This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9018BA4D0DE11F09CC4E079DAE4EC9C.roa
File:                     B9018BA4D0DE11F09CC4E079DAE4EC9C.roa (raw, json)
Hash identifier:          TQ+qZt/kOFuPMEjvvY22hWXMTrlkv6E6X9BzeIzAHdg=
Subject key identifier:   46:0A:53:5B:85:0E:80:4C:17:FC:F2:35:F8:7F:11:A5:E2:73:65:A7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018BF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9018BA4D0DE11F09CC4E079DAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 06:59:06 +0000
ROA not before:           Thu 04 Dec 2025 06:59:01 +0000
ROA not after:            Sat 18 Nov 2028 06:59:01 +0000
asID:                     17561
IP address blocks:        156.245.26.0/24 maxlen: 24
                          156.245.27.0/24 maxlen: 24
                          156.245.28.0/24 maxlen: 24
                          156.245.29.0/24 maxlen: 24
                          156.245.31.0/24 maxlen: 24
                          156.245.138.0/24 maxlen: 24
                          156.245.141.0/24 maxlen: 24
                          156.245.142.0/24 maxlen: 24
                          156.245.143.0/24 maxlen: 24
                          156.245.148.0/24 maxlen: 24
                          156.245.149.0/24 maxlen: 24
                          156.245.150.0/24 maxlen: 24
                          156.245.151.0/24 maxlen: 24
                          156.245.161.0/24 maxlen: 24
                          156.245.162.0/24 maxlen: 24
                          156.245.164.0/24 maxlen: 24
                          156.245.165.0/24 maxlen: 24
                          156.245.166.0/24 maxlen: 24
                          156.245.167.0/24 maxlen: 24
                          156.245.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101360 (0x18bf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  4 06:59:01 2025 GMT
            Not After : Nov 18 06:59:01 2028 GMT
        Subject: CN=6931313a-2674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:58:c6:b4:58:62:1b:eb:08:6a:c7:d4:d1:
                    dd:e0:e4:64:97:22:21:db:70:5b:f1:79:97:01:c0:
                    70:84:96:e1:e1:c8:13:e4:a6:70:28:f8:f5:fc:66:
                    01:58:65:ad:91:be:26:7b:d8:e0:7e:11:7b:b5:58:
                    98:c4:80:1f:74:cf:a3:65:9a:c3:50:f1:2e:ba:f6:
                    ca:0e:f8:62:13:b7:c6:d3:29:dc:51:87:e6:1a:b4:
                    74:4a:a5:ae:0f:e7:14:d4:e8:31:7c:d7:72:60:3b:
                    0a:76:95:a9:c6:9b:79:03:e5:c6:db:a0:b0:f5:ce:
                    7e:7d:54:a8:b5:89:82:27:35:bd:c6:4e:5b:c8:d6:
                    a8:e7:a4:2f:aa:3d:b4:8b:59:69:65:4f:81:fd:17:
                    a4:43:94:a5:48:16:91:17:c4:8d:1a:44:52:d1:23:
                    35:5a:a6:a2:bc:09:09:61:56:13:82:98:cb:f2:be:
                    00:3c:c5:14:bd:3c:11:86:f1:25:e5:4e:83:c5:09:
                    24:86:9e:42:e8:f3:ac:b4:46:4c:4d:c2:98:de:07:
                    65:57:f3:1e:37:f4:47:a7:7e:0b:a6:30:03:03:83:
                    dc:4d:26:52:64:bd:06:ca:b7:53:a7:7b:48:c1:57:
                    ff:9c:d7:e7:53:96:8d:38:6d:85:c6:67:58:44:0c:
                    1e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0A:53:5B:85:0E:80:4C:17:FC:F2:35:F8:7F:11:A5:E2:73:65:A7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9018BA4D0DE11F09CC4E079DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.26.0-156.245.29.255
                  156.245.31.0/24
                  156.245.138.0/24
                  156.245.141.0-156.245.143.255
                  156.245.148.0/22
                  156.245.161.0-156.245.162.255
                  156.245.164.0/22
                  156.245.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:3f:2b:3f:8f:aa:02:ee:4f:0d:ba:0a:a4:d7:2d:91:16:cc:
         fc:4e:2c:b0:ce:d7:18:98:b9:06:0a:5b:81:1e:9e:30:53:f5:
         52:1d:73:45:7c:cf:74:ff:ef:56:20:20:c6:35:16:39:f6:93:
         99:80:75:d1:23:0a:45:52:7d:c6:80:46:cb:ac:74:9b:a1:f8:
         f4:0d:15:86:dc:d4:29:bc:b8:6b:6f:26:3f:15:cf:f5:21:9c:
         0f:7f:2d:ab:fc:79:0e:01:03:e7:91:92:26:c2:f6:2a:29:c5:
         ce:0a:7e:c6:59:e0:64:6e:bb:7c:aa:c5:22:08:6b:47:93:a0:
         37:6d:6d:cc:30:5a:08:9f:81:ee:79:e5:a8:5a:5a:df:10:51:
         59:13:fb:14:56:4a:f8:41:b5:9b:28:73:1c:0c:ac:0f:b3:24:
         2c:84:e2:ac:98:86:10:c4:e5:c6:3b:7c:d1:76:80:b4:fe:6a:
         07:cd:bd:29:7c:50:21:21:4f:85:fa:2f:a9:56:3e:e4:a2:93:
         ee:b2:bb:fc:34:00:dc:68:23:f4:ea:2b:6f:d0:1a:c6:d5:29:
         bd:17:81:15:fb:f8:93:7f:de:b7:35:47:55:26:d6:88:89:b4:
         62:4c:2e:31:9a:98:a6:e3:fe:04:57:10:cf:2c:81:e9:63:e6:
         b9:6b:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:23 2025 by rpki-client