This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBD459E2CFB811F08F078EB5DAE4EC9C.roa
File:                     FBD459E2CFB811F08F078EB5DAE4EC9C.roa (raw, json)
Hash identifier:          Qnxb1CVQwv1a0FTnnlw0N8JyRDQtTNGSaVOOYKcnH5A=
Subject key identifier:   2C:EC:76:C1:10:F7:72:5F:C8:C8:66:26:1C:03:34:54:EE:83:3B:80
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018B59
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBD459E2CFB811F08F078EB5DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 19:56:26 +0000
ROA not before:           Tue 02 Dec 2025 19:56:20 +0000
ROA not after:            Mon 27 Nov 2028 19:56:20 +0000
asID:                     17561
IP address blocks:        156.243.126.0/24 maxlen: 24
                          156.243.127.0/24 maxlen: 24
                          156.243.140.0/24 maxlen: 24
                          156.243.141.0/24 maxlen: 24
                          156.243.143.0/24 maxlen: 24
                          156.243.152.0/24 maxlen: 24
                          156.243.154.0/24 maxlen: 24
                          156.243.155.0/24 maxlen: 24
                          156.243.159.0/24 maxlen: 24
                          156.243.160.0/24 maxlen: 24
                          156.243.161.0/24 maxlen: 24
                          156.243.162.0/24 maxlen: 24
                          156.243.163.0/24 maxlen: 24
                          156.243.164.0/24 maxlen: 24
                          156.243.165.0/24 maxlen: 24
                          156.243.166.0/24 maxlen: 24
                          156.243.167.0/24 maxlen: 24
                          156.243.168.0/24 maxlen: 24
                          156.243.169.0/24 maxlen: 24
                          156.243.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101209 (0x18b59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 19:56:20 2025 GMT
            Not After : Nov 27 19:56:20 2028 GMT
        Subject: CN=692f446a-a205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:17:ab:33:86:7d:07:92:bf:03:1a:95:9f:49:
                    52:ce:f6:dc:96:f2:e1:3f:9e:1e:fe:fa:ca:cb:52:
                    1a:74:7c:25:38:e7:7b:94:84:ba:35:1a:39:29:14:
                    25:81:84:4f:b8:85:d5:48:b3:3d:c7:34:f4:ae:0b:
                    7c:1a:57:30:2b:bf:d8:61:92:a2:a0:6a:24:53:17:
                    66:3f:25:31:8d:42:3b:b8:84:eb:59:eb:aa:c1:15:
                    cf:81:50:db:03:db:fe:ec:10:68:4d:73:6c:56:81:
                    da:37:ba:2c:1a:5d:07:70:f5:c1:b9:0e:fe:3e:bc:
                    5d:b4:7d:df:7d:05:70:f2:8a:d8:99:d7:bf:b9:18:
                    83:b4:79:27:9f:ad:e2:cd:67:fb:8d:1f:ec:8b:6a:
                    84:59:cd:e7:73:2b:e7:ae:5c:e6:cf:04:0f:2d:7e:
                    60:e3:57:6b:0b:9f:3c:bd:f4:bb:59:79:0b:05:f4:
                    5e:e9:77:b5:45:24:ba:aa:1a:70:d4:91:a7:16:72:
                    27:2a:39:a9:d7:09:1f:99:cc:ce:75:88:af:f9:65:
                    85:79:6a:72:66:53:96:01:d3:7c:9d:22:e0:d5:a3:
                    ba:9f:fd:24:e7:6b:ad:97:3f:47:ef:74:24:d5:89:
                    ec:63:3c:1a:ce:60:5c:9a:88:0d:dc:3f:73:df:85:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EC:76:C1:10:F7:72:5F:C8:C8:66:26:1C:03:34:54:EE:83:3B:80
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBD459E2CFB811F08F078EB5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.126.0/23
                  156.243.140.0/23
                  156.243.143.0/24
                  156.243.152.0/24
                  156.243.154.0/23
                  156.243.159.0-156.243.170.255

    Signature Algorithm: sha256WithRSAEncryption
         6b:a7:f5:4c:11:48:a9:2b:48:d0:c5:16:0c:60:ed:72:d2:d9:
         22:f2:95:44:8a:ff:19:30:e7:ee:0f:97:86:22:d6:59:47:1a:
         91:58:ec:e9:db:45:23:96:b8:8e:0c:4c:a3:52:f9:14:2c:b5:
         6a:3b:34:a1:8e:10:05:73:25:13:cb:98:26:a1:af:84:ec:b4:
         39:d1:62:ea:13:8f:b8:ce:5c:01:22:af:31:44:59:ba:d4:55:
         7c:35:48:25:53:2c:0f:34:d3:25:f7:8c:2e:1a:f9:e1:ea:9b:
         73:92:6f:15:1f:30:8c:66:44:5a:e8:3b:68:a2:36:1c:a1:91:
         09:31:c7:05:2b:f3:12:eb:f3:f8:55:97:fa:2c:59:73:2e:ab:
         95:3d:0d:83:98:09:88:32:51:0e:f2:5e:28:9e:fb:bf:d3:27:
         e8:35:ff:c3:ff:0e:2f:50:41:30:08:98:96:98:43:06:a1:c2:
         0f:09:80:c6:c7:4f:69:83:2b:dd:c0:ec:d2:06:49:57:f3:f1:
         53:e3:31:cd:b6:66:b0:ab:0f:8d:d5:43:85:83:c7:65:54:31:
         25:4f:04:20:1f:1e:b1:08:94:e4:30:91:d1:16:a6:b6:09:15:
         bf:e9:a2:fd:b5:c7:f0:67:6a:8b:5c:07:d7:a0:3e:8b:92:73:
         5e:53:4c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:12 2025 by rpki-client