This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB8CDCD6E4A311F0890FADEBDAE4EC9C.roa
File:                     DB8CDCD6E4A311F0890FADEBDAE4EC9C.roa (raw, json)
Hash identifier:          iCVDF7ISWYmYzSxauSSOWTuoT6wkER5C8n2oG6ghjW0=
Subject key identifier:   69:32:F7:11:2B:0C:D4:3A:32:88:19:B5:42:AD:C4:16:7F:03:D0:84
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0192C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB8CDCD6E4A311F0890FADEBDAE4EC9C.roa
Signing time:             Mon 29 Dec 2025 10:48:07 +0000
ROA not before:           Mon 29 Dec 2025 10:48:02 +0000
ROA not after:            Fri 29 Dec 2028 10:48:02 +0000
asID:                     17561
IP address blocks:        156.225.80.0/24 maxlen: 24
                          156.225.81.0/24 maxlen: 24
                          156.225.82.0/24 maxlen: 24
                          156.225.83.0/24 maxlen: 24
                          156.225.84.0/24 maxlen: 24
                          156.225.85.0/24 maxlen: 24
                          156.225.86.0/24 maxlen: 24
                          156.225.87.0/24 maxlen: 24
                          156.225.88.0/24 maxlen: 24
                          156.225.89.0/24 maxlen: 24
                          156.225.90.0/24 maxlen: 24
                          156.225.91.0/24 maxlen: 24
                          156.225.92.0/24 maxlen: 24
                          156.225.93.0/24 maxlen: 24
                          156.225.94.0/24 maxlen: 24
                          156.225.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103110 (0x192c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 29 10:48:02 2025 GMT
            Not After : Dec 29 10:48:02 2028 GMT
        Subject: CN=69525c66-19f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:6f:33:70:d7:8b:2d:e5:58:60:6c:57:db:
                    d2:cb:ca:d0:98:2f:4c:2d:57:b1:72:d4:14:cf:ee:
                    a1:23:81:14:0d:46:59:30:05:dc:a4:8e:66:d8:7b:
                    70:32:2c:a3:de:0c:bb:60:dc:80:75:83:cb:af:ee:
                    ce:c4:53:82:22:bc:db:c2:99:b2:df:1b:ae:c5:6e:
                    54:27:03:b6:b5:84:e5:83:75:94:c1:14:08:5b:50:
                    8b:7a:17:71:95:57:84:e5:13:b6:a8:2b:77:7c:e4:
                    60:d3:ae:ee:a7:2f:87:bd:fc:1a:61:77:94:14:30:
                    ee:b6:47:dc:f6:ad:f7:6d:d6:36:35:a2:0b:5e:fb:
                    9f:25:09:06:ef:e8:b1:5e:33:d1:ee:b2:25:5c:61:
                    29:43:bf:ca:ef:83:d8:49:57:d0:5f:e3:ff:ae:2f:
                    74:b5:11:21:66:2a:3e:bd:e7:65:da:f3:2b:0e:56:
                    0e:13:ae:73:a5:50:2e:95:0a:00:44:99:d1:5d:e9:
                    e1:06:33:ee:b3:82:af:a9:e5:d0:e6:7c:67:ba:9f:
                    1f:cb:3d:d2:49:ec:3d:35:c1:37:96:2d:2c:47:64:
                    c6:ce:e3:b0:1e:3d:09:63:21:d0:39:6c:5a:06:78:
                    8d:2e:22:13:be:10:c6:b0:42:a4:4e:84:5d:8d:84:
                    75:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:32:F7:11:2B:0C:D4:3A:32:88:19:B5:42:AD:C4:16:7F:03:D0:84
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB8CDCD6E4A311F0890FADEBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:2e:d9:db:b1:21:e9:ac:2d:b5:55:d2:fe:10:15:a7:16:e6:
         f6:2f:d1:01:f5:cd:bf:4c:ec:0a:0c:d3:47:d9:69:d9:1a:af:
         fb:47:b6:19:5f:13:14:d9:c4:64:80:8c:bf:66:be:ed:92:4a:
         9c:e4:e9:52:48:d6:48:3b:ac:17:52:1c:c4:00:ea:5d:97:42:
         23:2c:e9:9e:ad:cd:a4:73:9d:f3:be:4a:3a:48:79:65:c2:71:
         ad:7a:9b:06:20:c1:03:54:90:36:d4:98:bf:90:fd:f2:24:58:
         c0:0b:e4:c7:df:b6:39:41:06:46:2b:1f:bc:87:bb:0e:e8:c7:
         1f:04:1d:41:11:33:bb:4c:1e:35:1a:4d:08:8d:87:19:16:25:
         0d:b7:17:0e:28:8a:f4:70:9e:f7:c7:00:79:ba:9b:2a:e9:70:
         ac:a8:1a:12:e2:ad:92:b2:10:47:99:d5:40:f6:a1:88:60:fb:
         cb:31:ec:2e:a1:e1:6d:e6:93:e4:04:f6:39:47:76:d0:dc:e6:
         dc:3c:f9:2d:9c:76:58:03:06:e9:5f:ee:7b:85:6b:7e:04:54:
         fb:19:09:63:a0:8d:a8:5a:29:7f:a5:01:8b:55:c6:c8:90:35:
         ab:40:e9:bb:24:e0:b6:48:d9:fa:1f:d0:4d:ee:d1:e7:7f:37:
         03:ed:3c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:10 2025 by rpki-client