This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D57E2A4CFA511F0AE83AFBCDAE4EC9C.roa
File:                     7D57E2A4CFA511F0AE83AFBCDAE4EC9C.roa (raw, json)
Hash identifier:          EdRx2MWt6MySaHX8yKUd6wPUnTuDthHDSRLIy1ClcJo=
Subject key identifier:   8A:89:50:D2:34:4C:E6:44:23:92:73:47:BD:0D:23:89:4E:1D:37:DA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018B30
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D57E2A4CFA511F0AE83AFBCDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 17:36:53 +0000
ROA not before:           Tue 02 Dec 2025 17:36:48 +0000
ROA not after:            Thu 01 Jan 2026 17:36:48 +0000
asID:                     984
IP address blocks:        156.227.133.0/24 maxlen: 24
                          156.227.143.0/24 maxlen: 24
                          156.227.145.0/24 maxlen: 24
                          156.231.98.0/24 maxlen: 24
                          156.231.101.0/24 maxlen: 24
                          156.232.32.0/24 maxlen: 24
                          156.232.33.0/24 maxlen: 24
                          156.242.66.0/24 maxlen: 24
                          156.242.67.0/24 maxlen: 24
                          156.242.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101168 (0x18b30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 17:36:48 2025 GMT
            Not After : Jan  1 17:36:48 2026 GMT
        Subject: CN=692f23b5-b9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:58:55:1f:ef:7b:e0:e2:6f:ac:c8:b2:10:
                    18:f7:8d:88:7f:a4:1d:e9:cd:71:5f:bd:76:6b:71:
                    6a:73:3f:f4:dd:56:ae:5f:54:ea:b0:b8:40:28:ac:
                    43:2f:5c:e2:5e:e8:34:da:95:9d:5e:68:6c:5c:3e:
                    a3:98:b8:c5:f8:b1:43:e3:82:79:53:37:cd:8d:bc:
                    a8:3e:07:5e:a8:17:2b:aa:b9:1d:8f:95:69:e1:63:
                    12:09:64:15:d5:bd:ee:42:76:d9:ed:d9:84:63:64:
                    3f:1e:10:69:24:7f:1b:64:c8:d1:7c:22:77:c4:6e:
                    96:31:69:b2:5e:68:12:aa:e4:45:f6:9f:d1:34:10:
                    44:4b:e4:70:f7:7f:a9:0f:71:4a:ad:d5:48:1f:c1:
                    c8:1a:f6:3d:9c:77:77:3f:56:36:9c:b1:4e:26:2c:
                    d6:01:1c:2f:94:e0:13:96:69:fb:4a:b6:ff:ab:3c:
                    56:8f:c9:e7:bf:74:93:35:21:f3:a3:e2:82:d5:76:
                    c3:0f:23:2e:07:a7:53:bf:a3:0c:fe:12:46:34:f6:
                    2f:d6:0c:59:8e:b0:85:fc:a9:d1:be:73:7c:b4:42:
                    fa:ff:75:a4:f9:a0:85:cf:d7:2e:18:bf:05:6e:d5:
                    ce:3f:71:dd:98:31:df:7c:2b:6d:30:9c:85:65:74:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:89:50:D2:34:4C:E6:44:23:92:73:47:BD:0D:23:89:4E:1D:37:DA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D57E2A4CFA511F0AE83AFBCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.133.0/24
                  156.227.143.0/24
                  156.227.145.0/24
                  156.231.98.0/24
                  156.231.101.0/24
                  156.232.32.0/23
                  156.242.66.0-156.242.68.255

    Signature Algorithm: sha256WithRSAEncryption
         60:f2:83:29:ca:95:c0:eb:9e:fc:63:a1:12:89:5c:3c:c2:7a:
         fe:81:9f:80:66:06:0a:1f:73:a6:d7:f5:69:e8:52:49:ec:db:
         2a:a9:1b:9a:7b:8f:74:d7:94:9b:f4:2f:6f:4a:1b:50:6b:01:
         53:54:c0:03:37:b8:0e:15:81:c6:20:26:1e:ad:9c:af:b4:cd:
         aa:54:2f:85:08:55:06:da:b6:fd:4c:17:6f:ef:5e:aa:49:02:
         4d:c9:c6:86:91:22:e6:36:67:06:d6:4f:04:dc:58:23:84:50:
         fa:b2:dc:17:16:eb:0d:2a:46:bb:3d:9c:44:27:62:e4:5e:a4:
         a8:2f:75:00:e6:2c:3f:8d:ec:55:9d:ca:15:b1:72:2e:87:31:
         b3:c0:53:07:55:9f:67:38:3a:24:a2:cb:77:49:74:e7:7a:87:
         7b:40:f4:11:03:14:37:b8:78:5e:d5:0e:07:85:b1:06:2e:da:
         20:33:cc:39:17:42:80:10:c6:6b:48:b5:bc:5c:b7:68:5b:85:
         f2:3a:42:a8:44:10:71:c7:c3:f1:23:a8:7e:5e:ab:52:2c:25:
         9a:f9:bb:3e:c7:0c:2e:7b:33:4e:72:87:b4:bf:30:4a:5c:0e:
         14:99:15:16:7e:61:3e:eb:c4:6a:62:48:fb:37:e1:a9:e3:db:
         85:63:77:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:10 2025 by rpki-client