This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91FE95B8ED4B11F09F7B49B2DAE4EC9C.roa
File:                     91FE95B8ED4B11F09F7B49B2DAE4EC9C.roa (raw, json)
Hash identifier:          4Fnv5EHsmfscAWtUoVYriCQkOTS/AelJ2qi7O+ytQ5g=
Subject key identifier:   E2:69:F2:AD:42:B2:19:BF:C4:1F:01:F5:AD:E3:B9:21:A5:30:9D:9A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0195CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91FE95B8ED4B11F09F7B49B2DAE4EC9C.roa
Signing time:             Fri 09 Jan 2026 11:08:48 +0000
ROA not before:           Fri 09 Jan 2026 11:08:43 +0000
ROA not after:            Sun 18 Jan 2026 11:08:43 +0000
asID:                     134365
IP address blocks:        156.239.240.0/24 maxlen: 24
                          156.239.241.0/24 maxlen: 24
                          156.239.242.0/24 maxlen: 24
                          156.239.243.0/24 maxlen: 24
                          156.239.244.0/23 maxlen: 24
                          156.239.246.0/23 maxlen: 24
                          156.239.248.0/23 maxlen: 24
                          156.239.250.0/23 maxlen: 24
                          156.239.252.0/23 maxlen: 24
                          156.239.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 Jan 2026 11:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103886 (0x195ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  9 11:08:43 2026 GMT
            Not After : Jan 18 11:08:43 2026 GMT
        Subject: CN=6960e1c0-609b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:02:88:98:3b:79:17:93:44:2e:3c:d6:e1:
                    3e:98:fb:4c:19:a5:c4:51:a0:02:11:1f:3e:19:15:
                    d6:2b:25:fb:ec:22:34:7e:af:7f:ea:92:46:cd:d5:
                    bb:ff:d5:fa:82:14:94:24:4c:ac:50:d0:57:7c:15:
                    18:44:2e:dc:61:54:43:f9:98:a6:ef:64:89:a5:ee:
                    0f:ce:db:a3:4b:b8:e2:2c:e4:0c:46:03:b4:12:cd:
                    f8:e5:23:f3:93:72:d4:e8:c2:8a:0c:fb:1f:f2:11:
                    a8:0e:43:36:0b:6d:b4:9e:9f:63:dc:81:ef:28:92:
                    c7:6b:d4:f3:f1:7f:9e:9b:1a:2d:ff:3c:76:8d:6e:
                    aa:49:a1:74:8e:24:20:64:e0:8d:49:c9:7f:52:24:
                    e1:e5:09:f8:aa:a4:dc:7e:6c:c0:2d:1c:e7:9a:6d:
                    04:45:1a:64:cf:23:38:65:03:21:58:22:78:78:25:
                    99:55:c3:9a:a4:e4:51:ce:b1:6b:d7:ee:3c:4a:48:
                    93:10:86:58:bf:07:ad:dd:87:b6:56:39:ef:e4:9b:
                    9b:7c:4a:98:62:1a:9e:22:1b:bd:bc:d9:b5:29:20:
                    57:8d:7b:1b:8a:53:f5:a9:b2:5e:da:81:3a:61:1e:
                    93:ae:00:03:d5:9b:8d:87:7b:1a:e1:9c:1c:b9:f8:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:69:F2:AD:42:B2:19:BF:C4:1F:01:F5:AD:E3:B9:21:A5:30:9D:9A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91FE95B8ED4B11F09F7B49B2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:10:43:ce:a0:e9:57:3f:a0:98:66:05:28:ca:2f:e5:62:96:
         35:1e:cd:e1:ac:db:98:7f:1a:ab:c1:81:a5:38:1b:3d:1e:51:
         05:ee:29:db:9f:95:49:9a:27:41:40:5e:7f:85:78:a9:8e:a9:
         7a:20:ba:78:ef:f2:c5:64:c8:bf:72:6a:52:57:75:ed:12:5c:
         f0:62:44:2e:d9:da:b7:5a:34:b5:32:44:b5:5b:bd:9d:6c:08:
         3d:0e:78:60:70:26:d0:a6:20:05:6d:45:b9:b1:71:ce:93:ff:
         4c:e6:4f:57:fc:d9:05:30:51:d0:a5:d2:49:d4:e1:46:41:00:
         b0:87:1a:0d:b9:47:ea:1e:11:7c:e5:7d:c2:b1:22:f4:20:23:
         b9:2b:54:82:fd:fd:a6:53:1d:47:15:be:69:da:32:47:af:07:
         6f:ed:b6:52:b2:f9:64:e8:11:d5:93:27:40:07:9e:fd:fd:e6:
         e3:f3:90:97:c3:15:a6:f0:fe:6e:dd:0b:74:9b:72:5a:65:c1:
         fb:3e:d4:f0:a4:00:a6:27:fa:bb:a2:f4:f1:e2:02:f3:0a:27:
         28:12:1b:5a:b8:0f:5b:32:10:c8:16:53:74:b3:c5:9f:d7:6b:
         9d:b0:8c:4b:a5:86:d8:4d:b7:23:00:0a:30:88:5f:c3:b4:c9:
         0a:8d:6f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:18 2026 by rpki-client