This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAF597B4E0CC11F0A05F57D9DAE4EC9C.roa
File:                     AAF597B4E0CC11F0A05F57D9DAE4EC9C.roa (raw, json)
Hash identifier:          A7fYxlYeDM1g9aQbDeO9YD4Nj2DxVy2lJ51wXQYx9/g=
Subject key identifier:   71:44:A4:58:45:83:3B:90:E2:5B:CE:E2:DE:B7:9F:F6:CA:62:1F:72
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019186
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAF597B4E0CC11F0A05F57D9DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 13:30:10 +0000
ROA not before:           Wed 24 Dec 2025 13:30:05 +0000
ROA not after:            Mon 05 Jan 2026 13:30:05 +0000
asID:                     138915
IP address blocks:        156.225.117.0/24 maxlen: 24
                          156.225.126.0/24 maxlen: 24
                          156.227.193.0/24 maxlen: 24
                          156.227.199.0/24 maxlen: 24
                          156.229.51.0/24 maxlen: 24
                          156.229.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102790 (0x19186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 13:30:05 2025 GMT
            Not After : Jan  5 13:30:05 2026 GMT
        Subject: CN=694beae2-5c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1e:2c:fd:75:8d:f5:52:4f:5f:97:fa:3d:a3:
                    98:09:14:39:6c:db:e7:e5:ed:a3:73:5e:8e:b1:7c:
                    2e:ed:32:38:fc:c2:51:3f:7f:65:d4:82:83:9f:98:
                    9b:da:2f:ae:7f:1c:f4:f7:1e:a7:99:0b:d0:f3:b4:
                    4c:29:61:e0:bf:bf:37:22:ea:1e:ed:1d:7a:7e:a2:
                    16:50:a6:a5:47:58:ff:62:a9:44:0b:81:d5:69:5f:
                    00:da:d1:22:1e:26:7b:47:6e:6d:f3:db:62:3c:9c:
                    56:44:0b:50:79:4a:d8:fb:f5:0b:d3:36:4d:2c:b8:
                    94:d4:25:e1:d9:c7:75:b0:1d:8b:81:4d:48:0d:f9:
                    ac:41:08:b5:0a:dc:6b:07:cd:a8:a8:79:b1:79:d2:
                    5e:32:b4:5a:6b:35:57:e7:e5:e7:8b:be:0a:97:a4:
                    99:15:7f:b8:3e:c4:ed:93:64:11:14:d1:4d:09:2b:
                    0a:21:cf:49:a4:8c:32:f3:c7:b8:57:61:09:05:c6:
                    8f:95:ad:40:af:2a:52:84:6b:c7:bc:ac:3c:5f:1b:
                    b5:e6:60:29:f4:fe:96:8f:03:2c:b4:67:30:c1:e8:
                    4e:12:cf:8d:51:40:91:86:4f:cb:e7:7f:e4:ac:ab:
                    77:61:5f:37:e1:d8:7a:9d:fd:7f:05:17:7b:24:ca:
                    70:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:44:A4:58:45:83:3B:90:E2:5B:CE:E2:DE:B7:9F:F6:CA:62:1F:72
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAF597B4E0CC11F0A05F57D9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.117.0/24
                  156.225.126.0/24
                  156.227.193.0/24
                  156.227.199.0/24
                  156.229.51.0/24
                  156.229.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c3:13:19:6c:03:e2:76:da:a9:e0:5b:39:df:8d:0f:62:cd:
         c9:64:8e:6f:6c:83:ac:53:21:f3:20:d2:8f:95:48:29:c8:93:
         4e:09:d5:1f:3b:f6:cc:c2:cc:47:b7:5b:16:d3:7e:a1:fc:12:
         5c:bd:dc:e4:00:95:a4:30:70:60:99:39:73:6a:ca:d6:33:70:
         e2:32:51:3b:ce:ad:c5:aa:4d:c4:8e:1c:e0:38:e8:07:dd:92:
         34:ea:96:f1:1d:27:43:8a:5f:af:fb:74:02:8d:fe:ef:2f:4d:
         5f:fb:d9:f6:86:3e:67:97:3b:94:e2:a6:e2:cd:16:48:61:70:
         97:81:81:2e:3f:d8:3e:3c:75:bf:04:00:8b:15:35:a3:b5:9c:
         ea:ec:1a:09:eb:e5:f3:7d:70:2f:47:4c:42:50:0a:9e:9b:08:
         ae:ad:37:38:81:98:0c:2c:5f:5c:6d:46:4c:ae:2f:36:fe:fa:
         70:2d:66:1b:cf:12:c3:b8:fb:15:22:1d:31:d4:7e:76:b3:2f:
         46:58:62:85:a1:ef:ea:36:8b:ca:c5:1c:98:9d:d2:8d:4c:3e:
         d7:51:44:52:45:ca:ab:04:74:0e:3c:e9:38:df:8a:97:93:43:
         29:b0:52:f3:32:e9:cf:87:42:2c:3a:91:94:e8:d8:5b:e3:10:
         98:2d:cd:9e
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIDAZGGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjI0MTMzMDA1WhcNMjYwMTA1MTMzMDA1WjAYMRYw
FAYDVQQDEw02OTRiZWFlMi01YzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyR4s/XWN9VJPX5f6PaOYCRQ5bNvn5e2jc16OsXwu7TI4/MJRP39l1IKD
n5ib2i+ufxz09x6nmQvQ87RMKWHgv783Iuoe7R16fqIWUKalR1j/YqlEC4HVaV8A
2tEiHiZ7R25t89tiPJxWRAtQeUrY+/UL0zZNLLiU1CXh2cd1sB2LgU1IDfmsQQi1
CtxrB82oqHmxedJeMrRaazVX5+Xni74Kl6SZFX+4PsTtk2QRFNFNCSsKIc9JpIwy
88e4V2EJBcaPla1ArypShGvHvKw8Xxu15mAp9P6WjwMstGcwwehOEs+NUUCRhk/L
53/krKt3YV834dh6nf1/BRd7JMpwDQIDAQABo4ICwDCCArwwHQYDVR0OBBYEFHFE
pFhFgzuQ4lvO4t63n/bKYh9yMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQUY1OTdCNEUwQ0MxMUYwQTA1RjU3RDlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAnOF1AwQAnOF+AwQAnOPBAwQA
nOPHAwQAnOUzAwQAnOVAMA0GCSqGSIb3DQEBCwUAA4IBAQBDwxMZbAPidtqp4Fs5
340PYs3JZI5vbIOsUyHzINKPlUgpyJNOCdUfO/bMwsxHt1sW036h/BJcvdzkAJWk
MHBgmTlzasrWM3DiMlE7zq3Fqk3EjhzgOOgH3ZI06pbxHSdDil+v+3QCjf7vL01f
+9n2hj5nlzuU4qbizRZIYXCXgYEuP9g+PHW/BACLFTWjtZzq7BoJ6+XzfXAvR0xC
UAqemwiurTc4gZgMLF9cbUZMri82/vpwLWYbzxLDuPsVIh0x1H52sy9GWGKFoe/q
NovKxRyYndKNTD7XUURSRcqrBHQOPOk434qXk0MpsFLzMunPh0IsOpGU6Nhb4xCY
Lc2e
-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:40 2025 by rpki-client