This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF8C2CC8F21911F0B601A0BDDAE4EC9C.roa
File:                     DF8C2CC8F21911F0B601A0BDDAE4EC9C.roa (raw, json)
Hash identifier:          c+JyPZhpcclwq33Q86z3GATNWi9t0pnj5npLxnEfOk8=
Subject key identifier:   C8:89:69:7E:B9:43:57:57:C0:85:AA:1C:A9:BC:5F:68:41:49:6F:84
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019728
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF8C2CC8F21911F0B601A0BDDAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 13:55:39 +0000
ROA not before:           Thu 15 Jan 2026 13:55:34 +0000
ROA not after:            Mon 09 Feb 2026 13:55:34 +0000
asID:                     139646
IP address blocks:        156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.242.10.0/23 maxlen: 24
                          156.242.12.0/22 maxlen: 24
                          156.246.0.0/20 maxlen: 24
                          156.246.16.0/23 maxlen: 24
                          156.249.28.0/22 maxlen: 24
                          156.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104232 (0x19728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 15 13:55:34 2026 GMT
            Not After : Feb  9 13:55:34 2026 GMT
        Subject: CN=6968f1db-0b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:0c:ae:2f:8a:7e:32:ac:5f:d0:36:78:64:
                    9d:75:e3:34:db:71:49:c5:bc:56:f8:5e:29:ad:74:
                    9e:11:3e:47:5b:30:6b:68:30:cc:46:c7:32:96:eb:
                    9f:28:6b:bb:a9:0c:b9:95:34:f9:2e:dc:93:77:4b:
                    18:7e:5e:c4:15:49:ec:ce:1a:f2:f8:2f:dd:c4:12:
                    57:b8:a8:34:5e:c4:8d:99:c0:8a:4b:ea:14:c3:48:
                    4b:e5:bc:14:90:8a:f3:c7:56:08:09:fc:ea:6e:4e:
                    67:85:9e:98:1b:77:fe:59:f5:ee:56:c1:6c:5a:a6:
                    f2:80:c9:86:5a:a7:a2:b9:81:43:c2:6c:13:6e:10:
                    f0:de:11:8b:f8:8e:b4:1a:89:b0:47:6e:d5:d8:55:
                    e2:a8:cf:fd:35:a3:10:c9:a8:f3:cc:3f:47:56:4c:
                    6a:06:9f:27:8e:10:97:6e:c1:8d:f9:28:80:d1:fa:
                    61:cf:b0:83:4c:ef:ee:6d:c8:e3:54:fb:b5:c4:aa:
                    fe:0c:7b:b9:4b:94:18:09:29:69:d4:13:56:49:7b:
                    29:ee:9e:b6:42:5a:0a:66:60:1d:69:9e:cc:77:a6:
                    a9:38:cb:f2:90:96:26:d5:8b:69:ff:e5:ff:73:0f:
                    7f:9f:02:a1:c8:9a:95:2b:cd:df:80:26:24:ab:4e:
                    d1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:89:69:7E:B9:43:57:57:C0:85:AA:1C:A9:BC:5F:68:41:49:6F:84
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF8C2CC8F21911F0B601A0BDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.0.0-156.240.55.255
                  156.242.10.0-156.242.15.255
                  156.246.0.0-156.246.17.255
                  156.249.28.0/22
                  156.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:4d:11:eb:71:d9:8c:cd:50:68:c2:2b:43:cb:dd:85:93:91:
         07:d8:53:a9:1b:29:eb:9b:c5:0c:3f:14:d6:76:a5:e1:02:91:
         2f:8c:5c:12:11:e8:0b:36:84:42:97:a0:52:6e:e6:47:2b:06:
         1c:65:32:9d:94:fd:10:1d:22:32:00:83:2b:04:fa:07:e4:f9:
         dc:00:16:04:82:75:8f:c5:ac:a5:ba:a7:1b:f2:bf:06:43:60:
         b9:45:4c:9b:8b:4e:e7:ca:48:37:65:5d:46:16:e7:f6:d0:27:
         0e:f4:82:a0:82:48:0a:0b:a2:65:13:19:01:33:22:57:93:81:
         1a:a9:4a:ca:5d:88:d0:a1:b7:82:6e:12:01:bb:f8:71:4a:d9:
         18:f1:4b:c1:f0:bc:5f:b4:3e:03:23:c5:d9:9c:87:cf:24:35:
         b2:07:0a:62:c6:d1:4a:9a:fd:df:ad:0a:4a:0d:ea:6d:38:ee:
         bc:43:6b:3f:5a:f6:11:ed:34:e2:33:f6:f9:55:b3:cd:02:3e:
         e9:d8:87:e7:e7:d7:26:6e:d0:bf:1d:15:d6:5d:d5:b1:69:5d:
         c4:1e:5e:2b:76:f7:4f:be:7f:51:97:78:b7:2d:8a:d6:b6:58:
         2c:4d:96:b8:fd:0d:c6:c3:e2:60:23:06:00:f3:ba:e1:c8:2e:
         33:be:02:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:16 2026 by rpki-client