This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46475CE8FDBA11F08874DD9DDAE4EC9C.roa
File:                     46475CE8FDBA11F08874DD9DDAE4EC9C.roa (raw, json)
Hash identifier:          UPjTaYmzJhqBWLEZWsc3gNRCeXbdxotyVUjbqwCkIxo=
Subject key identifier:   B0:17:63:20:C4:71:66:27:0D:30:CD:6E:05:09:10:85:27:C5:91:A9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019AE6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46475CE8FDBA11F08874DD9DDAE4EC9C.roa
Signing time:             Fri 30 Jan 2026 09:01:34 +0000
ROA not before:           Fri 30 Jan 2026 09:01:29 +0000
ROA not after:            Fri 13 Feb 2026 09:01:29 +0000
asID:                     152705
IP address blocks:        156.239.244.0/22 maxlen: 24
                          156.239.244.0/23 maxlen: 24
                          156.239.244.0/24 maxlen: 24
                          156.239.245.0/24 maxlen: 24
                          156.239.246.0/23 maxlen: 24
                          156.239.246.0/24 maxlen: 24
                          156.239.247.0/24 maxlen: 24
                          156.239.248.0/21 maxlen: 24
                          156.239.248.0/22 maxlen: 24
                          156.239.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Feb 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105190 (0x19ae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 30 09:01:29 2026 GMT
            Not After : Feb 13 09:01:29 2026 GMT
        Subject: CN=697c736e-804a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:b5:46:ce:a7:17:15:1e:e0:74:b8:7d:f3:
                    28:fe:7a:49:b7:1c:5d:b3:de:56:75:5c:a9:65:62:
                    68:7a:6a:45:03:75:1c:0a:e9:00:a6:41:67:21:6b:
                    1e:82:ac:c7:ec:78:1e:14:5b:0d:75:cf:80:98:30:
                    5d:09:8b:93:cc:68:9c:43:9b:c0:f9:ab:c8:4f:7d:
                    69:03:c5:6c:02:86:e0:de:b8:7a:31:e8:84:c9:2f:
                    dc:3e:a6:ad:27:a2:42:c3:ef:7e:23:70:a0:bd:15:
                    f3:e5:65:1b:65:fe:60:51:3e:62:fe:58:3b:61:4d:
                    68:3d:8e:e9:d4:ca:29:4f:cc:06:9e:7e:63:50:ef:
                    7f:96:aa:1c:77:98:7d:0d:cd:c5:69:f6:0f:75:13:
                    04:bf:4f:6c:3b:dd:1b:f0:67:cf:be:f6:ff:d8:13:
                    cc:64:74:74:a4:d7:91:bf:b4:19:5b:26:0c:99:92:
                    85:f9:8d:5a:d4:05:c3:c4:e1:d6:04:d0:cd:c1:0d:
                    96:a8:b3:94:47:81:99:05:0e:3b:89:2d:67:9d:46:
                    86:b4:1e:aa:70:d8:c2:5a:f6:77:da:9a:8a:a0:24:
                    bd:1d:4d:89:6b:ac:69:8f:f4:ae:3e:32:bc:80:45:
                    50:f0:46:df:0f:af:61:15:d2:54:37:35:3e:cf:da:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:17:63:20:C4:71:66:27:0D:30:CD:6E:05:09:10:85:27:C5:91:A9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46475CE8FDBA11F08874DD9DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.244.0-156.239.255.255

    Signature Algorithm: sha256WithRSAEncryption
         2a:79:83:a4:16:ea:60:50:74:b3:e5:73:c0:03:79:d7:f0:d6:
         91:82:d9:a1:71:cf:27:cd:b6:d1:4e:19:b4:70:c7:a9:39:33:
         28:bc:77:55:67:dc:73:02:bb:0c:34:f4:4d:69:f3:7e:fc:b6:
         32:1c:ca:2b:44:78:72:b6:3a:6f:a9:31:ee:5f:4d:49:eb:e4:
         c6:aa:e2:b8:55:46:db:67:8a:ab:5c:d7:53:4c:ad:68:6a:96:
         7c:3e:73:ea:9c:3b:2e:3a:45:66:35:32:23:90:64:6a:18:dd:
         62:82:9c:0f:d9:3e:d0:19:94:ed:6c:80:56:c6:77:9f:71:e4:
         21:79:68:5f:3e:e5:da:38:c7:31:fd:59:8a:0a:fd:f4:dc:6c:
         a3:f2:41:15:2c:bf:f1:4b:28:55:d2:cd:79:57:71:71:38:a5:
         c2:9c:0d:1a:65:c6:71:0e:c7:6e:75:ba:3d:db:38:84:15:cc:
         44:98:fe:c0:a6:a9:fd:54:c9:3d:ad:17:dd:d0:83:b0:9c:a0:
         91:44:70:3b:b1:db:d7:20:49:0a:2a:fd:88:47:35:e8:f3:80:
         2c:34:3d:dc:84:f8:ce:e8:c7:92:82:2e:1b:69:80:68:17:97:
         10:a0:6f:b7:7e:68:f3:47:e8:a5:c4:1f:9f:b7:c7:2e:b2:13:
         ed:d0:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 20:20:03 2026 by rpki-client