This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35552DACDA7411F0B2F5488CDAE4EC9C.roa
File:                     35552DACDA7411F0B2F5488CDAE4EC9C.roa (raw, json)
Hash identifier:          62laurtENBZxCCTQJHSdaJHjkjRz3uqxn/WZMlDBGPU=
Subject key identifier:   BF:4C:8D:7A:96:3D:DE:E2:AD:F9:B0:E9:AD:E2:91:14:D0:65:29:90
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018EF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35552DACDA7411F0B2F5488CDAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 11:41:50 +0000
ROA not before:           Tue 16 Dec 2025 11:41:45 +0000
ROA not after:            Sat 16 Dec 2028 11:41:45 +0000
asID:                     17561
IP address blocks:        156.227.11.0/24 maxlen: 24
                          156.227.12.0/24 maxlen: 24
                          156.238.183.0/24 maxlen: 24
                          156.239.60.0/24 maxlen: 24
                          156.242.69.0/24 maxlen: 24
                          156.242.70.0/24 maxlen: 24
                          156.248.100.0/24 maxlen: 24
                          156.248.101.0/24 maxlen: 24
                          156.248.102.0/24 maxlen: 24
                          156.248.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102128 (0x18ef0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 16 11:41:45 2025 GMT
            Not After : Dec 16 11:41:45 2028 GMT
        Subject: CN=6941457e-e7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:75:d6:a1:19:9e:07:c1:9a:10:b9:a5:5c:
                    f3:a2:02:f5:e7:2a:0a:b1:d1:03:4c:e0:fa:2d:52:
                    39:3e:64:9f:41:80:43:14:65:c6:da:b3:39:ea:5c:
                    b8:19:5f:83:c1:d6:9b:fd:63:9e:c5:0c:2d:83:90:
                    66:bd:78:0c:e0:2a:f4:22:87:0c:dd:a0:2f:68:3d:
                    ea:4d:0a:18:8e:63:0a:2e:53:d8:bc:88:e1:bd:a7:
                    e9:c6:74:52:13:b2:62:1f:2a:88:99:00:4f:f7:60:
                    c9:9f:f7:04:6b:63:0c:3c:08:85:89:da:36:d5:56:
                    d7:f4:29:de:dc:99:c4:fe:00:89:6b:8a:b0:3d:30:
                    8d:1d:82:35:9b:c9:05:3e:fe:1a:40:59:cf:35:63:
                    8c:c4:d6:8a:eb:26:7f:c4:9e:7c:85:f3:f2:03:a1:
                    e4:9f:1b:47:6b:83:fc:14:47:d6:6b:90:92:90:96:
                    21:5c:02:ae:f7:96:86:d7:2a:c2:07:b7:e4:3d:74:
                    db:62:f2:8d:49:6f:ad:fb:4a:23:75:51:53:85:ea:
                    c2:30:d6:00:d1:82:14:77:f8:c2:47:c1:7d:82:aa:
                    38:22:cb:7b:1c:02:5f:21:93:97:9d:9b:50:3d:ab:
                    4a:fe:c8:18:59:95:25:3a:de:04:30:32:27:2a:f4:
                    7f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4C:8D:7A:96:3D:DE:E2:AD:F9:B0:E9:AD:E2:91:14:D0:65:29:90
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35552DACDA7411F0B2F5488CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.11.0-156.227.12.255
                  156.238.183.0/24
                  156.239.60.0/24
                  156.242.69.0-156.242.70.255
                  156.248.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:6c:28:62:a2:48:76:fb:e2:c3:96:30:48:eb:cb:c0:e8:0a:
         2d:4f:3a:66:7f:22:41:65:2c:b9:b7:fb:9e:92:7f:eb:0e:54:
         3e:14:96:1a:d6:0c:d2:b7:57:89:71:4b:f1:4b:cb:07:92:21:
         da:ed:23:a2:43:62:5e:32:50:7f:9a:57:05:e1:16:72:28:8d:
         7c:95:52:76:d6:e1:7d:39:71:80:2a:6c:e3:db:d3:9e:11:d0:
         c7:70:f5:0a:26:6b:55:d5:f3:21:aa:99:a3:b2:17:92:85:cf:
         c2:97:b5:92:91:5d:30:b9:bb:26:2b:85:38:b1:a8:09:a4:7c:
         ce:a7:00:4a:cd:4c:fd:1f:b0:61:da:81:5e:fe:11:36:4e:20:
         c7:c6:b4:3f:21:fc:63:e6:6e:ab:fe:6e:45:3d:b6:4a:80:f0:
         f7:fc:6b:cd:ff:b8:11:b5:05:e8:57:17:cc:06:a2:2c:2a:83:
         8e:6b:b9:34:4a:55:25:e1:12:a4:e9:d2:ac:39:aa:84:c6:bc:
         ba:2f:41:0b:7b:1a:e5:44:24:0a:49:bc:39:45:2d:1c:b5:98:
         02:5e:85:96:06:c6:6f:90:22:d0:7b:2f:8c:83:c3:e0:d0:26:
         14:d6:ae:79:53:43:87:51:ea:59:ea:14:04:8b:0a:8f:23:95:
         45:5d:b5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:41:43 2025 by rpki-client