This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72756876F1E611F0B2C2008ADAE4EC9C.roa
File:                     72756876F1E611F0B2C2008ADAE4EC9C.roa (raw, json)
Hash identifier:          Gr1nDaGoNjaLCyB+prTU7m8VWTTv/sTfJ8iW7AKeTd0=
Subject key identifier:   43:F1:18:4E:DC:49:27:C6:C2:F8:9C:BC:C6:48:EC:16:88:34:3F:9A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0196F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72756876F1E611F0B2C2008ADAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 07:47:32 +0000
ROA not before:           Thu 15 Jan 2026 07:47:26 +0000
ROA not after:            Sat 14 Feb 2026 07:47:26 +0000
asID:                     213690
IP address blocks:        156.249.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104181 (0x196f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 15 07:47:26 2026 GMT
            Not After : Feb 14 07:47:26 2026 GMT
        Subject: CN=69689b94-1787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:23:7d:eb:f7:10:82:c8:cd:8e:58:99:d6:79:
                    90:64:8f:17:6a:eb:b9:49:e4:c0:43:9e:3d:f7:26:
                    25:b9:a5:43:56:f1:3a:5d:93:b9:20:9f:6f:c8:70:
                    a7:05:d7:f1:d6:a4:24:a0:5d:48:24:70:d9:2c:ea:
                    44:f7:b7:1b:ae:5d:e1:6b:d9:36:9a:f2:44:3b:ad:
                    5c:da:d7:15:cb:b3:1f:f5:12:1c:96:46:85:4d:13:
                    3a:5a:35:98:f9:e1:99:bc:90:f0:9f:93:87:7b:0a:
                    a9:9e:6a:7b:00:d9:c2:a9:ed:87:56:ee:d6:b8:28:
                    fd:f4:a9:e2:d0:61:c6:5e:5a:16:7d:18:77:3b:09:
                    8c:66:a6:ad:68:46:8f:33:22:39:2a:4c:02:6c:c0:
                    6a:67:20:86:74:f9:64:34:a4:cb:cd:87:18:8c:bd:
                    a3:fd:5c:78:65:f3:e6:f1:0c:b9:e9:b7:55:f8:ae:
                    93:d7:61:35:01:05:d1:d7:81:d4:b0:1b:aa:dc:53:
                    4e:07:03:f7:98:9e:08:3c:fd:79:03:db:9c:ce:f7:
                    e4:af:d3:2f:fb:c2:f7:ab:df:17:92:35:d9:28:b7:
                    a6:8e:40:4d:c2:57:12:fb:af:90:d1:5e:b9:aa:6f:
                    ed:6e:51:b2:38:ba:13:8b:b2:41:1a:92:40:34:d0:
                    98:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F1:18:4E:DC:49:27:C6:C2:F8:9C:BC:C6:48:EC:16:88:34:3F:9A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72756876F1E611F0B2C2008ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:49:ab:c5:80:e8:d0:d9:94:c6:ab:c0:59:53:cf:2c:22:1e:
         f1:ef:2b:98:84:46:1d:db:51:f3:09:a7:1c:ab:bc:9a:c5:e5:
         d4:cc:62:5e:65:f8:d4:38:c4:27:6e:24:55:3a:36:74:1d:c5:
         11:0a:c3:6f:28:a0:34:ae:7e:55:e8:45:a4:07:82:e0:48:4c:
         25:ea:95:46:3f:7a:69:2e:33:68:60:d0:4f:e2:cb:0a:0f:7e:
         9d:3f:53:d6:92:28:5a:62:c2:de:a0:5e:21:02:8b:d0:23:45:
         dc:d2:ec:07:3d:1a:80:b9:9b:a2:84:69:8f:88:86:78:20:14:
         19:f0:34:55:ed:5e:6a:47:2e:66:db:2f:6a:42:76:82:28:38:
         74:42:8d:42:3b:db:23:f9:33:db:c0:2d:cd:b6:ce:82:13:9d:
         39:99:4a:30:ca:03:b7:98:31:90:72:91:18:11:eb:97:0d:73:
         f0:68:71:35:d7:ab:db:78:b4:4c:66:a1:be:c1:8f:7c:5c:e2:
         f5:19:c9:fb:af:99:1d:df:18:7e:a4:58:c3:e3:bd:7b:a8:57:
         ee:05:33:2a:a0:2c:0e:85:d1:5d:c6:e9:e8:19:39:cf:72:db:
         77:35:82:d8:0a:96:33:88:e4:e9:d5:ce:b2:c4:9d:e1:2f:36:
         70:2e:99:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:09 2026 by rpki-client