This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56258276F1F711F0BDD69EEDDAE4EC9C.roa
File:                     56258276F1F711F0BDD69EEDDAE4EC9C.roa (raw, json)
Hash identifier:          0VNK2gc4GN68fJ0EjBAYogxsEw/rwAYnvHicx/hr9N8=
Subject key identifier:   14:13:EB:B3:E4:65:74:7F:A1:B1:D3:34:DD:F7:9F:F7:1A:3A:78:B7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0196FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56258276F1F711F0BDD69EEDDAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 09:48:26 +0000
ROA not before:           Thu 15 Jan 2026 09:48:20 +0000
ROA not after:            Mon 16 Feb 2026 09:48:20 +0000
asID:                     22773
IP address blocks:        156.242.231.0/24 maxlen: 24
                          156.242.232.0/24 maxlen: 24
                          156.242.233.0/24 maxlen: 24
                          156.243.101.0/24 maxlen: 24
                          156.243.102.0/24 maxlen: 24
                          156.243.103.0/24 maxlen: 24
                          156.243.104.0/24 maxlen: 24
                          156.243.105.0/24 maxlen: 24
                          156.243.106.0/24 maxlen: 24
                          156.243.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104191 (0x196ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 15 09:48:20 2026 GMT
            Not After : Feb 16 09:48:20 2026 GMT
        Subject: CN=6968b7e9-c5db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:50:91:64:d7:33:b0:42:ac:f6:a4:7b:ef:
                    d6:15:b1:e8:42:5e:69:21:fd:18:76:5e:2b:0d:47:
                    cf:68:a3:e2:50:9e:f4:ad:03:71:d4:bf:47:ab:0d:
                    aa:74:61:45:91:fc:e9:e9:24:c3:69:34:22:b7:2a:
                    54:1f:9e:a4:ad:ff:c7:4e:bf:bd:4b:b6:17:ea:c7:
                    ad:00:37:41:e0:bd:19:b2:2d:45:1f:04:65:c6:83:
                    66:f2:79:b7:13:3b:2d:6f:62:70:3f:38:5a:f5:34:
                    0a:36:9c:3f:37:2a:cc:46:02:ce:80:1a:16:b4:82:
                    72:7e:4c:62:62:af:35:96:29:e1:81:2a:43:65:1c:
                    46:b5:03:fd:25:50:d6:c8:9d:de:f3:15:08:62:63:
                    57:b0:97:a4:18:f0:12:5f:dc:74:d0:8a:c3:bf:a9:
                    fb:c5:2b:a0:ed:a7:18:fe:33:95:21:55:fc:9b:4e:
                    94:ff:a3:e6:c8:f9:fe:82:79:b9:b0:a0:71:46:c0:
                    b3:79:2a:01:34:76:e9:d9:52:e7:fb:83:cb:c8:1e:
                    af:97:14:b2:d9:06:b9:5c:31:aa:8b:dc:3e:ca:ee:
                    77:d0:69:b4:99:e0:ee:a1:8b:99:01:a6:d8:b7:07:
                    75:eb:f7:40:04:67:de:f2:9b:2d:ea:dd:a0:86:fc:
                    23:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:13:EB:B3:E4:65:74:7F:A1:B1:D3:34:DD:F7:9F:F7:1A:3A:78:B7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56258276F1F711F0BDD69EEDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.231.0-156.242.233.255
                  156.243.101.0-156.243.107.255

    Signature Algorithm: sha256WithRSAEncryption
         4c:a6:4c:64:e2:f5:86:88:0e:5a:9c:5d:3d:65:80:aa:a0:7a:
         9b:94:48:d7:21:d8:63:6d:0d:1f:b5:af:3a:f0:4c:58:b5:cd:
         1f:d2:d3:f5:85:01:c1:8f:ed:07:3d:3b:b1:84:a4:22:a3:2a:
         85:a6:cd:0d:83:e3:76:c7:c5:c6:1e:ff:b3:63:75:6b:b3:d4:
         bf:40:70:8c:95:2f:0a:76:3c:8f:5e:da:3e:e2:c3:84:fb:dd:
         bd:7f:b3:a5:db:56:40:c4:5a:bb:fa:2a:d4:fb:97:ff:9c:ba:
         2b:7f:82:f5:21:3d:4a:f6:26:ab:b5:79:11:fa:ed:1e:c3:de:
         c5:5f:4c:53:e4:7b:0f:3a:01:57:28:79:72:69:88:5b:a4:9b:
         f0:d2:3e:f1:9b:27:9b:ac:9f:b3:10:49:db:52:24:9b:dd:37:
         34:ad:b2:8e:86:5b:c1:52:72:a6:ec:10:11:d6:41:c7:ea:e1:
         99:20:f3:f5:51:bf:47:da:0b:b7:5b:93:ef:82:1c:6d:c5:9a:
         6a:86:87:15:4d:15:7d:71:dd:56:50:d1:5f:66:94:39:e2:1f:
         03:cc:88:bb:75:17:8b:90:ce:4a:cf:b2:ad:26:cf:17:6d:49:
         38:fe:d7:4e:4b:e1:f0:f8:f9:63:5b:72:71:ed:ec:a1:cf:c0:
         c4:34:06:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:07 2026 by rpki-client