This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5428683AE0DB11F0AD5AF5B4DAE4EC9C.roa
File:                     5428683AE0DB11F0AD5AF5B4DAE4EC9C.roa (raw, json)
Hash identifier:          ddbO+zSB20oTmuk4ClgxeuO7mD7xlUf/GLYz68HwUzc=
Subject key identifier:   62:38:81:DB:1C:E1:17:A1:AF:00:D6:C8:86:29:47:81:2B:21:C0:2F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0191AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5428683AE0DB11F0AD5AF5B4DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 15:15:07 +0000
ROA not before:           Wed 24 Dec 2025 15:15:02 +0000
ROA not after:            Sat 31 Jan 2026 15:15:02 +0000
asID:                     44559
IP address blocks:        156.233.96.0/24 maxlen: 24
                          156.233.97.0/24 maxlen: 24
                          156.233.106.0/24 maxlen: 24
                          156.233.116.0/24 maxlen: 24
                          156.233.117.0/24 maxlen: 24
                          156.233.127.0/24 maxlen: 24
                          156.233.193.0/24 maxlen: 24
                          156.233.194.0/24 maxlen: 24
                          156.233.195.0/24 maxlen: 24
                          156.233.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102829 (0x191ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 15:15:02 2025 GMT
            Not After : Jan 31 15:15:02 2026 GMT
        Subject: CN=694c037a-b5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:ac:b9:2a:c3:cd:9e:b4:4e:a2:45:79:b1:
                    7f:4b:e4:86:68:a9:d2:42:0b:8d:e9:72:f1:89:39:
                    ff:0a:82:90:0d:7b:be:f8:59:ed:71:dc:0d:66:bd:
                    ce:41:66:b0:88:77:5c:1a:72:1f:c1:c9:ef:d1:43:
                    2a:43:8c:2b:c3:77:3d:f1:d8:e6:37:52:8d:d9:fc:
                    9f:7b:2b:bd:11:1a:de:c1:da:dc:73:5d:61:b2:3d:
                    80:6b:06:5a:bc:ca:df:bf:de:88:ea:d3:42:7a:48:
                    3f:71:60:e6:9e:74:60:41:4b:7c:43:8c:53:c5:d7:
                    e7:f8:36:56:3b:38:79:69:73:33:18:84:11:13:b4:
                    e0:c9:6a:2c:ab:d0:72:35:ea:aa:60:96:01:dd:eb:
                    aa:37:94:67:59:c8:93:6c:34:1a:96:cb:47:f3:8c:
                    5e:2f:56:77:79:e3:2f:67:26:b9:54:0d:05:76:16:
                    6e:6f:ed:12:53:b7:a1:bf:d8:41:f7:ae:f4:3e:ab:
                    5b:89:1a:ab:0a:0a:8d:d3:d2:b1:62:bf:e8:6f:56:
                    75:f2:40:b4:79:19:73:e9:78:3d:5e:2e:dd:28:a5:
                    11:c4:a8:b1:33:d3:17:02:90:01:bb:bb:10:fd:43:
                    5b:76:ca:5c:08:6f:92:cf:fb:60:3e:bf:1b:43:0a:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:38:81:DB:1C:E1:17:A1:AF:00:D6:C8:86:29:47:81:2B:21:C0:2F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5428683AE0DB11F0AD5AF5B4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.96.0/23
                  156.233.106.0/24
                  156.233.116.0/23
                  156.233.127.0/24
                  156.233.193.0-156.233.195.255
                  156.233.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ee:38:c1:d8:e4:ce:4b:3a:35:35:7e:3b:fe:4e:c8:59:cb:
         b3:28:35:24:2a:fb:8d:1e:d8:27:01:b7:33:38:07:8c:69:22:
         ad:e1:9c:1c:bf:c0:7d:34:5b:49:b4:19:e6:21:be:77:ef:f8:
         03:c1:94:60:0a:3c:18:9d:f9:7c:c5:9b:8a:18:f5:e9:31:11:
         28:95:28:16:a3:3c:9a:b2:2b:08:38:90:7e:9d:e4:e3:75:63:
         bd:08:0b:72:de:af:fe:90:a9:d0:c1:be:35:0c:e0:1c:61:85:
         49:64:6e:e3:07:d5:02:fe:e2:64:3b:41:b0:59:86:87:90:8d:
         fa:aa:55:21:bc:95:a6:0d:3d:14:12:f8:06:98:75:81:56:0a:
         ca:5d:bb:2f:36:f4:8a:1c:1f:79:c1:0d:d9:88:a4:ae:7a:c2:
         02:d4:76:9b:ed:bd:88:cf:e8:a2:4c:08:9e:80:fd:67:92:8c:
         44:17:96:83:0e:e5:86:d1:cb:b0:c3:05:ef:6c:f4:35:9e:7a:
         34:24:ba:67:6a:b8:09:d4:8e:48:bb:82:65:e1:79:5b:0f:b7:
         40:87:36:1c:35:d2:de:32:4e:30:c2:ad:a9:0f:3b:ec:c1:80:
         4a:bf:ff:e7:0c:1c:bd:b9:ee:8b:e2:a4:bf:6c:ab:4a:23:31:
         96:d4:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:02 2025 by rpki-client