This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5989D020EBEE11F087FFC9C4DAE4EC9C.roa
File:                     5989D020EBEE11F087FFC9C4DAE4EC9C.roa (raw, json)
Hash identifier:          b9E+FfQKzB9PvYOBEwJ4cTmEtJrIvUA44vMLgcxodPM=
Subject key identifier:   29:29:EF:3E:BD:51:92:30:43:EB:65:BD:9F:6D:F6:F9:5B:B9:92:0A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01954F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5989D020EBEE11F087FFC9C4DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 17:28:59 +0000
ROA not before:           Wed 07 Jan 2026 17:28:54 +0000
ROA not after:            Tue 27 Jan 2026 17:28:54 +0000
asID:                     63139
IP address blocks:        156.227.200.0/24 maxlen: 24
                          156.227.201.0/24 maxlen: 24
                          156.227.202.0/24 maxlen: 24
                          156.227.220.0/22 maxlen: 24
                          156.227.224.0/23 maxlen: 24
                          156.227.226.0/23 maxlen: 24
                          156.227.228.0/23 maxlen: 24
                          156.227.230.0/23 maxlen: 24
                          156.227.252.0/22 maxlen: 24
                          156.229.2.0/23 maxlen: 24
                          156.229.29.0/24 maxlen: 24
                          156.229.30.0/23 maxlen: 24
                          156.229.40.0/23 maxlen: 24
                          156.229.42.0/24 maxlen: 24
                          156.229.43.0/24 maxlen: 24
                          156.229.44.0/23 maxlen: 24
                          156.229.46.0/24 maxlen: 24
                          156.229.49.0/24 maxlen: 24
                          156.229.51.0/24 maxlen: 24
                          156.229.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103759 (0x1954f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  7 17:28:54 2026 GMT
            Not After : Jan 27 17:28:54 2026 GMT
        Subject: CN=695e97db-1690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:30:80:32:1a:6d:99:37:e1:b6:a9:1e:e6:
                    29:71:dc:d8:6e:31:3a:66:8c:a3:92:76:4e:ca:e6:
                    4a:6f:f6:e2:14:67:3d:b8:52:b5:eb:4f:8c:9a:2e:
                    8e:e7:e1:70:54:89:e6:ac:d6:23:e5:5d:91:e5:25:
                    07:7d:4f:81:a0:5e:30:2b:5e:ee:ff:2d:60:ad:b1:
                    e8:18:d3:2a:a9:cc:88:ba:d2:5c:33:1b:6b:d9:04:
                    9e:fc:f9:7e:bc:7f:4a:35:c6:d5:86:ec:be:56:c5:
                    60:1c:7b:61:b0:d6:56:a5:6f:15:2e:7f:5d:e7:92:
                    15:a4:68:35:34:61:f7:e7:60:58:71:dc:23:f0:3b:
                    4c:e3:13:29:a0:1e:97:5b:47:c1:01:d7:d3:ad:1b:
                    9b:91:06:31:57:8f:c3:06:8c:e8:16:29:c5:ad:1b:
                    a1:b1:a6:66:a8:8c:cd:7b:eb:e4:e5:37:63:fb:c7:
                    8d:f2:62:7b:7c:ba:8d:19:2f:ac:5c:d8:00:38:24:
                    02:94:14:56:db:ab:9f:d8:ec:a4:93:e3:05:f1:ef:
                    bb:14:ed:e6:49:3a:87:3a:85:39:a2:23:2d:4b:81:
                    6b:9e:f0:03:3a:97:0f:c5:88:0d:e3:07:11:3b:07:
                    f8:b0:9f:ef:dc:96:d8:72:e2:5f:8f:ec:44:9d:6d:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:29:EF:3E:BD:51:92:30:43:EB:65:BD:9F:6D:F6:F9:5B:B9:92:0A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5989D020EBEE11F087FFC9C4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.200.0-156.227.202.255
                  156.227.220.0-156.227.231.255
                  156.227.252.0/22
                  156.229.2.0/23
                  156.229.29.0-156.229.31.255
                  156.229.40.0-156.229.46.255
                  156.229.49.0/24
                  156.229.51.0/24
                  156.229.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:af:32:d1:de:7d:95:1a:b1:f6:60:80:8c:01:c5:80:9e:97:
         ac:e2:ff:4f:76:ce:15:0d:1d:c4:35:55:8d:1b:fb:85:5a:61:
         78:64:ae:56:78:48:32:1b:b5:6d:d6:da:d7:77:3f:dd:b4:10:
         bd:bb:0b:5d:8a:cc:fc:fc:ac:50:52:00:13:40:48:b8:94:9a:
         33:95:a2:b2:ed:e3:68:70:89:f8:58:2e:0c:c4:85:cb:98:73:
         cc:fa:98:1a:64:8b:63:58:cc:f4:19:c9:23:03:d6:33:c4:7b:
         80:8b:71:2e:bf:c5:73:15:ad:e9:41:31:43:74:84:04:bf:37:
         e8:ce:a3:49:e7:9d:e6:8d:a5:2a:ac:0a:64:fd:fe:12:5f:6a:
         94:62:9e:90:18:01:9c:29:5b:40:0b:6f:ba:b6:60:23:2c:16:
         50:ba:e7:95:b6:79:c1:06:ba:48:bf:f1:3b:b5:24:80:f8:0a:
         c4:26:67:c2:6d:08:85:e2:c0:2c:ca:20:55:0c:65:f0:a5:75:
         fb:eb:60:78:ac:ea:74:87:be:fe:4f:ca:63:ee:c8:42:9c:26:
         61:37:14:c1:74:b9:f5:2f:c6:14:a8:ad:60:93:eb:35:01:6a:
         4b:01:95:7a:cf:14:33:77:5b:89:b4:aa:2d:d7:c9:d1:fd:f2:
         cc:46:4d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:34 2026 by rpki-client