This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7A6C38CF1E511F0B15FD785DAE4EC9C.roa
File:                     B7A6C38CF1E511F0B15FD785DAE4EC9C.roa (raw, json)
Hash identifier:          0Pz+YCAGkuJyoi7TxG9fqv82OC8Exjg0w5skOlglP+g=
Subject key identifier:   31:89:6A:23:65:9F:11:CF:83:C6:06:D6:E2:C7:5B:01:03:87:D1:8E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0196F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7A6C38CF1E511F0B15FD785DAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 07:42:18 +0000
ROA not before:           Thu 15 Jan 2026 07:42:14 +0000
ROA not after:            Sat 14 Feb 2026 07:42:14 +0000
asID:                     269070
IP address blocks:        156.249.64.0/24 maxlen: 24
                          156.249.65.0/24 maxlen: 24
                          156.249.66.0/24 maxlen: 24
                          156.249.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104179 (0x196f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 15 07:42:14 2026 GMT
            Not After : Feb 14 07:42:14 2026 GMT
        Subject: CN=69689a5a-96e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:1c:60:d5:b9:84:38:57:9f:53:d9:cb:23:
                    e7:fd:44:87:8d:4d:4d:09:fc:d0:35:23:08:e6:57:
                    ae:bb:77:a0:61:46:f4:34:d2:ff:31:3f:2a:f6:02:
                    b3:6a:33:9a:3b:3a:6c:55:4b:00:db:5d:bc:e8:16:
                    71:90:00:0e:e5:77:98:a1:e9:d4:a2:0c:dc:20:fb:
                    18:3f:1d:af:1b:36:de:a4:5c:7a:ad:e7:77:5f:02:
                    b1:56:c4:5a:d9:63:31:60:12:e7:c0:99:4f:46:2f:
                    3f:08:49:77:8d:2e:db:0d:dd:71:68:5b:5b:6b:5f:
                    47:73:86:01:44:5e:7c:b9:1a:2b:5a:8b:cb:e1:59:
                    10:b8:0d:d0:21:db:8a:bb:a7:d3:63:e0:4c:33:47:
                    81:87:1e:dc:c6:d1:48:bd:4d:8d:e0:87:61:2f:35:
                    a7:21:da:ea:eb:bd:44:a0:15:40:67:05:c9:d5:72:
                    e6:7a:65:70:a1:dc:4e:55:64:19:07:60:d1:b6:fb:
                    d5:83:b5:b7:84:35:eb:cc:7c:e7:2e:1b:f1:4a:d0:
                    67:49:6c:17:03:f3:1c:7d:e1:16:b3:62:1d:35:fe:
                    a7:f3:1a:d3:67:af:c1:2a:43:38:de:c4:9f:22:61:
                    67:f4:56:46:5c:7b:48:ac:64:81:5a:e5:ed:bc:ff:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:89:6A:23:65:9F:11:CF:83:C6:06:D6:E2:C7:5B:01:03:87:D1:8E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7A6C38CF1E511F0B15FD785DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:f1:7e:82:7c:68:ea:e6:df:e1:dd:60:5a:aa:00:99:32:
         ea:3b:52:91:f2:8c:93:82:3e:ed:5e:79:59:bb:31:8c:a6:88:
         4e:3f:1f:20:95:6c:29:6a:f7:ee:91:28:64:01:83:2e:d3:10:
         7c:29:3a:f9:9a:2a:97:1d:e0:88:96:86:79:67:16:7e:b6:80:
         93:55:83:7b:d0:63:38:06:e2:f7:9d:e1:b8:cf:03:a6:3a:87:
         93:c7:a8:5e:e7:e1:b3:84:cd:8d:f8:b1:b1:a1:e7:a2:67:ce:
         33:87:a0:28:a2:66:c5:28:f9:00:56:fe:59:a0:d9:ce:dc:cc:
         56:f2:c2:ae:e0:e5:fb:65:1f:53:1f:ab:b3:d8:1b:15:50:b6:
         12:a9:bc:a4:0f:44:dc:81:e9:a4:68:a4:07:19:b9:eb:0f:a6:
         ed:df:11:f3:9a:c9:44:24:32:72:d5:6e:3a:dc:b8:f1:42:74:
         5c:16:f6:6e:cc:08:98:c2:8d:87:9e:df:d0:26:5a:fe:45:97:
         de:32:2d:16:db:bc:df:00:42:dc:7f:f1:87:64:ae:16:60:92:
         85:cc:a7:86:bf:16:79:5c:dd:08:9f:f2:0a:bd:29:17:ae:70:
         45:8c:76:44:8c:58:fc:2e:b2:af:f1:ae:db:e7:e2:1a:53:42:
         58:4e:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:52 2026 by rpki-client