This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0940DC96F1FA11F0B718C57FDAE4EC9C.roa
File:                     0940DC96F1FA11F0B718C57FDAE4EC9C.roa (raw, json)
Hash identifier:          tIDeXmXrm3pBkzFwGMU2aqKQYy9zrYHiaa2viI5/DM0=
Subject key identifier:   0C:AE:3B:B3:C1:67:48:0A:C0:A8:09:99:90:57:5C:41:69:C7:BB:AB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019705
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0940DC96F1FA11F0B718C57FDAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 10:07:45 +0000
ROA not before:           Thu 15 Jan 2026 10:07:41 +0000
ROA not after:            Mon 16 Feb 2026 10:07:41 +0000
asID:                     22773
IP address blocks:        156.242.19.0/24 maxlen: 24
                          156.242.234.0/24 maxlen: 24
                          156.242.235.0/24 maxlen: 24
                          156.242.236.0/24 maxlen: 24
                          156.242.237.0/24 maxlen: 24
                          156.242.238.0/24 maxlen: 24
                          156.242.239.0/24 maxlen: 24
                          156.242.240.0/24 maxlen: 24
                          156.243.115.0/24 maxlen: 24
                          156.243.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104197 (0x19705)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 15 10:07:41 2026 GMT
            Not After : Feb 16 10:07:41 2026 GMT
        Subject: CN=6968bc71-b34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:04:2e:31:89:b9:44:9e:a5:b3:3e:af:09:
                    0a:c6:c8:58:b8:ab:84:20:2c:be:2e:83:2e:af:d9:
                    97:7e:5b:23:7d:29:3c:ae:b2:f5:78:64:d8:56:5e:
                    cc:de:1f:9b:5f:0c:0d:c7:60:d4:c8:7a:66:b5:5b:
                    44:0c:52:78:7d:12:35:5e:3e:8c:6e:b5:38:10:03:
                    5e:a1:f3:5d:f6:de:a6:0b:c6:0f:e9:e9:54:79:5a:
                    f0:cf:a8:3b:e8:43:df:3a:8e:d5:3c:bc:7b:11:f4:
                    04:25:36:cb:74:1a:22:9d:7a:24:e5:35:d4:6f:a2:
                    e9:62:c0:02:e5:fd:47:13:29:97:3c:0c:1e:8f:8a:
                    49:6e:66:94:95:3a:bd:82:8e:f7:71:f3:e7:27:5d:
                    a6:65:b0:fd:5d:ec:88:e6:f7:16:41:e8:46:d6:7c:
                    ec:b7:b0:df:4b:d6:f5:45:75:fb:4d:ad:70:3d:f7:
                    72:6f:c6:5f:78:35:2d:0d:cc:3d:b3:b3:2d:e3:fa:
                    99:e2:a2:94:c0:cf:38:5d:04:c0:2c:71:ba:97:62:
                    99:85:f4:fc:f4:97:3e:92:66:a0:20:6d:5d:76:24:
                    e1:1f:45:80:a9:4c:70:52:88:8d:0a:7d:f4:0e:e8:
                    59:a5:2b:15:54:5e:32:09:e6:ed:ae:5c:ff:bc:4f:
                    44:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AE:3B:B3:C1:67:48:0A:C0:A8:09:99:90:57:5C:41:69:C7:BB:AB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0940DC96F1FA11F0B718C57FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.19.0/24
                  156.242.234.0-156.242.240.255
                  156.243.115.0/24
                  156.243.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:69:3a:89:42:49:a1:27:a7:cb:a5:16:28:74:b0:18:e6:5f:
         7b:d7:e8:f7:9d:db:ad:b4:7d:cd:2f:cf:cc:a2:5c:85:3d:4f:
         0d:3f:76:07:c0:84:c9:ca:14:85:01:63:80:93:cc:ab:47:26:
         67:35:f3:e9:26:a2:3c:26:54:df:f2:e8:e0:da:18:89:4b:50:
         da:ca:c2:e6:24:c1:0f:ed:e7:8f:c7:e6:cf:ac:cf:fb:8f:73:
         93:1e:fa:60:d0:56:1b:9a:bc:29:3f:46:86:20:a1:7d:16:b6:
         95:c9:d1:2a:d1:79:2e:35:04:54:9d:38:30:94:f5:e8:8d:60:
         be:b5:02:04:54:24:2b:73:d3:19:c2:e3:d0:a5:49:9e:77:3d:
         a2:03:50:a2:47:ec:92:82:ad:18:78:8e:2d:47:50:d5:41:ab:
         9b:36:e2:f7:cb:23:26:21:bf:29:a2:88:02:a1:50:bf:25:0f:
         e4:8d:ef:da:f4:91:cd:b2:77:2b:7a:81:f5:e1:8a:88:bb:8c:
         61:b8:01:22:6a:96:69:a3:7c:37:ca:4b:bb:64:76:37:61:dd:
         32:a0:fc:f2:3b:17:ea:75:05:48:0b:f4:0f:0e:02:30:4b:1b:
         c9:b5:52:94:7a:48:5e:7e:2e:55:a6:77:29:81:34:60:ec:31:
         8e:9b:33:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:16 2026 by rpki-client