This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80D703E4CF9911F0A0A6FBF1DAE4EC9C.roa
File:                     80D703E4CF9911F0A0A6FBF1DAE4EC9C.roa (raw, json)
Hash identifier:          WzrFTfTB3ZpkRndJdXvaV07Ivsusf0Ed9DovAliCRg8=
Subject key identifier:   F8:61:F1:EF:7A:FD:93:B3:79:8E:CE:B8:55:46:E0:C8:63:B1:40:54
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018B0B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80D703E4CF9911F0A0A6FBF1DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 16:11:05 +0000
ROA not before:           Tue 02 Dec 2025 16:11:00 +0000
ROA not after:            Sat 18 Nov 2028 16:11:00 +0000
asID:                     17561
IP address blocks:        156.228.174.0/24 maxlen: 24
                          156.228.175.0/24 maxlen: 24
                          156.228.176.0/24 maxlen: 24
                          156.228.177.0/24 maxlen: 24
                          156.228.178.0/24 maxlen: 24
                          156.228.179.0/24 maxlen: 24
                          156.228.180.0/24 maxlen: 24
                          156.228.181.0/24 maxlen: 24
                          156.228.182.0/24 maxlen: 24
                          156.228.183.0/24 maxlen: 24
                          156.228.184.0/24 maxlen: 24
                          156.228.185.0/24 maxlen: 24
                          156.228.186.0/24 maxlen: 24
                          156.228.189.0/24 maxlen: 24
                          156.228.190.0/24 maxlen: 24
                          156.228.191.0/24 maxlen: 24
                          156.228.192.0/24 maxlen: 24
                          156.228.194.0/24 maxlen: 24
                          156.228.196.0/24 maxlen: 24
                          156.228.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101131 (0x18b0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 16:11:00 2025 GMT
            Not After : Nov 18 16:11:00 2028 GMT
        Subject: CN=692f0f99-e192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:a4:83:a5:6f:b0:9f:84:22:be:06:3e:21:
                    e5:89:bb:51:21:9f:9f:9d:ca:dd:54:b0:77:51:54:
                    34:b2:f5:c9:ef:26:ac:1f:ad:c9:e6:78:25:73:b9:
                    9e:8f:97:5c:7e:13:46:27:25:72:54:40:3e:ee:5f:
                    5f:75:17:3d:c3:e8:4f:45:14:e0:da:a6:76:cb:f3:
                    55:c4:67:0e:5f:ca:95:f2:8f:66:0a:9c:2a:e5:05:
                    1c:48:29:72:dc:d3:de:cc:27:56:de:f2:dc:62:66:
                    93:76:34:0a:e8:64:42:f7:5c:c1:08:5b:7f:0a:04:
                    21:a0:35:6e:c1:67:48:26:9c:6c:43:18:53:3e:77:
                    23:ed:d7:d1:42:04:0c:a3:b2:dd:39:27:d1:12:7b:
                    f8:0c:93:90:a6:c2:da:25:db:d7:ea:52:71:92:a0:
                    5c:0a:e6:f5:8e:18:7b:1b:e2:b8:e8:ce:c6:2c:ec:
                    c1:75:20:65:e6:6f:a2:24:e7:dc:eb:19:89:42:41:
                    00:b9:08:2f:62:3a:df:97:2f:6d:73:6c:2f:f5:6a:
                    cd:ae:2d:2f:c6:26:86:2c:c2:a7:2a:d2:37:82:57:
                    16:44:24:63:5c:40:2f:bd:68:c0:07:5a:b7:7a:00:
                    a1:5e:09:62:9d:98:1d:95:f9:76:93:41:4a:92:e2:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:61:F1:EF:7A:FD:93:B3:79:8E:CE:B8:55:46:E0:C8:63:B1:40:54
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80D703E4CF9911F0A0A6FBF1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.174.0-156.228.186.255
                  156.228.189.0-156.228.192.255
                  156.228.194.0/24
                  156.228.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:d9:50:bb:eb:db:a9:1d:f8:5a:c2:b1:e7:01:7e:fc:c4:58:
         5f:00:c7:a8:d8:bc:2c:ea:b1:3f:49:de:bb:64:44:a2:1a:d0:
         da:55:ef:a5:88:ca:ce:80:eb:45:db:cf:ae:dc:a6:07:bc:53:
         7d:37:93:b5:75:84:92:2d:34:30:7d:3a:86:77:33:3a:d6:35:
         ef:96:67:3e:66:72:67:12:b6:0e:fb:9c:15:37:6d:07:4c:88:
         16:6f:c5:38:49:24:8b:77:7f:39:7c:b9:06:61:73:a0:15:92:
         44:b3:03:a2:8e:7a:54:0c:b4:87:40:69:29:80:01:88:84:cb:
         ea:6e:82:2c:f5:a2:b8:40:5e:34:e8:68:b3:bc:94:b6:c1:1e:
         9d:87:08:50:5a:06:67:22:3c:16:45:40:f6:8e:3f:36:de:b3:
         8a:59:0a:cf:c7:fe:19:34:1f:c4:15:aa:67:1c:be:9e:45:56:
         be:33:31:d5:9e:47:09:fd:bf:ee:38:f3:26:bb:98:2e:99:6f:
         9a:36:6e:a1:d5:66:09:4a:94:11:3c:dc:31:34:99:f5:0a:75:
         bd:6c:e2:db:82:c2:73:a6:19:ee:e1:43:c6:af:0d:cc:cf:59:
         c7:e5:85:72:92:fb:b5:de:46:5b:7f:83:81:0b:85:ca:0b:23:
         d4:46:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:46 2025 by rpki-client