This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B815E5A0ED4E11F09AC913C3DAE4EC9C.roa
File:                     B815E5A0ED4E11F09AC913C3DAE4EC9C.roa (raw, json)
Hash identifier:          wcfJmw8I/Wt6UyFDuyytpaSdnbAiQy1Ucuy23tYNalM=
Subject key identifier:   AE:94:0B:89:29:8A:AF:25:77:C6:10:82:44:E5:CC:82:8E:BA:CF:EC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0195D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B815E5A0ED4E11F09AC913C3DAE4EC9C.roa
Signing time:             Fri 09 Jan 2026 11:31:20 +0000
ROA not before:           Fri 09 Jan 2026 11:31:15 +0000
ROA not after:            Mon 19 Jan 2026 11:31:15 +0000
asID:                     211392
IP address blocks:        156.238.14.0/24 maxlen: 24
                          156.238.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103894 (0x195d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  9 11:31:15 2026 GMT
            Not After : Jan 19 11:31:15 2026 GMT
        Subject: CN=6960e708-7a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dc:30:05:2e:d0:48:e7:34:80:2e:72:31:87:
                    ff:6b:16:2b:08:88:3b:70:3d:55:87:55:8e:89:18:
                    8d:d1:2d:cc:d9:07:4e:fa:77:4a:49:c8:0b:84:57:
                    de:f7:b8:28:79:5f:78:a4:67:77:7f:35:63:f7:7b:
                    78:0b:b4:1e:d8:3c:b7:3f:a1:d4:2a:ac:61:66:8f:
                    7a:ef:08:9e:48:7b:13:9c:96:d6:44:3e:85:ac:d7:
                    a3:8a:78:e4:dd:03:6d:eb:49:3f:01:dc:58:92:48:
                    23:f6:6e:32:d5:d1:c8:0a:95:d5:c1:5f:ac:dd:c4:
                    d4:3d:76:5f:06:e7:68:e6:0c:ba:e5:ed:00:4d:91:
                    c6:ac:75:55:a5:2b:a1:f0:a9:44:46:06:e2:f2:aa:
                    6d:c9:9e:de:66:a8:51:70:ec:db:2e:90:7e:d3:68:
                    cb:61:00:d3:85:4d:8f:6b:ea:e0:ed:5d:58:9e:ad:
                    24:2f:aa:3e:f1:d6:04:61:bc:f0:d4:74:22:e9:19:
                    f9:b9:7a:88:b4:9c:ab:f8:cd:2b:e0:b3:fb:8f:87:
                    8b:f8:d1:f3:5c:30:91:eb:2c:67:f8:48:89:5f:be:
                    86:a7:46:cd:ef:be:a1:7a:c6:2f:2c:45:55:82:33:
                    f2:6e:2e:d2:ef:45:53:01:ae:87:67:4a:05:71:3c:
                    aa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:94:0B:89:29:8A:AF:25:77:C6:10:82:44:E5:CC:82:8E:BA:CF:EC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B815E5A0ED4E11F09AC913C3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:1f:4e:0b:64:06:10:80:ee:84:46:f0:88:6e:a0:0d:b3:cf:
         df:f4:82:4c:5b:79:a0:70:0c:ff:e2:ca:1a:9e:33:e9:b0:4f:
         09:9c:e3:d3:22:ad:b7:a1:15:70:b7:8f:6b:37:a4:ec:e9:3d:
         9b:7f:3f:4e:1f:e7:60:00:35:93:c0:10:5c:6e:f1:cc:01:9a:
         77:35:45:fa:8f:d4:06:86:0f:f2:c3:7d:12:fa:69:f3:96:76:
         e3:88:c1:c4:c5:6c:e1:56:e4:b7:09:ed:57:0d:26:eb:67:37:
         be:eb:1e:c8:9c:50:ce:90:d1:14:83:ff:60:1e:01:21:3c:8f:
         29:a3:bc:63:57:fe:5c:bf:26:dd:f5:ee:97:44:aa:95:53:64:
         7e:5c:c5:c4:49:9e:f4:b3:0d:25:54:48:27:2b:da:0c:d3:55:
         57:8b:d7:22:24:f5:d1:51:dc:1e:ab:03:e3:d6:fe:28:e9:92:
         d9:f1:1f:a5:66:76:10:78:0d:16:05:ae:e6:b0:93:82:51:fc:
         e2:48:d7:5b:71:55:4f:41:81:56:21:b7:ae:d1:f7:bc:b1:5b:
         1f:ce:db:32:33:0b:73:84:31:9b:4f:ae:2a:b7:ac:27:c3:b0:
         1c:9a:f8:65:35:95:a2:92:6d:7d:3e:3c:06:76:e5:aa:3e:69:
         d2:f6:6a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:24 2026 by rpki-client