This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFA9FCEAFDB011F099C367E2DAE4EC9C.roa
File:                     AFA9FCEAFDB011F099C367E2DAE4EC9C.roa (raw, json)
Hash identifier:          clmHAYDKYpg9jL9NQ88mNG7Mxv3dTiyCcAOMMNHLMYs=
Subject key identifier:   FA:AB:ED:BE:09:9F:24:C1:49:5C:75:C2:A2:D3:D1:A6:F1:4B:79:AD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019ACE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFA9FCEAFDB011F099C367E2DAE4EC9C.roa
Signing time:             Fri 30 Jan 2026 07:52:55 +0000
ROA not before:           Fri 30 Jan 2026 07:52:51 +0000
ROA not after:            Fri 13 Feb 2026 07:52:51 +0000
asID:                     18013
IP address blocks:        156.239.243.0/24 maxlen: 24
                          156.239.244.0/22 maxlen: 24
                          156.239.244.0/23 maxlen: 24
                          156.239.244.0/24 maxlen: 24
                          156.239.245.0/24 maxlen: 24
                          156.239.246.0/23 maxlen: 24
                          156.239.246.0/24 maxlen: 24
                          156.239.247.0/24 maxlen: 24
                          156.239.248.0/21 maxlen: 24
                          156.239.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Feb 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105166 (0x19ace)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 30 07:52:51 2026 GMT
            Not After : Feb 13 07:52:51 2026 GMT
        Subject: CN=697c6357-a550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:89:1a:8b:6a:38:f7:da:8a:ed:b0:79:ac:
                    e4:6d:c6:a5:48:3a:99:a2:d6:3c:19:5f:e9:a3:67:
                    a5:66:46:83:9f:d0:5b:e9:3f:4a:1d:a6:11:d0:32:
                    6d:11:34:3f:48:5a:ab:ee:0e:45:5b:6f:ad:3b:c7:
                    05:9a:01:9b:6a:c1:da:b3:1f:b8:8c:ab:c6:3c:a7:
                    31:ab:df:b0:a9:24:e1:d8:b1:9c:94:c6:6b:71:16:
                    57:97:ba:9a:a0:ea:16:ff:75:d4:22:95:4b:27:50:
                    dd:f4:ee:b7:68:7a:5f:0a:c9:ca:cc:f1:7e:c2:83:
                    d2:b1:cb:c2:bd:49:08:11:e0:31:ca:e1:75:5f:23:
                    c8:99:c2:f1:9e:c6:ee:34:f9:6c:74:e1:90:30:cd:
                    f5:cd:0b:d6:c0:45:53:50:d2:ad:c0:02:6c:1a:bc:
                    a8:f4:97:99:8e:6a:2c:eb:e9:fb:8a:63:9c:2e:89:
                    89:ac:3b:b9:37:ca:c2:d5:77:29:3c:13:1d:33:ba:
                    67:0d:29:13:23:b4:bc:0e:10:cd:13:e5:b8:a4:33:
                    8e:47:c8:d5:d9:03:3f:f2:ac:fd:d7:9d:09:a9:39:
                    21:2c:98:29:b3:09:5a:72:7f:02:b8:11:f1:68:26:
                    41:de:42:af:1b:03:a7:e7:99:5f:0f:3c:e9:b6:4b:
                    09:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AB:ED:BE:09:9F:24:C1:49:5C:75:C2:A2:D3:D1:A6:F1:4B:79:AD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFA9FCEAFDB011F099C367E2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.243.0-156.239.255.255

    Signature Algorithm: sha256WithRSAEncryption
         2d:71:df:3d:f3:89:82:5d:14:2a:20:c3:9c:ee:f5:17:f3:d9:
         54:7e:4f:74:7b:b0:12:75:df:c2:1f:94:8d:a1:c4:2d:a9:d8:
         27:b0:3f:a6:3a:af:52:d6:df:aa:86:7e:72:7f:90:95:92:f8:
         ee:4a:4f:99:3e:29:33:60:14:cd:f4:de:3b:12:15:a5:f3:a0:
         1c:72:6c:2c:f2:23:a1:b3:ef:10:ec:a8:55:a5:5a:a9:d6:84:
         d3:6b:2b:71:cb:ea:f7:26:ec:2e:ee:cb:78:09:bc:44:17:01:
         2d:ce:53:9c:ea:dd:90:e9:a6:c9:65:a9:ca:57:36:fd:b1:3f:
         10:89:af:91:f5:9d:ce:8a:0e:b7:e3:65:fd:14:d4:3c:3e:2e:
         bc:cc:a2:cd:e0:5c:b6:03:1a:e4:87:d8:fb:84:56:6f:5c:ed:
         f2:f4:6c:b8:7a:08:56:b2:01:b4:80:54:c8:ec:48:4b:24:3a:
         5c:46:4b:db:50:31:b5:81:7b:44:1b:c9:e4:75:8f:b5:d3:8e:
         ee:c9:d3:03:e4:b1:08:d6:47:59:2a:94:17:6a:3c:81:39:b9:
         06:7b:5d:a0:b4:12:58:ca:32:3c:7b:6c:2a:41:16:6e:91:ca:
         89:da:49:55:ed:82:2c:7a:e1:8f:34:17:70:3b:b6:ef:11:3d:
         92:a2:aa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 13:13:42 2026 by rpki-client