This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E97BCDEC9DA11F09B028B80DAE4EC9C.roa
File:                     5E97BCDEC9DA11F09B028B80DAE4EC9C.roa (raw, json)
Hash identifier:          zN9kY5KVz74jchlcneCKb5jBQXT1mmEHs+IzMPvDtDU=
Subject key identifier:   8A:54:35:AD:0F:01:E6:86:9D:A1:C9:F5:39:DB:0F:39:A9:C0:6F:21
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018997
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E97BCDEC9DA11F09B028B80DAE4EC9C.roa
Signing time:             Tue 25 Nov 2025 08:40:18 +0000
ROA not before:           Tue 25 Nov 2025 08:40:12 +0000
ROA not after:            Mon 29 Dec 2025 08:40:12 +0000
asID:                     214143
IP address blocks:        156.230.136.0/21 maxlen: 24
                          156.231.13.0/24 maxlen: 24
                          156.231.176.0/21 maxlen: 24
                          156.249.192.0/23 maxlen: 24
                          156.249.198.0/23 maxlen: 24
                          156.249.210.0/23 maxlen: 24
                          156.252.27.0/24 maxlen: 24
                          156.252.28.0/24 maxlen: 24
                          156.254.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100759 (0x18997)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 25 08:40:12 2025 GMT
            Not After : Dec 29 08:40:12 2025 GMT
        Subject: CN=69256b72-80eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:00:cd:83:00:95:a3:81:c4:cc:eb:21:27:
                    e9:ae:dd:3c:3f:2d:49:53:44:7a:53:0b:54:53:40:
                    b3:09:6e:ba:85:d7:fc:77:da:7b:75:b8:37:6b:be:
                    29:8c:e5:78:8a:45:97:80:6b:a0:44:71:f3:f3:4c:
                    bd:89:bd:fb:97:0d:83:68:77:a4:c8:c5:ab:da:db:
                    22:a9:bf:61:a4:8d:fd:12:33:b6:ee:8c:2c:87:f1:
                    36:fc:01:76:74:e1:de:e5:e0:75:e5:aa:87:51:7c:
                    23:db:63:07:83:03:f2:e1:1c:6e:4e:e9:da:a2:96:
                    8c:77:c7:93:45:66:93:8b:5c:78:d1:b0:44:1b:eb:
                    a6:74:d8:70:58:09:12:c6:80:be:f5:a3:f5:4b:aa:
                    c9:4a:b4:98:c0:f9:33:44:27:26:80:62:ed:e6:50:
                    32:b6:68:1e:e2:c4:21:d7:08:8b:25:79:b5:bd:89:
                    00:e7:9d:1e:aa:7b:d5:82:1d:50:55:0d:ec:ae:2d:
                    1b:88:c3:4e:ab:33:96:b6:46:45:d7:76:27:e6:5c:
                    9f:9b:fd:d9:bf:97:d1:34:99:97:ab:f7:2b:5a:f0:
                    dc:25:28:dd:f6:13:99:1a:ed:1a:a7:0c:e4:ac:ec:
                    43:4a:71:05:91:c5:99:f1:89:ee:a5:72:4b:39:46:
                    ff:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:54:35:AD:0F:01:E6:86:9D:A1:C9:F5:39:DB:0F:39:A9:C0:6F:21
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E97BCDEC9DA11F09B028B80DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.136.0/21
                  156.231.13.0/24
                  156.231.176.0/21
                  156.249.192.0/23
                  156.249.198.0/23
                  156.249.210.0/23
                  156.252.27.0-156.252.28.255
                  156.254.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:24:92:c0:c6:be:5c:a4:61:a0:fd:c0:0c:74:2f:b9:91:98:
         68:57:23:2c:a0:7f:e0:c9:e4:c8:5b:04:8a:09:ec:6e:11:33:
         72:45:fc:67:e7:95:df:62:aa:43:07:71:b2:20:05:dd:38:2f:
         e0:d5:23:99:c0:6a:08:7a:72:ac:8a:5e:9b:54:8b:ad:78:e5:
         a2:58:b8:65:66:1c:61:c0:03:dc:7f:96:c7:07:22:12:55:a0:
         4a:6b:6d:70:57:23:d4:82:bd:dc:a8:f5:a0:04:bf:4e:03:3d:
         1b:1d:33:96:82:a7:39:00:c6:d2:0e:34:c7:11:19:85:fb:e2:
         7a:f2:aa:07:1b:70:24:9b:b9:09:da:3f:e7:5b:1b:3b:d0:fb:
         09:e0:ac:4b:5f:8b:df:8e:20:16:d8:23:a7:97:14:b4:41:93:
         98:cc:91:a8:5b:de:27:a9:7f:ba:6a:d9:5e:b6:8e:3e:8d:33:
         9c:f0:ef:6e:15:1a:48:0c:17:12:fc:2b:81:47:be:dc:89:77:
         99:fc:24:79:7f:99:16:ee:2b:54:07:55:cb:b7:55:09:24:58:
         6e:6d:e8:1d:5f:ef:ea:0e:7f:e6:4e:76:5c:6d:0f:a5:6c:84:
         41:f6:d9:88:25:0a:b6:e6:ef:b1:00:ab:23:22:61:a6:8f:bd:
         92:20:3e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:21 2025 by rpki-client