This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C41D9F8F1F811F09D1B7FF3DAE4EC9C.roa
File:                     3C41D9F8F1F811F09D1B7FF3DAE4EC9C.roa (raw, json)
Hash identifier:          0zxWkM7WzdI1k6X41QOEZPPra7frfCkTfbtTALf2S98=
Subject key identifier:   FE:6C:54:F7:BD:E2:53:7A:36:B0:BB:F2:B2:86:3D:5D:13:57:2B:EE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019701
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C41D9F8F1F811F09D1B7FF3DAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 09:54:52 +0000
ROA not before:           Thu 15 Jan 2026 09:54:47 +0000
ROA not after:            Mon 16 Feb 2026 09:54:47 +0000
asID:                     22773
IP address blocks:        156.233.252.0/24 maxlen: 24
                          156.243.206.0/24 maxlen: 24
                          156.243.207.0/24 maxlen: 24
                          156.243.218.0/24 maxlen: 24
                          156.248.1.0/24 maxlen: 24
                          156.248.2.0/24 maxlen: 24
                          156.248.3.0/24 maxlen: 24
                          156.248.22.0/24 maxlen: 24
                          156.248.24.0/24 maxlen: 24
                          156.248.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104193 (0x19701)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 15 09:54:47 2026 GMT
            Not After : Feb 16 09:54:47 2026 GMT
        Subject: CN=6968b96c-ff2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:3d:a1:34:e8:d1:9f:7d:7f:40:f4:e9:84:
                    77:a5:b8:4a:d4:f6:fb:62:2a:9c:b4:80:e6:fe:5f:
                    69:31:90:3f:f8:e3:15:f9:1e:6b:d8:fd:79:a8:f4:
                    67:d2:7b:1d:8d:91:87:4d:65:3e:6b:f0:be:ad:1a:
                    28:6a:ff:e5:30:8f:90:b7:6b:42:95:ad:c2:10:88:
                    5d:e3:a3:3f:9e:89:f0:26:c2:85:fd:c8:d7:0f:3b:
                    2e:4c:33:88:2a:0f:1d:3c:22:eb:a7:56:85:6f:88:
                    a8:95:d2:95:3d:4c:bc:32:fc:b3:6d:75:fb:2e:76:
                    54:d1:4a:93:39:cf:f4:06:5e:37:1f:3a:79:0f:fc:
                    85:b5:1f:48:e7:98:04:0d:2b:32:04:3f:91:76:2a:
                    7e:3b:94:83:b1:b8:bd:95:fc:b8:3a:e9:67:1e:7b:
                    79:c0:ae:bd:4f:99:27:8e:82:67:bb:04:37:ac:57:
                    31:1b:e8:e7:80:6f:1f:06:2f:db:2d:b0:cc:ae:2f:
                    02:d9:af:98:38:cf:7d:74:55:f1:71:db:ba:1b:ea:
                    89:54:77:e9:77:ab:0b:be:e8:a3:7a:a8:dd:de:e3:
                    f4:c3:18:a4:2a:de:ad:99:ed:01:11:d2:06:18:c4:
                    35:8c:a1:e3:1a:0f:40:e5:b5:30:fa:4f:39:23:1a:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6C:54:F7:BD:E2:53:7A:36:B0:BB:F2:B2:86:3D:5D:13:57:2B:EE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C41D9F8F1F811F09D1B7FF3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.252.0/24
                  156.243.206.0/23
                  156.243.218.0/24
                  156.248.1.0-156.248.3.255
                  156.248.22.0/24
                  156.248.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:59:37:bf:77:f0:39:6c:29:6c:d3:d5:52:8d:74:40:40:d5:
         50:32:37:91:c9:17:b5:51:f5:e3:4f:81:4b:4b:04:3f:58:1d:
         2f:cc:7b:d8:5e:54:17:b7:cb:43:20:d8:2f:84:32:c0:e7:83:
         85:fa:13:57:ef:30:d4:f1:e2:2a:e4:a7:f4:2e:a2:15:be:31:
         57:c5:a2:ec:b6:4a:6b:6e:f7:b9:b2:30:48:a1:6e:fc:0a:17:
         5a:f3:8c:99:11:ca:59:7a:f3:5c:8d:f8:90:e6:17:a5:6d:5f:
         5d:a3:07:84:77:7d:1d:ae:8c:64:a9:69:53:aa:f7:4e:f2:94:
         8a:a8:a8:96:f1:3f:c9:c7:16:7e:29:e5:fe:99:84:8c:23:d5:
         e6:02:da:0f:94:88:7b:01:b6:df:d6:fc:a6:8c:ee:ec:4e:8b:
         6a:51:18:1f:4d:17:3f:be:aa:38:33:20:7e:4c:ad:91:47:2c:
         38:9d:4e:3d:a1:ca:c5:04:09:f4:b7:5a:ce:1a:b6:87:4b:6a:
         4c:40:39:d2:9f:11:64:4a:50:88:9a:6f:d3:e4:65:e9:78:6b:
         e1:00:a8:e0:f8:ed:c5:08:df:2b:5f:b1:d1:03:7a:a2:af:49:
         5e:c4:6d:b9:63:ab:65:56:ff:7c:a5:c1:b2:72:cb:71:7e:9e:
         d5:9e:57:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:59 2026 by rpki-client