This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7176C226F7D111F0A7781AB9DAE4EC9C.roa
File:                     7176C226F7D111F0A7781AB9DAE4EC9C.roa (raw, json)
Hash identifier:          xyIryEktq+GEx50GJKpDuEhQU7fIpOztKwnu5rtrUbw=
Subject key identifier:   89:95:82:B4:96:8A:76:C2:D3:98:8B:8A:CF:3F:3D:DB:46:E1:A7:D2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01988B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7176C226F7D111F0A7781AB9DAE4EC9C.roa
Signing time:             Thu 22 Jan 2026 20:32:18 +0000
ROA not before:           Thu 22 Jan 2026 20:32:11 +0000
ROA not after:            Mon 22 Jan 2029 20:32:11 +0000
asID:                     17561
IP address blocks:        156.247.200.0/24 maxlen: 24
                          156.247.201.0/24 maxlen: 24
                          156.247.202.0/24 maxlen: 24
                          156.247.203.0/24 maxlen: 24
                          156.247.204.0/24 maxlen: 24
                          156.247.205.0/24 maxlen: 24
                          156.247.206.0/24 maxlen: 24
                          156.247.207.0/24 maxlen: 24
                          156.247.208.0/24 maxlen: 24
                          156.247.209.0/24 maxlen: 24
                          156.247.210.0/24 maxlen: 24
                          156.247.211.0/24 maxlen: 24
                          156.247.212.0/24 maxlen: 24
                          156.247.213.0/24 maxlen: 24
                          156.247.214.0/24 maxlen: 24
                          156.247.215.0/24 maxlen: 24
                          156.247.216.0/24 maxlen: 24
                          156.247.217.0/24 maxlen: 24
                          156.247.218.0/24 maxlen: 24
                          156.247.219.0/24 maxlen: 24
                          156.247.220.0/24 maxlen: 24
                          156.247.221.0/24 maxlen: 24
                          156.247.222.0/24 maxlen: 24
                          156.247.223.0/24 maxlen: 24
                          156.247.224.0/24 maxlen: 24
                          156.247.225.0/24 maxlen: 24
                          156.247.226.0/24 maxlen: 24
                          156.247.227.0/24 maxlen: 24
                          156.247.228.0/24 maxlen: 24
                          156.247.229.0/24 maxlen: 24
                          156.247.230.0/24 maxlen: 24
                          156.247.231.0/24 maxlen: 24
                          156.247.232.0/24 maxlen: 24
                          156.247.233.0/24 maxlen: 24
                          156.247.234.0/24 maxlen: 24
                          156.247.235.0/24 maxlen: 24
                          156.247.236.0/24 maxlen: 24
                          156.247.237.0/24 maxlen: 24
                          156.247.238.0/24 maxlen: 24
                          156.247.239.0/24 maxlen: 24
                          156.247.240.0/24 maxlen: 24
                          156.247.241.0/24 maxlen: 24
                          156.247.242.0/24 maxlen: 24
                          156.247.243.0/24 maxlen: 24
                          156.247.244.0/24 maxlen: 24
                          156.247.245.0/24 maxlen: 24
                          156.247.246.0/24 maxlen: 24
                          156.247.247.0/24 maxlen: 24
                          156.247.248.0/24 maxlen: 24
                          156.247.249.0/24 maxlen: 24
                          156.247.250.0/24 maxlen: 24
                          156.247.251.0/24 maxlen: 24
                          156.247.252.0/24 maxlen: 24
                          156.247.253.0/24 maxlen: 24
                          156.247.254.0/24 maxlen: 24
                          156.247.255.0/24 maxlen: 24
                          156.255.228.0/24 maxlen: 24
                          156.255.229.0/24 maxlen: 24
                          156.255.230.0/24 maxlen: 24
                          156.255.231.0/24 maxlen: 24
                          156.255.232.0/24 maxlen: 24
                          156.255.233.0/24 maxlen: 24
                          156.255.234.0/24 maxlen: 24
                          156.255.235.0/24 maxlen: 24
                          156.255.236.0/24 maxlen: 24
                          156.255.237.0/24 maxlen: 24
                          156.255.238.0/24 maxlen: 24
                          156.255.239.0/24 maxlen: 24
                          156.255.240.0/24 maxlen: 24
                          156.255.241.0/24 maxlen: 24
                          156.255.242.0/24 maxlen: 24
                          156.255.243.0/24 maxlen: 24
                          156.255.244.0/24 maxlen: 24
                          156.255.245.0/24 maxlen: 24
                          156.255.246.0/24 maxlen: 24
                          156.255.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104587 (0x1988b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 22 20:32:11 2026 GMT
            Not After : Jan 22 20:32:11 2029 GMT
        Subject: CN=69728951-eada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:26:bc:9e:15:30:06:f7:a9:1c:c3:08:ca:64:
                    f2:cc:d2:fd:67:55:0c:ef:94:58:94:2c:34:05:c2:
                    51:63:4c:4c:0e:01:db:80:af:76:e6:5f:21:67:65:
                    78:dc:87:90:2f:60:c4:13:c9:16:b5:48:75:be:3c:
                    8f:45:62:0a:6a:8c:a3:92:a3:a3:6f:04:59:f9:48:
                    48:93:da:20:c1:60:2a:7f:36:2a:0b:a7:2a:9b:bf:
                    e5:ac:d7:ff:a2:5f:4b:24:55:7d:c1:ab:f4:1e:6f:
                    e5:a7:59:f9:a2:3d:3f:62:12:d1:c1:0b:68:4e:c2:
                    e4:d0:f8:f7:ab:bd:a5:60:b7:5b:3d:25:81:5d:f1:
                    5b:bb:bd:08:22:b3:38:8f:79:33:b4:4d:e9:6b:8c:
                    f1:58:a8:c8:63:aa:79:4f:f6:39:b3:cc:70:4f:91:
                    62:06:64:16:26:cc:62:01:ea:b2:e5:7a:f8:7c:b4:
                    d2:3d:69:12:e0:a4:96:6b:3d:27:08:8b:87:f0:be:
                    b2:08:f7:74:1a:37:62:17:9d:83:28:5b:98:e0:b8:
                    af:d4:6d:29:8a:bb:40:b7:ee:e5:35:4f:00:d2:3c:
                    1b:4b:79:a7:f2:fb:65:96:84:32:1e:3c:e5:56:06:
                    d0:60:04:11:e8:03:05:b6:d9:09:ec:b6:2a:21:0e:
                    84:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:95:82:B4:96:8A:76:C2:D3:98:8B:8A:CF:3F:3D:DB:46:E1:A7:D2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7176C226F7D111F0A7781AB9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.200.0-156.247.255.255
                  156.255.228.0-156.255.247.255

    Signature Algorithm: sha256WithRSAEncryption
         4a:72:b0:77:8b:a3:80:f5:05:53:29:2b:ad:9c:7c:16:6a:c7:
         04:35:2b:89:99:71:5b:eb:8f:ba:4b:d8:35:c1:5d:19:18:51:
         27:de:9a:0d:2a:45:d7:90:45:89:07:5d:38:f0:40:c4:b8:7f:
         4b:df:97:f4:6e:49:7d:35:c5:92:b0:c4:38:8d:06:24:6e:9f:
         ce:c6:42:5e:9e:81:70:8b:e3:79:af:62:c1:30:16:af:3b:50:
         3b:50:f2:34:2e:b2:38:49:e1:46:5e:96:f1:45:de:6f:c6:63:
         42:f0:ed:41:46:0a:cd:99:d4:c1:0a:55:5b:59:79:8c:d0:65:
         00:7b:48:28:84:c0:90:fb:dc:b2:2e:c2:85:29:81:4d:7f:31:
         93:a9:44:e0:80:6d:c7:cc:15:dd:db:67:81:b5:fa:25:ef:11:
         03:5f:da:07:14:1c:17:23:e8:18:d1:af:a4:0f:bf:b0:56:04:
         04:2b:eb:4f:d3:32:08:bf:0f:88:cd:66:d4:b4:18:2e:1d:b4:
         4c:12:f0:67:43:18:c0:3c:e8:44:f2:bd:38:02:f7:df:02:e1:
         fa:26:64:bf:9a:9e:ed:ff:14:97:33:43:96:95:be:f0:91:57:
         39:c5:8d:44:e8:49:23:4e:eb:1e:cd:aa:aa:69:3b:9f:a8:84:
         b8:d4:25:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:08:26 2026 by rpki-client