This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B37DB49ACF9011F0A58308BDDAE4EC9C.roa
File:                     B37DB49ACF9011F0A58308BDDAE4EC9C.roa (raw, json)
Hash identifier:          VYvuGW7UOSGTlK3Egl/UNNHz9vUcX4jKtOwUzfFniuo=
Subject key identifier:   ED:57:D1:B6:7D:A9:54:5B:46:BC:3D:0E:AC:62:75:B8:19:79:43:56
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018AF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B37DB49ACF9011F0A58308BDDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 15:08:05 +0000
ROA not before:           Tue 02 Dec 2025 15:08:00 +0000
ROA not after:            Sat 18 Nov 2028 15:08:00 +0000
asID:                     17561
IP address blocks:        156.228.0.0/24 maxlen: 24
                          156.228.1.0/24 maxlen: 24
                          156.228.6.0/24 maxlen: 24
                          156.228.8.0/24 maxlen: 24
                          156.228.10.0/24 maxlen: 24
                          156.228.11.0/24 maxlen: 24
                          156.245.241.0/24 maxlen: 24
                          156.247.8.0/24 maxlen: 24
                          156.247.9.0/24 maxlen: 24
                          156.247.10.0/24 maxlen: 24
                          156.247.11.0/24 maxlen: 24
                          156.247.12.0/24 maxlen: 24
                          156.247.13.0/24 maxlen: 24
                          156.247.14.0/24 maxlen: 24
                          156.247.15.0/24 maxlen: 24
                          156.247.24.0/24 maxlen: 24
                          156.247.26.0/24 maxlen: 24
                          156.247.28.0/24 maxlen: 24
                          156.247.29.0/24 maxlen: 24
                          156.247.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101109 (0x18af5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 15:08:00 2025 GMT
            Not After : Nov 18 15:08:00 2028 GMT
        Subject: CN=692f00d4-dd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:00:67:5e:1a:94:20:21:62:df:81:3b:af:d2:
                    9d:61:89:ae:03:33:7a:c1:9a:73:55:9e:08:d9:2e:
                    8d:42:fa:cb:b4:d4:19:90:ba:80:c4:0f:d2:59:03:
                    e3:e9:9a:de:72:f2:8a:25:3f:22:b6:5f:4e:b5:1c:
                    0c:dc:f5:19:a8:36:a1:55:ae:97:4a:e7:3e:ae:1e:
                    af:0e:46:79:fa:7d:b3:17:02:66:9d:0d:6d:0d:30:
                    0e:6f:0f:fd:c6:f7:c0:25:09:b6:61:78:54:60:2d:
                    7e:f9:88:18:54:3c:69:ec:00:26:00:a8:57:9e:0d:
                    49:25:39:b0:b0:6d:87:8c:6a:7a:5b:d4:ec:12:20:
                    64:90:9a:34:b5:18:dc:86:25:a5:61:08:72:14:05:
                    27:77:6b:53:61:a6:84:3a:28:99:22:20:b4:1a:10:
                    ad:9b:ab:42:d5:bd:9d:1d:cf:03:d3:83:20:52:a4:
                    8b:b3:c3:ba:f6:ad:c4:7a:25:ed:d2:14:1e:92:cb:
                    58:55:61:5b:c7:23:fc:f8:29:f3:59:1f:16:e7:8a:
                    56:bb:38:b9:bb:dd:d3:c0:42:76:5c:94:49:00:18:
                    ef:08:60:c7:a7:7b:31:bb:45:5b:b9:12:b2:58:2e:
                    38:b2:6d:77:0b:bf:8b:26:15:58:cf:0e:7c:c1:54:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:57:D1:B6:7D:A9:54:5B:46:BC:3D:0E:AC:62:75:B8:19:79:43:56
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B37DB49ACF9011F0A58308BDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.0.0/23
                  156.228.6.0/24
                  156.228.8.0/24
                  156.228.10.0/23
                  156.245.241.0/24
                  156.247.8.0/21
                  156.247.24.0/24
                  156.247.26.0/24
                  156.247.28.0-156.247.30.255

    Signature Algorithm: sha256WithRSAEncryption
         78:e5:d1:e7:84:10:cc:18:a8:98:71:71:b6:c0:f1:58:36:b9:
         09:4d:09:12:eb:b7:db:88:c5:21:dd:e0:eb:ae:4b:b5:9a:19:
         a3:d2:93:b8:64:75:0c:55:01:a0:30:05:3f:37:f5:56:38:4d:
         f5:d3:fa:55:e7:29:cc:84:1a:e8:6e:83:2c:6f:52:7d:66:59:
         fd:5b:02:e4:a8:dc:d2:6f:da:19:79:cc:4c:14:8e:71:a3:d5:
         1e:9d:90:44:3f:ca:bb:7d:b2:dc:37:38:8e:da:5a:e9:11:00:
         38:15:84:fe:11:e6:d2:cc:e0:9d:ac:68:7e:cc:e4:ce:42:59:
         cc:5e:f7:38:f7:d2:2b:09:6a:b8:b0:6b:b0:19:5d:c3:25:85:
         15:6a:81:12:af:bd:9b:98:36:80:be:6a:80:0b:85:b3:07:8d:
         e4:da:03:da:6e:1f:ab:44:4b:e6:d2:e3:9b:32:69:b6:65:90:
         22:1a:50:fe:29:4f:68:d9:d8:af:22:d8:0b:ea:98:34:29:42:
         65:fe:36:6f:9d:64:df:a7:1f:eb:a5:ea:3b:cc:2e:5a:0f:f9:
         ad:87:55:db:4e:03:7d:ad:de:13:9e:43:b8:d8:cc:01:95:1d:
         3d:fd:5c:82:1a:3a:f2:66:de:37:78:cc:49:54:0a:34:ba:1f:
         b5:8a:cc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:07 2025 by rpki-client