This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67D96C4EDF4111F0BC98B9A4DAE4EC9C.roa
File:                     67D96C4EDF4111F0BC98B9A4DAE4EC9C.roa (raw, json)
Hash identifier:          VI5Li81uhcH4UOjEmOc/+HzqH8QzJog91shfoi7VZLs=
Subject key identifier:   CF:02:BD:DE:E3:9B:84:6C:48:AD:0A:C0:74:6D:42:52:CE:93:A1:7D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019075
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67D96C4EDF4111F0BC98B9A4DAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 14:20:46 +0000
ROA not before:           Mon 22 Dec 2025 14:20:41 +0000
ROA not after:            Wed 28 Jan 2026 14:20:41 +0000
asID:                     44559
IP address blocks:        156.246.235.0/24 maxlen: 24
                          156.246.236.0/24 maxlen: 24
                          156.246.237.0/24 maxlen: 24
                          156.246.238.0/24 maxlen: 24
                          156.246.239.0/24 maxlen: 24
                          156.246.240.0/24 maxlen: 24
                          156.246.241.0/24 maxlen: 24
                          156.246.242.0/24 maxlen: 24
                          156.246.243.0/24 maxlen: 24
                          156.246.244.0/24 maxlen: 24
                          156.246.245.0/24 maxlen: 24
                          156.246.246.0/24 maxlen: 24
                          156.246.247.0/24 maxlen: 24
                          156.246.248.0/24 maxlen: 24
                          156.246.249.0/24 maxlen: 24
                          156.246.250.0/24 maxlen: 24
                          156.246.251.0/24 maxlen: 24
                          156.246.252.0/24 maxlen: 24
                          156.246.253.0/24 maxlen: 24
                          156.246.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102517 (0x19075)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 22 14:20:41 2025 GMT
            Not After : Jan 28 14:20:41 2026 GMT
        Subject: CN=694953be-d02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:0b:de:d4:f8:17:a7:d9:71:29:62:42:43:
                    cc:03:ae:91:50:25:ce:f3:a0:fe:60:81:7f:77:fc:
                    ce:00:dd:6d:f5:cd:a5:75:30:ac:29:1c:d3:a6:de:
                    fd:de:5e:61:f9:db:ad:57:cf:f2:22:e9:0a:52:20:
                    5c:3e:85:5b:65:bb:5d:08:93:cf:79:11:1b:6c:c9:
                    10:34:87:4d:a2:2e:d3:ed:32:a3:c9:1c:cd:69:84:
                    a9:26:80:f8:c3:01:33:a1:f9:87:5e:38:97:ed:25:
                    cb:6e:a8:79:3b:b6:36:22:2e:84:54:12:c1:f7:c2:
                    5b:6b:1a:a4:83:7c:bd:be:75:0a:83:69:5d:ab:81:
                    c2:3f:ed:7b:6c:35:5d:94:ae:89:6a:58:cf:5e:96:
                    66:14:44:5e:15:ec:f2:d3:43:3e:62:99:2c:2e:8e:
                    2d:04:57:3c:52:73:e4:16:87:21:89:0f:a3:5a:6e:
                    96:86:88:f1:52:90:99:a4:30:92:b1:8e:ed:3b:33:
                    6e:20:bf:80:b6:4a:e6:0f:bb:c5:9e:95:c4:92:c0:
                    5a:e3:d7:e1:d5:36:56:25:c2:a8:4a:aa:d0:fc:06:
                    9b:20:19:42:fc:55:43:ce:a7:ca:d6:40:ae:82:de:
                    6d:86:3b:e7:aa:0a:e1:bc:c8:25:8d:85:eb:1f:09:
                    cd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:02:BD:DE:E3:9B:84:6C:48:AD:0A:C0:74:6D:42:52:CE:93:A1:7D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67D96C4EDF4111F0BC98B9A4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.235.0-156.246.254.255

    Signature Algorithm: sha256WithRSAEncryption
         06:51:ce:33:a4:3a:be:5b:97:f3:d7:6c:bd:12:f2:38:ac:25:
         c2:f7:b5:9b:13:c3:6d:2e:4f:46:7e:14:fc:3e:7f:3a:20:08:
         c2:31:07:35:6c:0a:45:fc:7b:53:58:90:90:6a:33:d5:0b:7c:
         74:b6:cf:10:87:f3:fb:71:6b:7c:59:a7:ab:e6:fe:f4:44:30:
         62:80:97:ab:2e:2f:5a:a7:32:fa:c1:66:4e:55:dd:6f:f7:8f:
         0c:a2:f5:b6:fc:ac:20:a5:3e:8f:04:77:b6:ba:57:e2:81:21:
         6c:ce:79:6f:f1:2d:41:ef:02:5d:f7:92:ef:9d:65:f6:c5:00:
         2b:fe:f8:ef:3e:72:78:42:85:4c:bd:19:8e:5e:be:94:9a:17:
         b9:e5:80:3b:cd:6e:79:30:1b:69:4c:2a:ce:a9:76:53:da:f8:
         18:cc:0d:76:48:a9:88:00:6d:b9:7a:8d:53:3d:f2:78:0b:1b:
         63:ea:b5:f5:47:9f:95:a7:55:7b:03:2c:60:76:0f:6c:42:e0:
         df:4d:24:ca:1c:f3:bd:33:bd:e5:dc:66:de:d9:a1:60:47:cc:
         8b:8b:98:dc:4c:94:a5:99:57:55:83:11:bb:8d:62:55:a4:7b:
         51:ba:1e:d3:75:d0:12:2c:d0:6a:ee:45:34:b2:e7:b3:82:a5:
         09:b4:5a:a3
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAZB1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjIyMTQyMDQxWhcNMjYwMTI4MTQyMDQxWjAYMRYw
FAYDVQQDEw02OTQ5NTNiZS1kMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsVML3tT4F6fZcSliQkPMA66RUCXO86D+YIF/d/zOAN1t9c2ldTCsKRzT
pt793l5h+dutV8/yIukKUiBcPoVbZbtdCJPPeREbbMkQNIdNoi7T7TKjyRzNaYSp
JoD4wwEzofmHXjiX7SXLbqh5O7Y2Ii6EVBLB98Jbaxqkg3y9vnUKg2ldq4HCP+17
bDVdlK6JaljPXpZmFEReFezy00M+YpksLo4tBFc8UnPkFochiQ+jWm6WhojxUpCZ
pDCSsY7tOzNuIL+AtkrmD7vFnpXEksBa49fh1TZWJcKoSqrQ/AabIBlC/FVDzqfK
1kCugt5thjvnqgrhvMgljYXrHwnN9wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFM8C
vd7jm4RsSK0KwHRtQlLOk6F9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82N0Q5NkM0RURGNDExMUYwQkM5OEI5QTREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc9usDBACc9v4wDQYJKoZI
hvcNAQELBQADggEBAAZRzjOkOr5bl/PXbL0S8jisJcL3tZsTw20uT0Z+FPw+fzog
CMIxBzVsCkX8e1NYkJBqM9ULfHS2zxCH8/txa3xZp6vm/vREMGKAl6suL1qnMvrB
Zk5V3W/3jwyi9bb8rCClPo8Ed7a6V+KBIWzOeW/xLUHvAl33ku+dZfbFACv++O8+
cnhChUy9GY5evpSaF7nlgDvNbnkwG2lMKs6pdlPa+BjMDXZIqYgAbbl6jVM98ngL
G2PqtfVHn5WnVXsDLGB2D2xC4N9NJMoc870zveXcZt7ZoWBHzIuLmNxMlKWZV1WD
EbuNYlWke1G6HtN10BIs0GruRTSy57OCpQm0WqM=
-----END CERTIFICATE-----
Generated at Tue Dec 30 12:26:59 2025 by rpki-client