This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24664F00E6FC11F095FF8DDCDAE4EC9C.roa
File:                     24664F00E6FC11F095FF8DDCDAE4EC9C.roa (raw, json)
Hash identifier:          xh57m7OotOv/YWUJhlYUFyHL/9iQsisMxkSMZSrpmMc=
Subject key identifier:   21:F7:C5:6F:59:44:40:C0:61:AD:24:75:F3:B1:BE:4A:98:C5:48:28
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0193BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24664F00E6FC11F095FF8DDCDAE4EC9C.roa
Signing time:             Thu 01 Jan 2026 10:25:07 +0000
ROA not before:           Thu 01 Jan 2026 10:25:02 +0000
ROA not after:            Sun 08 Feb 2026 10:25:02 +0000
asID:                     44559
IP address blocks:        156.238.33.0/24 maxlen: 24
                          156.246.21.0/24 maxlen: 24
                          156.246.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103354 (0x193ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  1 10:25:02 2026 GMT
            Not After : Feb  8 10:25:02 2026 GMT
        Subject: CN=69564b83-8701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:86:e8:64:28:af:94:82:6a:4e:81:a7:b3:6b:
                    85:28:8b:7c:0a:42:19:81:44:f7:97:b3:d3:73:6d:
                    dd:35:84:46:77:8c:77:c7:ef:6e:91:8c:e9:00:0e:
                    f8:d3:9d:ee:aa:aa:3a:bb:21:0d:a5:bc:58:5b:17:
                    36:87:a5:00:41:e4:42:e2:f0:a4:97:3c:0c:48:89:
                    9d:d8:06:76:da:75:0d:3a:80:6e:ca:48:85:0f:37:
                    a9:9f:ca:3b:78:aa:93:da:6b:c5:35:61:56:85:8e:
                    e6:e6:99:ef:c6:84:b7:ba:41:69:67:d2:83:9a:6f:
                    71:a7:9c:8a:2e:95:ca:1a:0e:99:d6:9e:80:0d:18:
                    8f:d6:e6:b1:b6:13:cd:e7:4e:01:db:cd:65:e4:cf:
                    b9:bb:7c:5f:22:82:f0:d7:9a:19:ae:85:c9:50:37:
                    27:f8:49:1d:07:43:4a:cd:32:5b:0c:4b:bd:9d:d1:
                    a7:66:03:d0:56:49:0c:75:ac:51:f3:b7:d1:2e:6f:
                    8b:61:da:89:0a:6b:41:76:f7:63:47:cd:c3:27:b0:
                    ca:ac:35:ef:90:95:99:2d:a2:c3:b6:fc:ce:fb:a2:
                    e9:40:9b:17:e6:f0:74:a9:b4:60:9f:a8:a2:19:4c:
                    18:d1:a6:f7:df:e4:c6:ee:a9:f2:d3:3b:86:f5:fb:
                    d3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F7:C5:6F:59:44:40:C0:61:AD:24:75:F3:B1:BE:4A:98:C5:48:28
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24664F00E6FC11F095FF8DDCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.33.0/24
                  156.246.21.0/24
                  156.246.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:e9:5e:3f:7f:2d:1f:97:45:be:f7:2b:87:7a:19:42:97:ca:
         2b:3e:2c:32:3a:0d:f0:a4:da:1c:7a:60:d1:73:eb:0b:72:a8:
         d2:6a:93:6b:4a:20:68:d6:54:b7:ee:d3:72:30:ef:f6:77:a5:
         b3:eb:8a:b3:97:6d:45:6a:aa:68:43:5b:b7:ff:e2:43:ed:91:
         60:8e:80:1d:fd:4e:da:d2:63:75:d7:e7:3d:e5:02:8a:0e:b7:
         e0:6c:7c:82:e6:dd:aa:34:5a:56:37:b2:99:57:76:41:f7:e8:
         52:4a:27:72:61:42:93:f9:3d:b5:8d:11:01:2b:13:c9:3c:17:
         8d:35:be:07:b9:3d:c9:9a:67:7b:1d:02:74:5c:93:59:8c:60:
         29:13:7d:3e:32:cf:fc:e3:45:75:4b:8a:05:91:2b:85:99:9a:
         1a:b6:6d:4d:d2:83:4f:6c:1f:ac:b4:a5:82:7b:ce:c8:8e:40:
         a4:07:46:55:f3:bf:48:6e:51:db:45:f2:92:b3:33:c8:d6:3e:
         e3:81:b5:ff:c4:f8:61:b7:88:a2:77:24:a6:4b:cd:c9:fb:12:
         82:ae:54:9b:30:0d:c7:b7:6e:8f:18:88:f2:b9:1e:e9:b2:cf:
         67:f6:14:15:53:62:1b:ab:6f:cf:00:65:9c:53:60:81:ac:67:
         a1:ad:16:30
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAZO6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTAxMTAyNTAyWhcNMjYwMjA4MTAyNTAyWjAYMRYw
FAYDVQQDEw02OTU2NGI4My04NzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA/IboZCivlIJqToGns2uFKIt8CkIZgUT3l7PTc23dNYRGd4x3x+9ukYzp
AA74053uqqo6uyENpbxYWxc2h6UAQeRC4vCklzwMSImd2AZ22nUNOoBuykiFDzep
n8o7eKqT2mvFNWFWhY7m5pnvxoS3ukFpZ9KDmm9xp5yKLpXKGg6Z1p6ADRiP1uax
thPN504B281l5M+5u3xfIoLw15oZroXJUDcn+EkdB0NKzTJbDEu9ndGnZgPQVkkM
daxR87fRLm+LYdqJCmtBdvdjR83DJ7DKrDXvkJWZLaLDtvzO+6LpQJsX5vB0qbRg
n6iiGUwY0ab33+TG7qny0zuG9fvTQwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFCH3
xW9ZREDAYa0kdfOxvkqYxUgoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNDY2NEYwMEU2RkMxMUYwOTVGRjhERENEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnO4hAwQAnPYVAwQAnPYfMA0G
CSqGSIb3DQEBCwUAA4IBAQAN6V4/fy0fl0W+9yuHehlCl8orPiwyOg3wpNocemDR
c+sLcqjSapNrSiBo1lS37tNyMO/2d6Wz64qzl21FaqpoQ1u3/+JD7ZFgjoAd/U7a
0mN11+c95QKKDrfgbHyC5t2qNFpWN7KZV3ZB9+hSSidyYUKT+T21jREBKxPJPBeN
Nb4HuT3Jmmd7HQJ0XJNZjGApE30+Ms/840V1S4oFkSuFmZoatm1N0oNPbB+stKWC
e87IjkCkB0ZV879IblHbRfKSszPI1j7jgbX/xPhht4iidySmS83J+xKCrlSbMA3H
t26PGIjyuR7pss9n9hQVU2Ibq2/PAGWcU2CBrGehrRYw
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:59 2026 by rpki-client