This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24079E02FA9711F09175D7D4DAE4EC9C.roa
File:                     24079E02FA9711F09175D7D4DAE4EC9C.roa (raw, json)
Hash identifier:          hHQPxCLFlVYehLaCLfMyc1stFXjyY/IcR4HcB+wobgA=
Subject key identifier:   17:67:87:96:9C:01:06:00:C0:75:75:29:05:C3:34:07:DF:DA:8D:ED
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0199F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24079E02FA9711F09175D7D4DAE4EC9C.roa
Signing time:             Mon 26 Jan 2026 09:12:30 +0000
ROA not before:           Mon 26 Jan 2026 09:12:26 +0000
ROA not after:            Sat 07 Mar 2026 09:12:26 +0000
asID:                     151407
IP address blocks:        156.248.11.0/24 maxlen: 24
                          156.248.12.0/24 maxlen: 24
                          156.248.13.0/24 maxlen: 24
                          156.248.14.0/24 maxlen: 24
                          156.248.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104950 (0x199f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 26 09:12:26 2026 GMT
            Not After : Mar  7 09:12:26 2026 GMT
        Subject: CN=69772ffe-9525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fe:fb:fa:1b:e5:5e:78:0d:3d:b6:ab:67:60:
                    99:e9:18:33:7b:cb:80:f3:e0:28:31:4a:c6:79:48:
                    50:f0:9a:3c:56:cb:6e:10:8e:6c:92:f0:ce:e5:9d:
                    f0:67:bd:ad:63:1e:57:55:78:17:47:eb:d7:12:b7:
                    22:78:e0:78:81:d4:92:c7:74:0a:71:b9:fd:a1:4b:
                    37:c9:08:26:1e:37:07:84:6c:ff:a4:58:d8:85:99:
                    ea:e7:0a:90:50:2d:16:91:53:ca:4d:6b:a3:cc:dc:
                    7c:a4:1c:31:91:e1:c4:8c:fc:c2:a4:33:ae:4f:bd:
                    e5:73:74:df:64:8b:fc:63:5f:2d:1d:5d:28:21:11:
                    81:16:89:90:31:01:70:16:1d:11:dc:fa:a8:2e:01:
                    1f:ac:7d:ca:f0:31:74:60:2b:92:cd:5d:90:9e:45:
                    4d:19:a8:0f:10:59:85:18:fc:be:e3:cf:29:89:49:
                    6d:64:14:58:97:e1:70:b2:50:6e:30:5a:b4:02:3d:
                    6f:6d:aa:9d:10:b9:16:38:29:32:26:b0:62:a0:2f:
                    7d:80:e6:06:f9:11:3e:15:a6:8f:64:5a:48:ab:b9:
                    21:33:5c:57:ac:5a:04:7a:a8:4b:cb:6f:73:d9:66:
                    77:e2:9d:2d:19:7b:4f:36:15:8c:31:9b:51:cc:ec:
                    dd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:67:87:96:9C:01:06:00:C0:75:75:29:05:C3:34:07:DF:DA:8D:ED
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24079E02FA9711F09175D7D4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.248.11.0-156.248.15.255

    Signature Algorithm: sha256WithRSAEncryption
         bc:1c:53:7c:7e:f2:db:01:b0:eb:bb:9f:eb:25:72:cc:99:9c:
         32:67:7d:26:3f:16:09:5f:65:85:70:b7:7d:cb:0c:ee:c5:3a:
         89:ef:54:40:0a:34:f5:d6:65:7f:ed:2a:89:70:12:bc:da:4f:
         ae:99:64:91:0f:7f:d1:83:8e:cf:f1:88:dd:4d:e1:35:82:23:
         ea:f0:31:9b:d0:6b:05:5b:0f:85:b2:8b:36:45:61:6e:89:65:
         18:c5:2a:ef:98:3c:43:8f:66:e7:09:b9:a3:1c:8c:25:45:8b:
         a2:f8:da:d5:c1:90:7b:2d:23:2f:88:8c:10:d9:21:1a:9a:bc:
         dc:30:95:83:15:a2:c9:e0:31:88:7b:43:0f:56:94:f4:15:46:
         22:df:2c:c5:df:b8:df:5f:ac:56:d9:e7:15:b0:7d:e1:69:d0:
         3d:b1:1d:17:f4:45:7f:4d:ac:95:80:9f:34:80:09:a7:76:bb:
         8a:d5:46:dd:a4:04:c5:0b:05:0c:9b:94:d2:d3:51:52:ac:58:
         ca:d5:91:20:ad:0f:30:5b:dd:1e:9a:10:ac:a6:0b:fc:c7:7c:
         78:bd:19:41:0b:2c:7a:71:31:9f:79:a7:2e:a3:6f:b9:23:b6:
         91:d0:0d:08:16:3a:eb:58:48:48:50:36:53:5c:3e:ec:de:11:
         3b:01:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:45:55 2026 by rpki-client