This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9654EEB6E01A11F0A371C2F4DAE4EC9C.roa
File:                     9654EEB6E01A11F0A371C2F4DAE4EC9C.roa (raw, json)
Hash identifier:          hh71uM6ZwCQZPsYQVnisvhqrVoPps3svUqDcZcJqVG8=
Subject key identifier:   E6:83:A0:15:E4:8C:6B:3F:F3:2C:10:4E:9C:04:2F:D1:2F:E4:59:00
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0190D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9654EEB6E01A11F0A371C2F4DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 16:15:25 +0000
ROA not before:           Tue 23 Dec 2025 16:15:20 +0000
ROA not after:            Fri 30 Jan 2026 16:15:20 +0000
asID:                     401783
IP address blocks:        156.231.6.0/24 maxlen: 24
                          156.231.8.0/24 maxlen: 24
                          156.231.9.0/24 maxlen: 24
                          156.249.133.0/24 maxlen: 24
                          156.249.162.0/24 maxlen: 24
                          156.249.166.0/24 maxlen: 24
                          156.249.167.0/24 maxlen: 24
                          156.249.170.0/24 maxlen: 24
                          156.249.187.0/24 maxlen: 24
                          156.249.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102617 (0x190d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 16:15:20 2025 GMT
            Not After : Jan 30 16:15:20 2026 GMT
        Subject: CN=694ac01d-89b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:c8:e0:e1:ef:7d:95:f4:59:6a:db:f6:ec:
                    d5:a4:85:94:fa:4b:41:2d:fd:db:ac:22:50:26:ed:
                    54:99:95:bc:d4:5e:69:ec:d5:3c:e5:7a:fa:cb:93:
                    ee:47:9a:8f:45:49:7f:9e:e4:bc:34:36:68:4b:00:
                    15:66:10:78:4a:9e:78:78:20:84:b4:18:6a:ce:bd:
                    0c:86:a2:f6:87:1f:86:c0:d3:b8:84:42:f9:21:e5:
                    9c:45:f4:81:81:db:70:28:db:0a:8e:40:ac:02:bc:
                    8b:1a:fc:72:58:5e:1f:6e:0d:84:b2:00:30:fd:6a:
                    bb:55:54:ca:ad:87:56:99:10:f8:7b:41:b2:9d:95:
                    19:eb:f8:ee:aa:ae:16:26:ba:21:02:ae:3f:f7:e0:
                    bf:b2:da:87:63:4d:46:70:f2:c4:d2:22:7f:14:c7:
                    dd:16:ad:75:f1:04:a6:63:1d:a7:51:a6:b7:7a:1e:
                    2c:4b:6b:96:d2:37:2a:62:d6:05:22:6d:73:c2:e8:
                    71:b1:f5:b7:c4:dd:5b:7e:e4:9e:78:00:9c:82:78:
                    e2:25:8a:5a:7c:cb:8c:80:22:8d:1b:ac:e6:32:d2:
                    61:27:bf:d1:ed:22:64:0c:c9:79:c5:f7:aa:0e:66:
                    2d:c2:9d:08:f5:0d:8d:36:64:d8:3c:8b:6f:47:b3:
                    eb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:83:A0:15:E4:8C:6B:3F:F3:2C:10:4E:9C:04:2F:D1:2F:E4:59:00
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9654EEB6E01A11F0A371C2F4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.6.0/24
                  156.231.8.0/23
                  156.249.133.0/24
                  156.249.162.0/24
                  156.249.166.0/23
                  156.249.170.0/24
                  156.249.187.0/24
                  156.249.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:15:ca:b0:35:04:c8:ce:43:9e:21:a2:5f:09:09:56:76:f6:
         0b:e2:10:85:bb:f5:dd:62:b1:e6:01:ad:b7:3e:41:8d:4e:ea:
         2b:0f:3d:96:c5:39:4f:58:1b:05:11:59:bb:61:74:49:ff:77:
         1b:e1:f6:4e:03:a2:b7:de:39:63:04:df:be:d0:af:bf:a5:eb:
         37:69:1d:8f:be:e8:ab:9b:f5:ae:f5:e4:c2:69:8e:2e:17:a0:
         f2:e5:e6:b3:86:3b:de:4c:94:5f:ae:6d:8d:6b:9f:31:60:eb:
         cb:2d:b6:72:78:08:e0:a9:6d:c1:67:9d:6c:9c:ed:9d:7e:0c:
         28:f2:77:96:a0:ba:e7:99:e6:30:4c:7a:be:ae:0e:b5:6c:bd:
         18:0c:26:fd:e2:fd:49:42:9a:ad:9d:11:d0:43:63:9e:5f:cf:
         5e:e4:41:bc:38:a9:59:4c:eb:28:0b:d3:c2:a2:65:8c:bf:26:
         e5:2f:ed:10:9b:08:e7:d6:25:ff:1e:ed:bb:4d:58:8f:ea:bb:
         4e:01:ec:47:aa:ca:b6:6e:53:79:28:9e:af:6e:57:98:0b:af:
         06:1c:7b:93:b8:70:7b:8b:05:75:b3:e2:d0:3b:1e:43:4e:9c:
         5e:d9:44:59:eb:2c:21:ff:28:23:38:f6:04:6b:11:e6:80:75:
         9f:04:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:37 2025 by rpki-client