This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3954B3D2EB9F11F0B8DBF4E4DAE4EC9C.roa
File:                     3954B3D2EB9F11F0B8DBF4E4DAE4EC9C.roa (raw, json)
Hash identifier:          iulv3ex5AgoIJGF9NUE25g0AF/hxP2UngOyXnblKzDM=
Subject key identifier:   E8:EB:78:AD:4B:54:11:12:DE:D1:03:DC:88:13:12:EB:4F:E6:A6:2A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0194F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3954B3D2EB9F11F0B8DBF4E4DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 08:02:35 +0000
ROA not before:           Wed 07 Jan 2026 08:02:30 +0000
ROA not after:            Fri 23 Jan 2026 08:02:30 +0000
asID:                     139646
IP address blocks:        156.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103665 (0x194f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  7 08:02:30 2026 GMT
            Not After : Jan 23 08:02:30 2026 GMT
        Subject: CN=695e131a-5bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:2c:d9:a6:f8:61:b3:71:b3:da:5b:d6:a8:
                    50:67:a0:7a:79:8b:5f:78:ec:b4:e5:33:71:0a:89:
                    44:bd:98:c4:d7:54:11:91:2d:1b:da:e5:aa:3f:3b:
                    4b:d7:c8:92:9b:3a:9f:1f:71:7b:bb:d8:08:33:a8:
                    6d:c5:12:e9:19:a4:56:e2:45:1a:42:26:ad:2e:d8:
                    b3:5c:7f:d6:dd:1b:a2:df:4a:8c:de:a9:55:14:eb:
                    5a:cd:f5:34:28:e1:e0:c3:5a:a5:d3:de:ef:54:02:
                    38:20:c1:c7:92:79:6c:4f:90:fa:a8:76:16:85:e2:
                    c4:b3:59:cd:3c:b5:46:3d:26:65:67:34:86:c1:4a:
                    fb:ce:21:15:42:8f:9d:49:dc:6b:fb:c0:a9:50:f6:
                    ca:ab:f4:83:f3:c7:81:f6:d8:cf:33:5c:3e:84:d4:
                    33:39:b0:91:74:11:cb:8a:32:c9:bf:81:f7:9c:1f:
                    3c:af:0f:fe:db:2c:35:06:9e:78:61:7b:2b:35:12:
                    9c:1d:dc:af:7e:af:70:40:8f:39:22:5f:80:4a:ed:
                    d2:87:26:79:5f:6c:26:5c:ca:47:92:a7:63:5e:45:
                    5b:15:84:f9:25:75:6b:95:b1:f7:2a:91:e0:4d:31:
                    e2:b5:e2:c0:a9:5c:d5:bd:ee:23:77:c1:31:57:cf:
                    b6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EB:78:AD:4B:54:11:12:DE:D1:03:DC:88:13:12:EB:4F:E6:A6:2A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3954B3D2EB9F11F0B8DBF4E4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:88:13:c0:d5:ee:dc:70:61:9b:e1:7a:86:23:42:01:e9:7d:
         91:35:cb:6f:f1:3e:00:50:af:e4:66:c5:ed:70:da:ee:73:00:
         ec:38:91:ba:6f:05:07:39:69:7b:a4:d4:17:7f:e0:d9:c0:58:
         b4:6f:9c:9a:43:a4:6e:31:6d:5a:13:31:f2:88:13:34:4f:90:
         b9:c8:c4:d9:d7:55:c3:9d:e8:f5:52:56:cd:57:e1:23:77:ce:
         f2:e6:d9:bb:9f:24:77:27:1d:d5:48:9f:84:de:aa:bc:8b:9d:
         d7:c0:1b:50:5f:aa:46:ee:4d:eb:6a:59:fc:79:9f:f4:ac:6e:
         b0:08:de:f5:7f:52:d0:e3:75:4d:21:3c:ec:6d:4b:93:c5:12:
         d5:92:8b:5b:2f:ac:64:9b:db:98:d8:e7:0b:ad:d8:0a:41:a9:
         53:74:e6:77:21:52:4e:b0:02:96:84:65:c6:6f:53:c7:22:b1:
         49:b7:7e:91:13:8c:5d:f9:3c:20:ff:73:46:3b:4d:37:5f:ab:
         e7:93:6c:77:00:74:7f:d2:b4:e5:49:58:70:3a:cb:26:46:e0:
         0d:0b:fc:cd:2b:01:20:15:4a:15:88:22:18:de:8f:04:48:a0:
         e9:c1:5f:7b:2f:eb:a3:d8:d5:37:40:55:15:16:03:9f:ff:ee:
         5e:40:09:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:46 2026 by rpki-client