This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC2CF07ECF8711F0929E3588DAE4EC9C.roa
File:                     AC2CF07ECF8711F0929E3588DAE4EC9C.roa (raw, json)
Hash identifier:          g6q+j/L9w5p/YxIGBogTy3LACwAu7n0KL5EFTWTGIzw=
Subject key identifier:   29:24:E2:DF:3F:AB:BE:48:A7:FA:75:F3:AF:B4:A5:7C:63:8D:0A:59
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018AEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC2CF07ECF8711F0929E3588DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 14:03:27 +0000
ROA not before:           Tue 02 Dec 2025 14:03:22 +0000
ROA not after:            Tue 14 Nov 2028 14:03:22 +0000
asID:                     17561
IP address blocks:        156.237.24.0/24 maxlen: 24
                          156.237.25.0/24 maxlen: 24
                          156.237.26.0/24 maxlen: 24
                          156.237.27.0/24 maxlen: 24
                          156.237.28.0/24 maxlen: 24
                          156.237.29.0/24 maxlen: 24
                          156.237.30.0/24 maxlen: 24
                          156.237.31.0/24 maxlen: 24
                          156.237.32.0/24 maxlen: 24
                          156.237.33.0/24 maxlen: 24
                          156.237.34.0/24 maxlen: 24
                          156.237.35.0/24 maxlen: 24
                          156.237.36.0/24 maxlen: 24
                          156.237.37.0/24 maxlen: 24
                          156.237.38.0/24 maxlen: 24
                          156.237.39.0/24 maxlen: 24
                          156.237.40.0/24 maxlen: 24
                          156.237.41.0/24 maxlen: 24
                          156.237.42.0/24 maxlen: 24
                          156.237.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101099 (0x18aeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 14:03:22 2025 GMT
            Not After : Nov 14 14:03:22 2028 GMT
        Subject: CN=692ef1af-9f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:db:d0:f5:f5:15:8d:ac:9f:a8:0b:60:4e:
                    e3:27:63:08:f7:54:98:59:e3:ad:a7:e8:4c:93:05:
                    24:b8:3e:d6:d5:df:8e:9f:da:ef:e9:0e:bf:96:4e:
                    a8:fb:11:7d:23:e6:5b:06:62:d2:b4:73:1c:81:77:
                    35:21:a6:3f:8e:3e:94:b9:30:97:34:e5:b2:c6:5c:
                    c2:12:fb:73:c3:d7:a8:13:c1:57:de:17:de:d3:f4:
                    9e:da:79:41:1c:14:23:60:00:33:62:87:d4:54:80:
                    c5:88:f3:24:ff:a9:28:11:a4:f2:86:ac:ad:e3:fb:
                    50:23:79:8c:96:a6:71:47:98:91:c9:b3:50:3f:2b:
                    e9:53:22:1e:2d:4b:74:1f:54:55:23:71:4f:ec:9d:
                    76:bc:cd:21:d7:14:c7:16:1a:d2:0d:64:94:f3:47:
                    5e:79:68:ed:10:ff:b8:6f:22:d1:40:f3:36:7d:0d:
                    7f:77:98:b0:90:13:ac:0a:fc:1d:a8:91:57:e3:94:
                    e2:2a:74:78:6b:5c:16:37:ca:f1:2f:18:6c:05:98:
                    cf:5d:aa:bf:ae:f8:42:d9:dd:b1:41:36:f7:b7:a1:
                    eb:50:4a:61:f7:82:7d:5f:b2:ad:37:ba:e5:1b:9d:
                    a2:6b:03:ec:0a:66:d2:ee:c1:a2:77:23:fc:04:8a:
                    e5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:24:E2:DF:3F:AB:BE:48:A7:FA:75:F3:AF:B4:A5:7C:63:8D:0A:59
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC2CF07ECF8711F0929E3588DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.237.24.0-156.237.43.255

    Signature Algorithm: sha256WithRSAEncryption
         79:4a:9c:90:7c:dc:a3:f2:8a:5f:ef:d0:c8:3f:ae:c5:f0:8b:
         a7:4f:46:5f:5d:00:d6:1c:66:e4:13:60:8c:e3:e3:81:05:72:
         9b:ef:17:8f:97:18:14:47:59:26:55:dd:42:3d:84:4f:75:f4:
         ba:c2:d5:f1:42:3c:72:9f:7a:4d:24:cc:b7:a3:2a:91:56:41:
         af:87:b3:70:cf:de:f2:bc:c4:3c:fb:dd:ad:0a:e6:0a:3c:d0:
         78:47:57:8a:b3:a6:12:0a:b0:cc:c7:91:cb:be:7d:87:5e:17:
         38:1f:79:86:bd:0e:75:07:ec:4c:1e:e3:5b:86:c9:f2:3e:72:
         65:89:2a:73:53:63:b1:a4:55:a1:26:4b:b9:30:67:a2:31:0a:
         38:89:4b:08:ef:8d:55:cf:3d:98:19:77:ad:97:4a:25:47:3e:
         aa:3c:72:28:41:6a:67:d8:94:25:2b:fa:a6:29:02:35:1b:11:
         e8:0b:35:f1:40:bf:e9:8d:87:34:18:40:db:f0:4c:74:0d:54:
         90:26:eb:f6:19:1c:ca:4e:80:e0:2b:14:14:fd:03:98:45:f3:
         2f:9d:8c:42:4c:ef:31:c6:c2:87:63:5e:c4:86:14:c7:96:19:
         20:fd:6f:ee:0a:c5:6e:a9:bb:1d:8b:b5:02:e7:6a:6c:60:8d:
         ef:86:31:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:15 2025 by rpki-client