This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1577F05CD9B911F0AD4E1FEFDAE4EC9C.roa
File:                     1577F05CD9B911F0AD4E1FEFDAE4EC9C.roa (raw, json)
Hash identifier:          bYKlJH7cX+FRBPtuZdwwPFEXgnohwSafpXmahzdYBTo=
Subject key identifier:   FE:07:3C:53:EC:5E:16:26:97:74:33:B5:BB:A8:DE:D5:03:08:4B:D9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018E50
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1577F05CD9B911F0AD4E1FEFDAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 13:22:20 +0000
ROA not before:           Mon 15 Dec 2025 13:22:15 +0000
ROA not after:            Tue 03 Mar 2026 13:22:15 +0000
asID:                     399077
IP address blocks:        156.251.30.0/24 maxlen: 24
                          156.251.31.0/24 maxlen: 24
                          156.251.32.0/24 maxlen: 24
                          156.251.33.0/24 maxlen: 24
                          156.251.34.0/24 maxlen: 24
                          156.251.35.0/24 maxlen: 24
                          156.251.36.0/24 maxlen: 24
                          156.251.37.0/24 maxlen: 24
                          156.251.38.0/24 maxlen: 24
                          156.251.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101968 (0x18e50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 15 13:22:15 2025 GMT
            Not After : Mar  3 13:22:15 2026 GMT
        Subject: CN=69400b8c-ed61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:0d:1d:80:56:7c:12:3a:27:15:58:a4:6c:
                    8b:b6:a8:4d:8a:3a:6b:ed:f4:11:fe:7e:72:59:42:
                    d8:50:a0:71:21:b8:8e:bd:15:79:f9:43:ef:83:d6:
                    96:1f:b7:2d:60:2a:34:25:f0:a4:e8:83:6e:64:36:
                    cd:87:2e:00:be:d3:b0:d0:b7:6f:ba:2c:87:5d:1e:
                    34:d0:19:0b:7a:02:f3:34:00:e9:58:63:1c:b8:89:
                    89:39:fd:98:0b:8f:94:ff:43:ba:6d:60:e1:a3:65:
                    db:1c:71:25:94:be:7b:b9:ef:7b:78:ea:1c:9e:ee:
                    17:a0:b8:13:09:ec:19:a3:37:5e:ef:c7:4f:01:2f:
                    b0:52:9f:16:1d:e1:2d:91:13:86:66:dd:5a:77:34:
                    b8:86:84:ce:57:78:e8:42:09:7d:73:b3:57:46:c2:
                    66:84:db:95:8d:79:d4:58:2f:a7:93:65:06:7c:80:
                    0f:a6:30:99:b8:02:cb:e5:58:95:03:a0:97:95:1d:
                    58:54:33:ac:5e:33:5d:87:82:a5:b0:67:35:15:03:
                    df:29:c7:44:af:8d:de:c4:e9:09:56:f0:2d:fa:fc:
                    46:8d:2b:67:0d:18:d1:46:d8:cf:a1:e8:d7:cb:5d:
                    89:84:5e:f2:d4:0f:d7:10:95:c1:0d:a5:47:96:64:
                    c2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:07:3C:53:EC:5E:16:26:97:74:33:B5:BB:A8:DE:D5:03:08:4B:D9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1577F05CD9B911F0AD4E1FEFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.30.0-156.251.39.255

    Signature Algorithm: sha256WithRSAEncryption
         8d:a9:c4:60:73:c9:8d:df:19:60:e7:43:7b:c0:99:e4:3d:d9:
         36:85:ff:16:6c:bc:54:7c:12:63:50:aa:dc:88:63:d4:64:6b:
         93:fc:d7:79:48:63:41:07:bf:47:4f:a3:bd:97:04:c9:2d:26:
         24:f7:48:b8:f7:34:d6:b0:f9:cb:56:b7:45:de:01:f3:b7:90:
         25:28:f8:a2:a5:36:ea:26:dd:93:88:ac:b1:7a:e9:fb:d5:02:
         3c:fc:96:2b:d5:4b:30:75:b8:12:bb:55:23:59:38:b5:7a:77:
         6e:59:42:cc:0d:3e:18:b1:db:fd:68:d3:9b:14:b1:a8:83:b8:
         34:bd:6a:d0:9a:91:0c:9b:52:56:87:c6:b0:79:b5:7d:4e:4b:
         25:74:ec:e3:d3:8b:49:da:e4:59:8e:e1:54:3f:32:4b:3a:b1:
         9e:38:e5:d0:81:14:29:8a:23:e7:32:c0:45:36:02:23:6b:71:
         19:51:15:60:ed:f7:96:8f:76:a5:29:f7:d5:d7:20:46:32:d8:
         83:05:51:41:7a:94:7f:16:68:18:55:4b:0f:7e:24:52:26:84:
         c7:da:d6:db:d8:db:66:50:d6:2e:8f:f6:e1:9e:0a:2f:cc:df:
         52:ce:9e:fe:f0:66:2b:53:a4:17:13:f4:01:6b:4d:c5:ee:84:
         69:87:c1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:14 2025 by rpki-client