This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C51A9E4FDCF11F0A9BB1E9EDAE4EC9C.roa
File:                     9C51A9E4FDCF11F0A9BB1E9EDAE4EC9C.roa (raw, json)
Hash identifier:          9rasbYaIGC7moxquNi6MsJTTEgOU7Ya4k4LIP5281S0=
Subject key identifier:   88:D8:A1:0C:B1:05:A1:E2:F3:77:AE:BF:FA:57:1D:34:0D:83:50:73
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019AFC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C51A9E4FDCF11F0A9BB1E9EDAE4EC9C.roa
Signing time:             Fri 30 Jan 2026 11:34:18 +0000
ROA not before:           Fri 30 Jan 2026 11:34:12 +0000
ROA not after:            Fri 13 Feb 2026 11:34:12 +0000
asID:                     18013
IP address blocks:        156.239.228.0/22 maxlen: 24
                          156.239.228.0/23 maxlen: 24
                          156.239.228.0/24 maxlen: 24
                          156.239.229.0/24 maxlen: 24
                          156.239.230.0/23 maxlen: 24
                          156.239.230.0/24 maxlen: 24
                          156.239.231.0/24 maxlen: 24
                          156.239.232.0/22 maxlen: 24
                          156.239.232.0/23 maxlen: 24
                          156.239.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Feb 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105212 (0x19afc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 30 11:34:12 2026 GMT
            Not After : Feb 13 11:34:12 2026 GMT
        Subject: CN=697c9739-0067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:45:dd:b3:8f:fe:c5:f5:3e:ab:95:a0:8c:
                    13:dc:52:78:00:3f:a2:21:53:cb:4d:68:80:5a:0b:
                    db:a0:17:b9:0a:fc:c3:46:13:cb:ed:10:1e:66:71:
                    d5:15:08:df:1b:1b:2a:b6:7a:cc:12:f8:cb:0c:10:
                    bb:aa:bb:b9:fa:19:f9:19:2c:e7:f9:2e:96:80:c8:
                    a0:da:af:78:17:c9:70:2c:e2:3e:3e:42:69:c0:6b:
                    0b:2b:e8:25:76:4d:2c:81:d3:f3:37:29:82:57:6b:
                    a5:a7:90:53:45:cf:24:d0:77:9b:27:32:ab:b6:a6:
                    b8:af:0d:98:98:c4:c0:38:03:6f:a5:43:55:28:02:
                    bf:5e:6d:9c:1e:6a:95:13:d9:f3:8e:12:5a:b7:be:
                    e9:eb:27:cb:84:e8:0e:17:2b:d7:9a:be:41:77:79:
                    85:d6:5f:b0:23:82:a7:48:bc:8e:b7:5d:cf:7b:07:
                    fb:fb:ce:c9:38:e0:1b:e7:5e:28:0e:62:a1:06:29:
                    13:23:cf:37:24:ea:d5:92:ed:c3:94:6d:f8:30:21:
                    d2:27:24:be:cc:19:cd:36:1c:eb:f2:c2:96:a2:fb:
                    81:cb:9d:09:86:c5:66:ac:b3:98:49:de:35:90:70:
                    4c:96:2f:4d:97:85:e6:a9:68:64:4c:21:f4:e7:77:
                    b3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D8:A1:0C:B1:05:A1:E2:F3:77:AE:BF:FA:57:1D:34:0D:83:50:73
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C51A9E4FDCF11F0A9BB1E9EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.228.0-156.239.235.255

    Signature Algorithm: sha256WithRSAEncryption
         60:74:00:c3:0a:19:4b:80:84:3a:1a:39:01:78:69:e5:4e:de:
         9e:5e:13:6b:80:b5:20:9f:4b:e2:94:a6:2e:b0:fb:7d:6d:94:
         69:07:d5:b4:9c:d5:c3:1e:a1:42:45:02:b0:69:c3:77:03:12:
         e3:8c:48:fc:6d:7f:5f:3b:8c:d5:29:24:e4:00:62:ec:89:30:
         cb:e6:a0:7e:f6:dc:6b:4a:8d:91:2d:36:f1:45:a5:cd:69:c8:
         8f:5c:cd:78:90:f1:d5:ab:99:ff:6e:24:bd:cd:39:4d:ef:3a:
         02:8a:e3:69:57:5f:91:85:7b:4f:ab:44:2f:af:c2:44:b3:f0:
         3b:7a:df:cf:3e:bf:6c:c3:47:f5:d8:79:c1:53:13:7c:f8:a3:
         55:ae:4d:92:f3:02:42:ce:a3:8f:be:7e:13:1c:d6:14:8d:e4:
         44:d3:bc:96:ae:6e:10:e7:a2:21:03:56:39:53:b6:30:04:0f:
         61:da:ea:2f:0e:26:7f:e1:24:6e:ca:76:c3:e0:6a:d5:de:44:
         56:8f:3d:6d:97:93:e5:ca:7e:09:db:de:28:f8:f5:a3:a2:a1:
         da:94:30:5d:21:bd:f1:24:1e:02:2e:37:a4:2a:16:4a:b0:64:
         ef:0d:31:81:12:a9:50:8e:ca:0f:4a:85:2b:80:39:3a:aa:5d:
         26:ee:85:c9
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAZr8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTMwMTEzNDEyWhcNMjYwMjEzMTEzNDEyWjAYMRYw
FAYDVQQDEw02OTdjOTczOS0wMDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw19F3bOP/sX1PquVoIwT3FJ4AD+iIVPLTWiAWgvboBe5CvzDRhPL7RAe
ZnHVFQjfGxsqtnrMEvjLDBC7qru5+hn5GSzn+S6WgMig2q94F8lwLOI+PkJpwGsL
K+gldk0sgdPzNymCV2ulp5BTRc8k0HebJzKrtqa4rw2YmMTAOANvpUNVKAK/Xm2c
HmqVE9nzjhJat77p6yfLhOgOFyvXmr5Bd3mF1l+wI4KnSLyOt13Pewf7+87JOOAb
514oDmKhBikTI883JOrVku3DlG34MCHSJyS+zBnNNhzr8sKWovuBy50JhsVmrLOY
Sd41kHBMli9Nl4XmqWhkTCH053ezNwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFIjY
oQyxBaHi83euv/pXHTQNg1BzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QzUxQTlFNEZEQ0YxMUYwQTlCQjFFOUVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKc7+QDBAKc7+gwDQYJKoZI
hvcNAQELBQADggEBAGB0AMMKGUuAhDoaOQF4aeVO3p5eE2uAtSCfS+KUpi6w+31t
lGkH1bSc1cMeoUJFArBpw3cDEuOMSPxtf187jNUpJOQAYuyJMMvmoH723GtKjZEt
NvFFpc1pyI9czXiQ8dWrmf9uJL3NOU3vOgKK42lXX5GFe0+rRC+vwkSz8Dt6388+
v2zDR/XYecFTE3z4o1WuTZLzAkLOo4++fhMc1hSN5ETTvJaubhDnoiEDVjlTtjAE
D2Ha6i8OJn/hJG7KdsPgatXeRFaPPW2Xk+XKfgnb3ij49aOiodqUMF0hvfEkHgIu
N6QqFkqwZO8NMYESqVCOyg9KhSuAOTqqXSbuhck=
-----END CERTIFICATE-----
Generated at Wed Feb 4 13:14:42 2026 by rpki-client