This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A31BDBAFA9611F09075AAD0DAE4EC9C.roa
File:                     5A31BDBAFA9611F09075AAD0DAE4EC9C.roa (raw, json)
Hash identifier:          MakhjszJ1X0kjuup1AQKxJ4ezexlmd4KWqqN0irSZ2k=
Subject key identifier:   98:04:69:D7:9B:17:37:61:E3:C8:5B:E7:1E:F2:72:E0:84:DF:8B:C7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0199F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A31BDBAFA9611F09075AAD0DAE4EC9C.roa
Signing time:             Mon 26 Jan 2026 09:06:52 +0000
ROA not before:           Mon 26 Jan 2026 09:06:46 +0000
ROA not after:            Sat 07 Mar 2026 09:06:46 +0000
asID:                     151407
IP address blocks:        156.248.8.0/21 maxlen: 24
                          156.248.8.0/22 maxlen: 24
                          156.248.8.0/23 maxlen: 24
                          156.248.8.0/24 maxlen: 24
                          156.248.9.0/24 maxlen: 24
                          156.248.10.0/23 maxlen: 24
                          156.248.10.0/24 maxlen: 24
                          156.248.12.0/22 maxlen: 24
                          156.248.12.0/23 maxlen: 24
                          156.248.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104948 (0x199f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 26 09:06:46 2026 GMT
            Not After : Mar  7 09:06:46 2026 GMT
        Subject: CN=69772eac-e6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:2a:0e:dd:77:be:b1:77:db:0b:88:9b:7b:
                    11:a1:56:bd:58:9a:ad:0a:31:4f:d8:df:f2:60:c7:
                    6f:4d:71:69:a8:2d:82:3a:0f:e8:88:0b:11:d6:40:
                    c6:80:b7:62:a3:fb:13:ea:77:39:cc:a5:03:7e:c1:
                    aa:ed:db:37:d0:43:da:87:b2:8e:e7:3a:7a:11:e5:
                    a2:60:08:9b:10:c3:da:2b:e5:4e:9b:b0:07:94:1d:
                    f1:2b:b8:23:73:24:89:49:98:8b:46:77:50:53:5f:
                    7a:d5:09:20:d4:48:51:18:56:0a:d9:2f:12:04:e9:
                    cc:49:57:8d:e0:90:18:fa:2a:93:f8:85:f3:52:25:
                    7e:12:7a:76:91:0a:48:3c:a1:e9:1d:d0:0c:23:88:
                    34:37:80:25:20:d5:99:6c:6d:ec:93:2e:4a:3d:97:
                    19:ea:de:99:6d:52:7d:3f:0b:42:6e:d8:05:b4:5b:
                    ad:b6:c3:13:57:35:fe:4f:eb:c7:f0:a0:07:a6:d5:
                    5c:ba:14:62:a6:0c:b8:69:19:5a:9b:a3:94:da:ff:
                    4a:23:a6:78:f1:bb:70:c4:e0:0c:23:0c:b5:ff:13:
                    b8:6d:37:3c:1e:ed:4c:5e:61:48:b3:47:97:ae:f9:
                    1f:54:9c:ae:10:90:2c:3d:9f:85:e3:b0:e3:15:0b:
                    55:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:04:69:D7:9B:17:37:61:E3:C8:5B:E7:1E:F2:72:E0:84:DF:8B:C7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A31BDBAFA9611F09075AAD0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.248.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:7e:e6:c9:95:8d:75:4d:bd:d1:9d:b6:e8:ad:04:d5:de:b8:
         4e:ea:27:59:29:8e:a6:aa:bf:84:5f:60:93:c5:ee:a2:9b:4a:
         3d:7b:d9:ea:80:43:98:37:67:13:1a:3e:26:47:da:ea:c7:25:
         5e:48:01:30:13:98:d6:7a:5f:9c:0d:0e:37:ac:5d:b9:ee:cc:
         d7:0e:b3:c6:d9:05:4c:b5:3b:b6:0f:f8:5c:74:01:1f:42:3b:
         76:60:a6:b6:35:02:b4:aa:91:b8:42:38:49:5b:5d:ab:a4:3d:
         a2:92:4a:1c:d3:a4:ce:ae:d3:bd:d8:f7:26:59:32:42:54:b5:
         84:21:da:92:76:57:d0:81:1d:a2:b5:87:6b:dc:fb:e2:d1:62:
         94:28:19:36:4e:ad:94:8a:6d:32:cc:f9:33:7a:98:f4:e3:30:
         2f:4b:b3:4e:b6:61:85:b2:c1:18:38:ed:fa:6c:0b:97:a3:c5:
         be:81:d2:c7:93:8c:bf:c3:8e:69:a0:d1:06:f1:b8:d3:3d:bd:
         19:f8:38:e1:f9:cd:04:d0:c0:c8:eb:78:ca:ea:9e:ac:3d:a2:
         b8:83:2e:52:ed:96:19:6e:57:93:be:01:7e:20:a0:61:2d:07:
         13:9c:a3:76:1e:1a:03:fd:0d:59:b9:c0:68:d8:54:e7:41:a4:
         5e:ca:95:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:46:23 2026 by rpki-client