This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C67B70CD12D11F0841EA8DCDAE4EC9C.roa
File:                     5C67B70CD12D11F0841EA8DCDAE4EC9C.roa (raw, json)
Hash identifier:          xy8vkJ9K3OMwyzW0JRZPLDEhP3w87iNDcx7NVIYkNBQ=
Subject key identifier:   62:EF:6B:51:67:10:C9:2D:05:59:2C:A9:64:72:1C:E7:86:83:DA:01
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018C4D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C67B70CD12D11F0841EA8DCDAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 16:22:01 +0000
ROA not before:           Thu 04 Dec 2025 16:21:55 +0000
ROA not after:            Sat 07 Mar 2026 16:21:55 +0000
asID:                     136970
IP address blocks:        156.236.64.0/24 maxlen: 24
                          156.236.65.0/24 maxlen: 24
                          156.236.67.0/24 maxlen: 24
                          156.236.68.0/24 maxlen: 24
                          156.236.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101453 (0x18c4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  4 16:21:55 2025 GMT
            Not After : Mar  7 16:21:55 2026 GMT
        Subject: CN=6931b528-88c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1d:6c:7b:84:2d:ed:73:0f:f4:7c:ac:05:eb:
                    05:4d:c2:c9:af:4c:a9:31:bb:fa:38:7a:9b:de:59:
                    f0:52:61:73:78:ca:74:c4:f1:c8:cc:de:93:69:a1:
                    ed:2b:b4:dc:c6:b8:de:0e:ea:d1:d1:9f:30:e1:45:
                    18:82:0d:55:e2:15:53:f4:1c:4a:19:97:12:ec:dc:
                    d8:c2:e5:8e:6c:8a:ae:46:1f:b3:f3:6b:4c:9f:da:
                    37:b7:0a:51:7f:07:2e:df:6e:b4:7d:8c:6a:47:c2:
                    40:3e:72:b3:43:36:10:7c:ed:cb:5c:53:9b:ac:17:
                    d1:fd:17:8c:d6:83:4f:c8:98:5e:e6:29:f3:bb:03:
                    4b:e5:12:da:66:5b:97:4c:f1:9a:c5:ee:62:05:98:
                    ad:40:b9:c6:ed:bf:ba:0f:66:96:c6:d2:e1:0f:c8:
                    ed:64:43:17:f6:ae:9e:10:37:cf:0c:57:b0:26:7f:
                    f8:f1:df:2a:9b:cb:b2:64:60:05:2a:fb:37:78:71:
                    d9:09:a6:12:25:91:5a:cf:bf:4b:75:1f:5d:ed:5a:
                    49:19:25:73:1c:40:17:25:f5:16:71:bf:f8:12:cb:
                    0a:ac:71:fe:12:83:08:aa:a3:f0:dd:0d:49:b8:70:
                    e8:56:4e:40:f1:d6:4d:d9:b8:52:7a:18:50:f8:22:
                    04:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EF:6B:51:67:10:C9:2D:05:59:2C:A9:64:72:1C:E7:86:83:DA:01
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C67B70CD12D11F0841EA8DCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.64.0/23
                  156.236.67.0-156.236.69.255

    Signature Algorithm: sha256WithRSAEncryption
         8f:0a:03:6b:95:68:a0:0b:8d:af:76:b6:40:22:aa:83:89:1f:
         82:7b:0e:3f:c7:1d:82:a0:0f:f0:0d:b1:3c:73:04:66:35:fc:
         11:de:d6:bd:a2:60:e4:28:c9:e4:b5:e8:54:9b:0f:d2:24:0e:
         f1:a8:82:ee:f3:68:17:95:42:4a:23:0d:2a:b3:db:fe:3d:20:
         34:6a:1f:8f:cc:9e:77:db:f9:a9:22:6b:8c:f5:7a:64:14:45:
         e0:b9:7f:1d:fd:08:4c:e1:37:be:b6:0d:49:2d:87:92:fa:95:
         aa:57:27:4e:b7:2e:5a:2a:00:d6:d6:91:29:ba:a7:f3:4a:4b:
         0a:fc:cd:d1:48:2c:64:7e:6a:37:4a:db:1a:4d:08:3a:5b:2f:
         95:c9:f0:d1:fa:1f:a9:79:38:6b:da:b9:89:7f:79:f2:2f:70:
         fa:dc:b9:38:99:5a:51:e2:70:a1:4e:74:8f:45:ec:62:20:84:
         61:88:ca:46:b3:03:45:2c:f6:fe:7f:98:4e:0e:ca:52:23:86:
         23:95:7a:f6:9d:d1:37:6c:a7:36:e4:94:8a:c9:71:2f:8a:39:
         d3:ce:8f:28:f1:54:4b:31:9e:f7:72:26:f6:35:07:ca:fc:71:
         4a:95:76:81:d2:ce:34:8d:3a:17:c2:83:25:14:d8:fb:a1:1f:
         28:29:84:80
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAYxNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjA0MTYyMTU1WhcNMjYwMzA3MTYyMTU1WjAYMRYw
FAYDVQQDEw02OTMxYjUyOC04OGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnh1se4Qt7XMP9HysBesFTcLJr0ypMbv6OHqb3lnwUmFzeMp0xPHIzN6T
aaHtK7TcxrjeDurR0Z8w4UUYgg1V4hVT9BxKGZcS7NzYwuWObIquRh+z82tMn9o3
twpRfwcu3260fYxqR8JAPnKzQzYQfO3LXFObrBfR/ReM1oNPyJhe5inzuwNL5RLa
ZluXTPGaxe5iBZitQLnG7b+6D2aWxtLhD8jtZEMX9q6eEDfPDFewJn/48d8qm8uy
ZGAFKvs3eHHZCaYSJZFaz79LdR9d7VpJGSVzHEAXJfUWcb/4EssKrHH+EoMIqqPw
3Q1JuHDoVk5A8dZN2bhSehhQ+CIEMQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGLv
a1FnEMktBVksqWRyHOeGg9oBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QzY3QjcwQ0QxMkQxMUYwODQxRUE4RENEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBnOxAMAwDBACc7EMDBAGc7EQw
DQYJKoZIhvcNAQELBQADggEBAI8KA2uVaKALja92tkAiqoOJH4J7Dj/HHYKgD/AN
sTxzBGY1/BHe1r2iYOQoyeS16FSbD9IkDvGogu7zaBeVQkojDSqz2/49IDRqH4/M
nnfb+akia4z1emQUReC5fx39CEzhN762DUkth5L6lapXJ063LloqANbWkSm6p/NK
Swr8zdFILGR+ajdK2xpNCDpbL5XJ8NH6H6l5OGvauYl/efIvcPrcuTiZWlHicKFO
dI9F7GIghGGIykazA0Us9v5/mE4OylIjhiOVevad0TdspzbklIrJcS+KOdPOjyjx
VEsxnvdyJvY1B8r8cUqVdoHSzjSNOhfCgyUU2PuhHygphIA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:14:52 2025 by rpki-client