This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F26800AED4011F0AECDA2EBDAE4EC9C.roa
File:                     2F26800AED4011F0AECDA2EBDAE4EC9C.roa (raw, json)
Hash identifier:          BNWnvpF+M70h1aMnHHs/zvDVMp5p8/TQ8XROGL2CEq0=
Subject key identifier:   31:85:33:E2:B5:97:AA:F5:EA:0C:B2:D1:B6:44:A2:3C:59:A3:C3:89
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0195B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F26800AED4011F0AECDA2EBDAE4EC9C.roa
Signing time:             Fri 09 Jan 2026 09:47:18 +0000
ROA not before:           Fri 09 Jan 2026 09:47:13 +0000
ROA not after:            Sun 18 Jan 2026 09:47:13 +0000
asID:                     18013
IP address blocks:        156.239.228.0/22 maxlen: 24
                          156.239.228.0/23 maxlen: 24
                          156.239.228.0/24 maxlen: 24
                          156.239.229.0/24 maxlen: 24
                          156.239.230.0/23 maxlen: 24
                          156.239.230.0/24 maxlen: 24
                          156.239.231.0/24 maxlen: 24
                          156.239.232.0/22 maxlen: 24
                          156.239.232.0/23 maxlen: 24
                          156.239.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 Jan 2026 09:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103857 (0x195b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  9 09:47:13 2026 GMT
            Not After : Jan 18 09:47:13 2026 GMT
        Subject: CN=6960cea5-e1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:10:bd:a2:a3:7e:10:b9:12:aa:19:41:24:bd:
                    c5:b9:54:83:2a:83:18:8d:c2:d4:b6:7f:8a:e2:ff:
                    78:46:ae:5f:84:7a:d8:d0:75:32:c7:15:40:ac:d3:
                    e4:a9:f5:fe:f0:19:39:93:07:88:5b:28:29:1b:a4:
                    78:80:3c:ca:b2:55:fd:fb:38:ee:fd:1b:9a:9c:92:
                    1d:d6:17:10:6e:93:78:8d:40:67:98:0e:23:74:2c:
                    54:a8:9d:0f:40:e2:bd:0b:f0:f7:04:fe:0b:d6:d2:
                    00:9b:b8:11:97:1c:af:54:5d:bd:8f:27:3a:f0:dc:
                    d8:23:3a:25:c6:e7:e9:6f:cf:92:46:32:8b:c3:cc:
                    3a:74:10:02:44:06:76:97:8a:99:5e:70:8d:17:30:
                    d9:33:27:82:66:70:a1:bb:f6:b9:69:0f:a2:9b:4e:
                    74:e2:76:6e:47:08:64:5d:33:94:79:51:05:04:7a:
                    b4:87:80:7f:0a:ec:3a:16:d8:f1:31:07:07:2f:8d:
                    e9:66:a2:0e:3d:a0:dc:ea:a5:ea:5e:ed:95:0d:37:
                    0a:2d:98:8a:9c:1b:69:6a:8d:7e:89:26:d2:9c:29:
                    a0:f3:91:e7:db:7a:85:92:b3:14:20:da:94:10:a7:
                    f3:04:e2:c9:a3:ce:29:01:62:6f:f9:fa:16:10:7d:
                    86:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:85:33:E2:B5:97:AA:F5:EA:0C:B2:D1:B6:44:A2:3C:59:A3:C3:89
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F26800AED4011F0AECDA2EBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.228.0-156.239.235.255

    Signature Algorithm: sha256WithRSAEncryption
         87:70:d4:34:69:2d:65:7c:0d:e6:31:68:0f:0f:71:24:52:cf:
         6b:b1:b5:52:26:0e:2d:1a:4f:1f:59:45:5e:30:ec:5b:3a:ad:
         0b:26:f2:e5:bd:a4:4b:b1:d1:6c:7d:45:ea:01:a1:6b:ef:f8:
         57:e3:ed:77:09:0f:30:09:b9:92:cf:91:a5:ee:cf:94:29:3c:
         73:12:91:fc:a1:73:57:83:2d:02:d3:24:2f:2c:da:c2:12:b4:
         2d:6a:8a:94:73:03:ad:79:14:7b:b3:ce:28:a7:1d:37:e3:37:
         ec:e5:42:4f:c2:b0:da:74:02:a0:1a:8b:84:7d:c0:b6:27:0d:
         36:17:44:ab:de:fe:35:d0:49:64:74:ad:54:e5:49:1d:2d:6b:
         b1:ac:33:4a:0d:d3:48:64:c4:29:a0:de:2b:2c:61:9e:c8:f5:
         3c:72:14:c1:65:f6:f7:a5:27:1f:38:1f:2d:2c:88:2c:3f:76:
         30:76:6c:83:70:15:3d:34:7e:4c:54:31:31:ab:15:fa:13:97:
         ad:cb:2c:99:a1:08:b3:cd:1e:43:cd:86:0f:e0:b9:b4:bf:f8:
         c5:3e:87:e4:5a:dd:bd:4e:5c:e4:c0:e9:a6:59:83:f4:fa:20:
         e1:6c:a2:ab:51:1c:6f:7c:91:e2:8c:2a:89:33:90:9b:36:76:
         7d:1c:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:47 2026 by rpki-client