This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E034C2E601CA11F19E860499DAE4EC9C.roa
File:                     E034C2E601CA11F19E860499DAE4EC9C.roa (raw, json)
Hash identifier:          ChHxMadIwXz+Tq9S7wDItYZ5u9chHCnOgTgPFOaza6M=
Subject key identifier:   CD:82:A2:5D:4D:9E:F9:84:29:77:1E:BB:E0:2E:BF:F0:A0:83:6A:BE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019BD5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E034C2E601CA11F19E860499DAE4EC9C.roa
Signing time:             Wed 04 Feb 2026 13:10:28 +0000
ROA not before:           Wed 04 Feb 2026 13:10:24 +0000
ROA not after:            Thu 12 Mar 2026 13:10:24 +0000
asID:                     55320
IP address blocks:        156.244.23.0/24 maxlen: 24
                          156.244.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Feb 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105429 (0x19bd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb  4 13:10:24 2026 GMT
            Not After : Mar 12 13:10:24 2026 GMT
        Subject: CN=69834544-782e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:43:da:4f:c7:f8:7a:d6:c8:d0:a2:1f:ea:7d:
                    53:48:4f:72:ec:ea:7f:4c:d6:e1:7b:f2:9e:71:37:
                    65:20:e6:a2:e3:d4:58:3f:a5:1f:d8:26:03:13:58:
                    fe:0d:72:bb:37:b1:04:a1:4f:87:41:fc:4a:4b:41:
                    27:97:4d:da:b3:a8:55:f1:80:fc:b6:d2:14:ab:6c:
                    96:a1:2c:bc:d9:c5:fc:40:df:e8:28:8d:0a:17:44:
                    95:3f:57:0a:08:45:78:1a:df:9a:9c:10:1d:2a:ce:
                    e2:f9:84:fc:9f:e9:78:e8:55:f8:e5:df:c3:2f:59:
                    fc:be:7e:82:b4:db:3b:cf:1f:5c:c4:52:bc:09:82:
                    f9:78:5b:d7:03:04:e9:ca:66:95:9c:1d:2e:20:6b:
                    4e:98:ae:fe:6c:e6:05:65:54:67:55:6f:7f:27:5c:
                    1a:a7:aa:de:ca:cb:26:9c:d1:a5:35:37:0a:97:31:
                    27:bb:f4:de:6c:33:11:51:24:33:40:67:f1:1c:a6:
                    34:91:0b:7d:2b:bb:0b:b7:62:62:dd:ed:8a:46:03:
                    f1:b9:75:e4:46:ee:52:5d:78:c1:ff:2b:66:b7:c4:
                    42:0f:06:72:4e:f0:09:6c:9f:83:8b:8b:70:68:c7:
                    9b:7c:72:7e:f5:dd:07:92:80:01:dd:ee:8f:54:da:
                    80:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:82:A2:5D:4D:9E:F9:84:29:77:1E:BB:E0:2E:BF:F0:A0:83:6A:BE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E034C2E601CA11F19E860499DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.23.0-156.244.24.255

    Signature Algorithm: sha256WithRSAEncryption
         80:ba:d7:c9:42:54:0d:74:08:07:40:46:70:08:72:77:88:72:
         04:36:cd:5b:62:85:b3:63:de:1d:cc:be:a1:1a:6e:61:a2:8b:
         d9:e7:6c:d3:c8:98:a5:c6:78:e7:d1:16:20:b7:7d:52:d7:c5:
         2c:3a:3b:d3:ac:13:e2:6e:85:d7:36:5e:0e:b6:ba:89:32:2e:
         ca:14:df:7a:44:77:55:47:90:a5:2c:b9:6b:65:b3:51:e7:65:
         c9:a8:4e:fe:ae:6d:e9:8e:4c:bf:ed:ea:76:ce:f5:0b:9c:60:
         d1:96:a0:36:4b:2b:84:e7:a6:3b:19:ee:c2:1d:e8:9f:1b:a1:
         6d:4b:af:e7:ed:a3:56:18:25:97:48:51:4d:3c:d8:08:ea:cf:
         08:ed:5b:91:43:1c:3f:69:23:b2:29:e8:dc:12:b4:8f:7b:bd:
         bf:38:18:ae:fb:35:0e:f5:15:df:d1:1c:28:63:d0:f9:45:49:
         55:de:27:46:06:ed:4d:82:6b:cd:34:cf:50:b7:a2:24:59:ee:
         1d:78:0c:cd:98:e9:eb:11:81:4e:fb:35:c4:74:b5:29:07:eb:
         9d:cb:a9:3d:14:70:b3:f2:80:fd:88:48:a5:21:d4:d5:6a:22:
         16:2e:40:70:1d:c7:40:90:4c:95:e1:88:3d:73:fc:0c:ba:d8:
         8e:2b:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 07:44:32 2026 by rpki-client