This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E22DDD72D9BA11F0A5364C7BDAE4EC9C.roa
File:                     E22DDD72D9BA11F0A5364C7BDAE4EC9C.roa (raw, json)
Hash identifier:          L+CoWcfNE4IrjHSkuXvUfORk2nllfp0TGHOLPZHx/Vc=
Subject key identifier:   07:D4:52:24:E8:5F:92:A3:BA:C8:51:C3:94:5B:95:8D:8D:E0:12:5A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018E54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E22DDD72D9BA11F0A5364C7BDAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 13:35:13 +0000
ROA not before:           Mon 15 Dec 2025 13:35:09 +0000
ROA not after:            Tue 03 Mar 2026 13:35:09 +0000
asID:                     399077
IP address blocks:        156.251.10.0/24 maxlen: 24
                          156.251.11.0/24 maxlen: 24
                          156.251.12.0/24 maxlen: 24
                          156.251.13.0/24 maxlen: 24
                          156.251.14.0/24 maxlen: 24
                          156.251.15.0/24 maxlen: 24
                          156.251.16.0/24 maxlen: 24
                          156.251.17.0/24 maxlen: 24
                          156.251.18.0/24 maxlen: 24
                          156.251.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101972 (0x18e54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 15 13:35:09 2025 GMT
            Not After : Mar  3 13:35:09 2026 GMT
        Subject: CN=69400e91-66c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:3d:ef:0c:3d:92:d6:dc:68:32:28:96:15:
                    f9:22:c8:bd:7c:21:4e:f1:5a:95:43:2b:0f:22:fa:
                    b3:5f:5b:3d:6b:ad:15:3b:8e:53:45:da:30:01:cf:
                    c5:3f:9d:74:fc:57:83:85:3f:8b:84:8a:ad:7f:f2:
                    85:dc:7b:ba:25:ef:cd:b8:90:b3:f3:60:d1:13:9c:
                    6c:c6:e6:58:33:6d:da:b4:50:41:e9:ef:f6:2a:08:
                    9d:f3:92:67:c1:a6:d4:96:ed:de:5e:3b:ab:3f:be:
                    cc:5d:3d:7f:cb:d9:df:5f:2e:78:20:9f:7f:ee:f4:
                    14:4c:0b:5f:4b:f2:b5:82:4e:8e:0a:ce:b0:72:49:
                    0f:fe:0e:01:9e:54:36:d1:fd:e3:2a:26:14:a5:14:
                    6a:c5:3a:e6:64:9a:58:5d:ac:58:48:9b:03:6e:f7:
                    dc:f3:e4:ff:25:d0:4a:34:4c:ea:01:26:50:de:b2:
                    9c:1d:b1:37:1b:4a:3b:ff:23:52:fc:28:b5:88:0b:
                    dc:e4:41:81:00:19:c2:51:7a:f7:db:9c:22:91:3d:
                    bb:36:5f:c7:7f:c7:fd:4c:cd:67:22:d0:e7:6f:1c:
                    dc:0e:17:b6:95:e4:42:bb:74:d5:23:eb:0f:5d:55:
                    6d:89:3a:97:2d:06:b6:45:28:b1:57:d2:a1:9c:56:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D4:52:24:E8:5F:92:A3:BA:C8:51:C3:94:5B:95:8D:8D:E0:12:5A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E22DDD72D9BA11F0A5364C7BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.10.0-156.251.19.255

    Signature Algorithm: sha256WithRSAEncryption
         b9:f8:d2:5b:ca:0d:f9:9e:b4:30:a7:e4:2b:04:9b:e6:37:47:
         60:06:69:6c:ee:44:94:67:f5:68:2a:a0:f1:df:ad:48:65:07:
         25:f8:94:7e:b6:c1:f9:45:7f:39:3e:0e:fa:e1:ca:bc:59:b0:
         d8:f1:c8:bd:f2:32:b5:d4:cd:36:9f:fc:ed:f1:68:37:be:45:
         30:63:ec:ce:31:5b:dd:14:dc:f3:80:aa:b4:6c:b8:28:8b:f0:
         07:8b:16:b9:6e:b5:a5:03:b3:fc:e5:ee:99:1d:23:f9:93:1c:
         16:b2:50:4d:e4:97:3a:76:03:a4:4d:46:0e:08:63:b2:7e:c6:
         0e:86:ff:fa:59:a7:50:7a:53:2c:dc:e1:0e:b4:de:b9:6c:8b:
         47:18:be:c5:75:7f:6f:0c:61:ba:33:60:a3:95:44:78:ae:88:
         43:5f:31:a4:65:c6:6c:94:8f:99:ec:39:9c:e9:bf:18:d1:14:
         e2:04:5d:46:ae:66:b7:ed:5e:b7:04:ac:c2:a6:66:25:6e:90:
         db:60:2d:9b:c6:b1:3e:9f:5f:81:2d:0c:26:8a:f9:05:68:75:
         81:e3:90:1e:a1:39:c4:1f:17:d9:b6:8b:69:83:96:49:ae:97:
         89:19:60:35:d6:a9:6b:9d:64:07:4e:b5:b4:22:b6:5e:50:02:
         6b:50:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:33:47 2025 by rpki-client