This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DA9C15CE17711F0AD4D6492DAE4EC9C.roa
File:                     8DA9C15CE17711F0AD4D6492DAE4EC9C.roa (raw, json)
Hash identifier:          g0rF3kPRoaiV6l2Y9KC3+hE/To6n4pVsYSSzGcQ6nxA=
Subject key identifier:   9C:C3:6D:27:99:89:D4:03:19:67:95:02:FD:57:C2:CB:4F:3B:6E:28
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019203
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DA9C15CE17711F0AD4D6492DAE4EC9C.roa
Signing time:             Thu 25 Dec 2025 09:53:25 +0000
ROA not before:           Thu 25 Dec 2025 09:53:19 +0000
ROA not after:            Sun 01 Feb 2026 09:53:19 +0000
asID:                     395793
IP address blocks:        156.230.16.0/22 maxlen: 24
                          156.230.52.0/22 maxlen: 24
                          156.230.134.0/23 maxlen: 24
                          156.232.2.0/23 maxlen: 24
                          156.232.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102915 (0x19203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 25 09:53:19 2025 GMT
            Not After : Feb  1 09:53:19 2026 GMT
        Subject: CN=694d0994-54f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:70:eb:1f:b8:fa:be:0b:35:92:25:f2:1c:7c:
                    ab:48:97:4c:31:09:e9:0f:bd:b1:ef:d4:3a:03:75:
                    34:a4:2a:d9:00:37:37:d7:c9:53:e2:e6:ae:55:68:
                    3e:a2:28:b9:03:f7:b2:a8:63:ed:04:f7:d5:c3:ea:
                    f9:4c:0b:bd:07:67:97:3a:e4:ad:b7:75:72:c6:f9:
                    b3:33:5e:ad:8e:0e:7a:1a:af:75:b0:22:fd:41:e9:
                    ae:59:8a:38:a2:4b:d2:48:08:b7:fe:34:0f:08:00:
                    e6:96:97:66:3f:8a:33:62:2b:40:48:33:a0:68:0f:
                    9c:70:96:84:1d:50:3f:db:46:2a:f0:15:15:3c:1e:
                    4f:09:f3:6c:ae:ed:fc:8c:97:f7:f4:c3:d4:df:c9:
                    35:94:bc:e7:8b:4c:f8:91:cd:e7:b3:e1:51:8c:d6:
                    9f:a3:17:1b:84:0e:5b:84:b1:4d:d9:06:f9:03:ae:
                    95:8f:cb:3a:78:3f:7e:1b:75:33:96:bd:9f:af:a7:
                    dd:d5:3b:36:54:b0:85:e0:7f:cf:a8:c1:8b:75:a1:
                    02:8a:ea:2e:5d:f4:a2:87:f4:11:a4:80:31:14:00:
                    28:2c:f2:69:1b:12:ba:83:f4:a2:21:a2:2c:51:f7:
                    c9:48:1f:04:eb:2e:b0:aa:82:0b:8a:9e:31:7f:9b:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C3:6D:27:99:89:D4:03:19:67:95:02:FD:57:C2:CB:4F:3B:6E:28
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DA9C15CE17711F0AD4D6492DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.16.0/22
                  156.230.52.0/22
                  156.230.134.0/23
                  156.232.2.0/23
                  156.232.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:cf:4d:40:02:6d:ba:85:fc:b0:d2:f0:58:48:d4:2a:5f:af:
         7c:70:aa:16:ab:ba:e7:dc:d0:4f:ec:3d:98:ff:7c:37:c9:56:
         26:bf:9d:1e:94:b6:7c:09:c7:91:8a:f8:2b:ed:ba:bb:a0:83:
         67:2a:18:2e:07:e5:a9:90:ca:9f:fe:2d:05:3c:3b:f8:30:e9:
         a1:d1:cb:5f:91:9e:47:3f:60:a2:49:e4:86:4e:c9:0f:c6:e5:
         c2:8c:b2:95:a1:be:ca:7b:c3:59:46:50:d2:a7:42:ec:25:78:
         12:c8:70:80:94:32:e4:2e:e4:51:c2:0e:c4:e9:55:3a:f8:dc:
         d4:ac:db:0b:6b:ee:dc:d1:02:b1:36:23:cb:fd:2c:7c:7e:27:
         a9:5a:e2:db:79:3f:4d:c4:bc:eb:e2:3f:23:7a:7b:1c:84:2b:
         65:f7:15:4f:83:5c:43:14:73:58:60:fc:56:13:4f:f8:7b:87:
         7a:2a:ad:d9:8d:08:90:bf:d1:75:a9:38:ce:f1:6f:82:f5:00:
         db:c1:e6:35:2c:bc:08:92:e2:c7:fd:12:c0:bf:24:18:c6:8c:
         75:26:4b:0a:9e:6b:24:c6:6f:f1:45:b3:8f:b7:3c:28:e7:78:
         2e:a2:52:12:ed:6a:7b:4b:4f:c1:5c:e4:7a:20:8d:75:c7:6d:
         16:57:b2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:26:59 2025 by rpki-client