This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7C1191EEBBE11F0BD1766A6DAE4EC9C.roa
File:                     E7C1191EEBBE11F0BD1766A6DAE4EC9C.roa (raw, json)
Hash identifier:          5CbjFYXuvSxA4dJBNd1xjmTee65ZpcRQ4te8WA95TT4=
Subject key identifier:   47:AB:34:21:AE:B7:02:B3:AE:00:D6:1F:A5:7F:7B:81:AE:09:0B:23
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019528
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7C1191EEBBE11F0BD1766A6DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 11:49:22 +0000
ROA not before:           Wed 07 Jan 2026 11:49:17 +0000
ROA not after:            Mon 19 Jan 2026 11:49:17 +0000
asID:                     141883
IP address blocks:        156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.242.10.0/23 maxlen: 24
                          156.242.12.0/22 maxlen: 24
                          156.246.0.0/20 maxlen: 24
                          156.246.16.0/23 maxlen: 24
                          156.249.28.0/22 maxlen: 24
                          156.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103720 (0x19528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  7 11:49:17 2026 GMT
            Not After : Jan 19 11:49:17 2026 GMT
        Subject: CN=695e4841-7221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:58:4f:9d:71:ed:21:80:a0:83:c6:ee:ee:
                    cc:49:75:ae:16:bc:e3:59:c0:53:21:dd:82:f6:20:
                    d4:c4:e0:11:a1:da:40:8d:9f:3e:f3:31:ed:27:bb:
                    7c:7f:ac:d0:93:aa:c2:7c:65:49:44:11:7c:a7:6b:
                    c5:ba:cc:87:86:26:a2:7d:06:b1:70:5a:3f:c0:fa:
                    e4:e5:9d:cc:85:f9:93:42:86:a7:5b:03:88:19:aa:
                    63:34:6b:ee:09:71:0a:94:6b:95:db:96:10:78:9c:
                    0e:01:36:a2:43:fc:0e:74:cf:20:d8:1d:72:48:61:
                    37:18:d4:32:1f:34:59:1d:14:c1:7f:82:97:4c:04:
                    dd:f3:40:f3:45:39:af:72:d8:65:10:e2:43:4f:b2:
                    99:a4:b8:18:5b:e3:3e:c5:f8:fe:10:8d:46:bf:78:
                    a6:f2:cf:e9:e1:f6:c1:d2:c7:ed:99:f1:ea:10:fc:
                    62:41:6c:d2:4c:97:93:a5:db:53:c6:7b:ce:09:3e:
                    b6:c7:c4:e4:d0:ee:94:8e:0b:32:95:6e:e0:b6:3f:
                    2e:d0:ee:95:b4:0d:15:13:c1:84:53:6a:6c:cf:5b:
                    e6:6e:52:19:40:27:23:da:2d:54:30:9c:00:f7:0e:
                    3d:7b:bd:b7:fb:79:86:d5:29:f4:a2:5f:ec:3e:73:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AB:34:21:AE:B7:02:B3:AE:00:D6:1F:A5:7F:7B:81:AE:09:0B:23
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7C1191EEBBE11F0BD1766A6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.0.0-156.240.55.255
                  156.242.10.0-156.242.15.255
                  156.246.0.0-156.246.17.255
                  156.249.28.0/22
                  156.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:76:d9:e7:2a:0c:60:c2:ab:1b:f5:54:8c:46:b2:5a:ad:36:
         12:5f:03:b7:21:07:12:24:a0:45:7e:41:53:29:c2:22:15:df:
         92:08:bb:31:9b:aa:23:fd:b7:e1:1b:66:1a:85:53:60:0a:e2:
         bc:f7:d4:e8:53:98:44:ca:d6:51:3c:0d:b1:f8:83:6b:08:e9:
         9a:1f:7f:b9:28:13:4f:28:41:4e:fc:b2:17:bd:3d:2e:52:2d:
         c9:96:46:cb:70:f5:d4:a5:36:cc:2a:5d:61:a1:58:63:d1:bf:
         23:ba:cb:47:87:c2:2d:86:cb:9a:e1:d6:3b:67:42:48:c2:f4:
         03:84:90:f8:e6:90:a5:1c:34:f2:01:21:34:3a:e4:b1:01:98:
         c5:8a:f3:e9:b0:32:11:49:ea:b8:ee:59:b7:fb:1f:f2:4b:cc:
         6b:c3:11:e7:be:b8:ea:39:42:9c:ae:cf:23:96:8d:9a:0f:c4:
         28:05:ff:a1:26:31:e4:25:54:4b:d4:a7:f6:e4:04:fd:af:38:
         b6:05:1e:7c:2e:f3:87:24:17:58:47:47:d8:be:02:b0:c5:60:
         b2:da:11:cf:fe:5b:06:38:c4:9f:b0:00:0e:31:60:c8:0d:90:
         24:12:2a:94:36:b7:f2:cd:5b:3b:d0:da:f9:a4:df:a0:b5:3a:
         c4:4f:f6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:26 2026 by rpki-client