This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE8F8F36D9BC11F0B4F32287DAE4EC9C.roa
File:                     AE8F8F36D9BC11F0B4F32287DAE4EC9C.roa (raw, json)
Hash identifier:          ZiR5SP3u9MC/k3IBXCHyZVkTduhFOiNzZcPu7yGrTxQ=
Subject key identifier:   56:06:9E:9C:C5:BB:F1:AB:59:BA:7E:8F:B4:94:F8:F3:F6:8B:34:8D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018E58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE8F8F36D9BC11F0B4F32287DAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 13:48:06 +0000
ROA not before:           Mon 15 Dec 2025 13:48:01 +0000
ROA not after:            Tue 03 Mar 2026 13:48:01 +0000
asID:                     399077
IP address blocks:        156.240.245.0/24 maxlen: 24
                          156.240.246.0/24 maxlen: 24
                          156.240.247.0/24 maxlen: 24
                          156.240.248.0/24 maxlen: 24
                          156.240.249.0/24 maxlen: 24
                          156.240.250.0/24 maxlen: 24
                          156.240.251.0/24 maxlen: 24
                          156.240.252.0/24 maxlen: 24
                          156.240.253.0/24 maxlen: 24
                          156.240.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101976 (0x18e58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 15 13:48:01 2025 GMT
            Not After : Mar  3 13:48:01 2026 GMT
        Subject: CN=69401196-aa2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6f:b8:53:01:8d:b3:87:f3:51:c9:b9:dd:7d:
                    1e:90:44:8b:dc:c0:a3:37:c7:c5:e9:12:46:ef:e3:
                    6f:b8:0f:ed:7d:51:af:ea:2f:c3:8e:a3:a0:7b:45:
                    db:ae:f3:0d:63:5e:ed:b1:2e:22:bb:9a:51:ff:a4:
                    09:94:c6:b4:2f:fd:a6:90:2b:4b:78:7e:a8:71:34:
                    16:9c:a1:91:54:23:0e:a9:2e:6a:69:61:7d:e1:e8:
                    83:b9:a0:69:d4:1e:9d:2d:fb:1f:9f:c6:7d:5b:7d:
                    f5:e8:5f:0e:f2:b3:ab:f2:66:9f:ac:b0:00:0d:5c:
                    27:ac:d4:63:94:41:28:6a:df:89:85:b1:13:10:35:
                    00:46:41:55:52:e2:19:5f:91:7e:f1:59:3f:ee:e3:
                    60:b9:35:2e:98:b4:fa:3d:16:c6:ab:18:df:8c:e7:
                    20:f7:b2:ae:40:0d:80:9a:70:31:29:93:09:68:2e:
                    51:50:05:0c:df:0e:e6:0d:d6:a1:5b:83:cb:3a:f9:
                    2b:65:35:56:09:12:f2:bb:51:ba:c2:85:17:5b:a5:
                    28:79:b9:97:0e:6e:36:53:42:dc:32:be:3e:6c:96:
                    bb:f3:56:11:38:1f:cb:6c:3d:c6:0b:3a:91:0b:36:
                    08:78:5d:3f:1e:cd:43:74:03:e6:fc:df:90:fc:60:
                    9c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:06:9E:9C:C5:BB:F1:AB:59:BA:7E:8F:B4:94:F8:F3:F6:8B:34:8D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE8F8F36D9BC11F0B4F32287DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.245.0-156.240.254.255

    Signature Algorithm: sha256WithRSAEncryption
         1e:1c:e6:47:00:da:23:df:f1:87:e8:f2:1c:06:18:ff:80:bf:
         1d:85:66:1e:6a:64:c2:90:2b:22:60:fc:ad:bb:55:bb:0f:ea:
         a0:a7:3f:ce:1e:ba:35:13:32:ba:3b:c9:d3:f2:c9:d0:aa:78:
         2d:59:e5:c9:04:d2:f5:f9:f8:9f:a5:f2:77:05:ee:c3:27:17:
         6c:6b:84:bf:bc:dd:5b:65:e5:40:1f:a8:f2:32:c5:ed:2f:c7:
         aa:23:fa:7e:5a:6c:1d:ec:58:fa:05:90:eb:26:0f:77:37:2e:
         07:47:3a:c0:23:97:16:92:ec:93:d1:ed:ae:c9:39:f2:49:9d:
         66:45:41:b0:62:ea:a6:23:01:6b:ab:02:77:c5:74:54:9e:ba:
         a5:34:1d:bb:93:d2:72:c3:c6:9e:12:9d:d9:76:b5:be:c2:9d:
         11:39:1f:0a:7b:5a:93:eb:62:ee:9b:f5:ee:51:ab:f3:60:54:
         33:d0:3c:63:19:23:dd:9f:9e:d2:c6:c9:0c:76:39:17:41:78:
         cb:9a:8e:9d:3a:89:9d:f0:37:9e:bd:a6:37:dc:fe:c3:11:9b:
         b3:35:64:fa:fa:9c:80:89:52:31:2f:ff:5d:4b:fe:3f:14:68:
         6f:3c:c8:d4:dd:3f:22:63:90:b7:e8:44:d9:48:58:06:58:92:
         6e:ba:b5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:42:13 2025 by rpki-client