This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9705DF20EB9E11F081D7C0E0DAE4EC9C.roa
File:                     9705DF20EB9E11F081D7C0E0DAE4EC9C.roa (raw, json)
Hash identifier:          ZBMe0wCc24+bM64SUg27d4BRQBrXPOzzw9gRJ6BtbdA=
Subject key identifier:   40:8B:9D:3D:50:92:45:AA:09:D8:3A:20:7F:12:35:CB:FE:F6:FA:F5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0194ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9705DF20EB9E11F081D7C0E0DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 07:58:02 +0000
ROA not before:           Wed 07 Jan 2026 07:57:58 +0000
ROA not after:            Fri 23 Jan 2026 07:57:58 +0000
asID:                     139646
IP address blocks:        156.240.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103661 (0x194ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  7 07:57:58 2026 GMT
            Not After : Jan 23 07:57:58 2026 GMT
        Subject: CN=695e120a-ecf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9a:58:87:d1:8a:3d:4b:d1:9b:38:09:9e:2f:
                    cf:2d:f1:c9:ea:97:ed:fc:4a:9b:d8:77:bb:7e:82:
                    20:63:7e:67:26:ae:9b:5c:c3:6a:b8:dd:57:ab:f5:
                    dc:7d:4a:e8:0e:4c:44:2a:5b:0b:b6:9c:25:96:41:
                    62:2b:36:e0:70:09:20:1f:6a:5d:43:48:45:26:c9:
                    ad:ce:d5:ee:95:7f:df:73:31:83:09:ec:66:14:5c:
                    21:60:9b:8a:de:71:54:f2:73:89:64:56:2d:8e:54:
                    b5:10:cf:a6:b9:ec:6b:4b:43:37:34:1b:46:58:54:
                    de:c5:a6:c4:1f:d1:56:97:72:78:0f:f8:4b:ae:03:
                    67:af:b6:63:19:de:fb:28:86:c8:f1:46:ad:d0:23:
                    25:e9:19:60:2c:64:11:00:bb:a9:39:e4:28:e7:c7:
                    90:26:39:da:1b:54:43:16:e5:98:69:f2:c6:61:c2:
                    17:00:52:45:d6:2f:0f:14:ce:c4:86:26:23:51:d6:
                    4d:41:79:61:32:26:a3:5f:38:e6:d6:5c:26:6c:9a:
                    d5:de:65:61:e9:7d:7b:b5:84:52:84:16:da:ff:0e:
                    d3:06:0b:f6:30:3b:b1:8d:4f:ed:d2:f2:a1:d7:84:
                    2f:c6:e1:86:17:d4:b6:53:2f:21:fe:46:13:f6:67:
                    42:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8B:9D:3D:50:92:45:AA:09:D8:3A:20:7F:12:35:CB:FE:F6:FA:F5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9705DF20EB9E11F081D7C0E0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:dc:e1:f1:02:c4:d5:d0:7c:6b:a5:cf:77:08:63:30:38:
         2f:8d:fe:59:8c:9a:be:bc:d7:fb:e0:71:b0:1c:98:b4:6c:98:
         cd:e2:39:04:3b:72:8c:13:21:c1:5f:79:6d:34:72:18:bb:af:
         08:36:88:38:75:54:fb:83:d3:d7:c2:a7:16:35:c0:25:0a:f0:
         35:ff:1d:75:29:a2:96:d0:8d:03:00:58:b6:65:29:85:30:7e:
         b1:0e:17:b9:84:ab:ed:a2:d5:39:b6:66:96:49:01:e2:07:7e:
         cc:5d:ff:69:e5:84:d4:4c:1e:4f:75:8b:14:39:e2:2c:e0:44:
         72:32:52:a4:d8:d9:f0:0f:48:3a:1e:c0:b3:f9:ae:a0:b6:46:
         13:26:d2:48:d0:12:b7:ae:00:a1:d9:f7:79:4e:01:5a:7b:89:
         64:2a:d4:2a:1c:ad:cb:d5:80:4c:c1:cb:8d:2a:82:b2:df:e1:
         5c:df:7b:ae:62:10:5f:67:6a:c8:eb:23:48:f0:fa:ec:cc:16:
         ba:a9:70:d7:c3:8e:eb:9e:f0:98:da:40:67:2e:38:fa:fb:88:
         54:b5:99:eb:fc:8a:22:ba:46:ca:63:38:16:f9:0e:3b:48:d5:
         e4:1c:cf:4f:52:c0:1e:b0:4d:b8:cc:88:3f:47:1d:2e:cf:17:
         52:2f:a3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:30 2026 by rpki-client