This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C5384EAD01A11F09E61E6A9DAE4EC9C.roa
File:                     9C5384EAD01A11F09E61E6A9DAE4EC9C.roa (raw, json)
Hash identifier:          m2miowYRqEQAHuEZEYzVvqHHc2vaO5fvymjPH/EzicI=
Subject key identifier:   BF:68:E9:00:23:6B:7A:05:EA:8E:A6:9E:0F:1C:B7:C1:12:3C:D9:5B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018B6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C5384EAD01A11F09E61E6A9DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 07:35:19 +0000
ROA not before:           Wed 03 Dec 2025 07:35:10 +0000
ROA not after:            Fri 02 Jan 2026 07:35:10 +0000
asID:                     984
IP address blocks:        156.227.133.0/24 maxlen: 24
                          156.227.143.0/24 maxlen: 24
                          156.227.145.0/24 maxlen: 24
                          156.231.98.0/24 maxlen: 24
                          156.231.101.0/24 maxlen: 24
                          156.232.32.0/24 maxlen: 24
                          156.232.33.0/24 maxlen: 24
                          156.233.109.0/24 maxlen: 24
                          156.242.66.0/24 maxlen: 24
                          156.242.67.0/24 maxlen: 24
                          156.242.68.0/24 maxlen: 24
                          156.242.80.0/24 maxlen: 24
                          156.242.89.0/24 maxlen: 24
                          156.242.90.0/24 maxlen: 24
                          156.242.92.0/24 maxlen: 24
                          156.242.93.0/24 maxlen: 24
                          156.243.229.0/24 maxlen: 24
                          156.249.172.0/24 maxlen: 24
                          156.249.173.0/24 maxlen: 24
                          156.249.175.0/24 maxlen: 24
                          156.249.177.0/24 maxlen: 24
                          156.249.179.0/24 maxlen: 24
                          156.249.196.0/24 maxlen: 24
                          156.252.8.0/24 maxlen: 24
                          156.252.11.0/24 maxlen: 24
                          156.253.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101229 (0x18b6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  3 07:35:10 2025 GMT
            Not After : Jan  2 07:35:10 2026 GMT
        Subject: CN=692fe836-eb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:be:b2:1d:5b:cd:e6:c3:88:32:98:b6:7e:40:
                    74:2c:9a:fc:c9:f3:e6:f1:dc:3c:3c:a2:ed:f2:1e:
                    85:ef:dc:c6:e5:c2:03:51:2b:6a:a9:30:77:ae:fc:
                    bd:83:b6:6a:91:c6:b6:a6:b4:51:08:2d:00:97:95:
                    76:60:29:1f:f2:b5:75:d1:2f:54:3e:91:0f:b9:20:
                    30:2d:be:be:9a:18:60:71:df:4b:72:e0:4d:fc:d5:
                    b7:13:b4:f3:b6:a3:ca:b1:d0:f5:db:05:a4:d2:db:
                    0e:fe:30:be:83:a7:43:15:98:54:0b:7c:3c:57:23:
                    bf:27:b9:07:f6:24:71:a7:7f:69:e7:5a:b8:67:0f:
                    c5:50:85:a5:3e:91:7a:39:7c:66:a7:33:d7:a3:f0:
                    60:c6:25:8a:0f:f0:3d:a6:e0:9e:ca:2e:80:6e:a7:
                    dd:2e:90:b3:c0:18:13:8e:11:56:fe:0c:db:b7:20:
                    f9:bd:c2:ba:c5:70:cf:db:29:43:f6:b7:0d:f5:35:
                    75:3b:ea:6c:7d:7c:89:9c:f8:97:5c:c5:63:4b:ce:
                    b5:6b:28:64:5b:4a:49:84:bc:c7:f7:14:69:74:1f:
                    3a:75:39:2a:df:a7:dd:88:39:7e:14:3c:d5:24:bf:
                    5b:fa:eb:61:31:62:76:3d:b4:dd:2a:ae:26:e8:a1:
                    40:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:68:E9:00:23:6B:7A:05:EA:8E:A6:9E:0F:1C:B7:C1:12:3C:D9:5B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C5384EAD01A11F09E61E6A9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.133.0/24
                  156.227.143.0/24
                  156.227.145.0/24
                  156.231.98.0/24
                  156.231.101.0/24
                  156.232.32.0/23
                  156.233.109.0/24
                  156.242.66.0-156.242.68.255
                  156.242.80.0/24
                  156.242.89.0-156.242.90.255
                  156.242.92.0/23
                  156.243.229.0/24
                  156.249.172.0/23
                  156.249.175.0/24
                  156.249.177.0/24
                  156.249.179.0/24
                  156.249.196.0/24
                  156.252.8.0/24
                  156.252.11.0/24
                  156.253.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:75:1c:2e:e0:af:8c:7c:59:13:63:52:0f:f1:55:c0:e3:62:
         50:1b:a2:45:ac:84:07:bb:97:7a:2d:5f:eb:b5:bc:ca:2a:b0:
         06:ba:0e:2f:81:b0:91:1b:00:8c:66:da:c1:60:c7:e1:1a:76:
         bf:33:c3:d1:fc:23:12:9f:fd:b8:09:74:25:10:67:92:d9:ae:
         e8:23:62:fa:c9:ef:32:f6:0b:6a:ae:1a:cd:10:db:a2:e6:b0:
         f6:b4:35:78:a2:a2:62:8b:61:b7:a1:4d:61:2d:92:7f:e3:ea:
         24:87:b2:4d:39:71:e0:35:9e:59:7e:69:da:6f:31:4d:d8:10:
         d6:08:86:1a:c0:3a:5b:82:fe:b3:2a:b5:43:c1:6e:f2:50:a4:
         30:b8:77:c4:38:71:5f:ac:d7:19:61:dc:4b:ae:b7:70:01:03:
         5b:c9:fb:6f:83:54:7f:81:e3:38:fd:2e:53:48:28:1c:0f:39:
         20:e9:57:24:34:b1:2a:3b:c6:26:87:01:5a:f9:02:c5:e9:5b:
         ba:e2:8e:bf:d0:12:76:aa:05:ee:a8:eb:1a:4d:6f:85:78:36:
         41:c5:d7:dc:0d:79:cb:da:e1:1b:71:6b:a3:68:d7:f9:9d:10:
         12:8b:be:62:22:9c:40:02:3e:ea:86:b9:3e:e6:ef:6f:18:53:
         37:5f:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:04 2025 by rpki-client