:05:bb:c5:de:14:5c:36:11:3c:33:33:
         2c:bf:e3:53:13:10:9f:ab:1d:59:ee:51:6f:d9:5b:6c:e0:f4:
         ad:ff:d9:7c:52:ae:60:5a:01:7b:1c:25:c3:dc:d7:c4:a4:d4:
         5c:ef:6b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:07 2025 by rpki-client