This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8A8699AEBA011F08FB515EFDAE4EC9C.roa
File:                     E8A8699AEBA011F08FB515EFDAE4EC9C.roa (raw, json)
Hash identifier:          pIUVdI12b1hpyrnwpz1X8rdfC+Tkc/NbXV2Ay5JcKhI=
Subject key identifier:   46:04:57:D9:13:04:10:E2:30:82:13:CE:83:6C:D9:8C:B9:5F:06:8A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0194FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8A8699AEBA011F08FB515EFDAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 08:14:38 +0000
ROA not before:           Wed 07 Jan 2026 08:14:34 +0000
ROA not after:            Fri 23 Jan 2026 08:14:34 +0000
asID:                     139646
IP address blocks:        156.246.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103678 (0x194fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  7 08:14:34 2026 GMT
            Not After : Jan 23 08:14:34 2026 GMT
        Subject: CN=695e15ee-30b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f9:83:4b:5c:44:eb:73:6b:8d:29:48:64:e4:
                    ec:5c:70:e4:6b:ea:7b:69:4c:5e:06:0f:fc:36:3c:
                    74:1b:4b:69:35:52:80:ca:18:a0:25:8d:5f:d8:5b:
                    b5:17:a6:78:aa:f4:be:4b:6e:ec:e0:5e:84:e0:20:
                    ab:6e:ff:40:f9:69:ae:68:af:a8:77:a9:29:33:dc:
                    c0:83:a9:be:01:41:dd:01:18:43:e4:c1:21:15:d9:
                    ea:88:99:aa:2e:48:5c:97:8e:8b:bf:fa:57:3f:24:
                    c5:41:62:f7:f5:1c:22:3e:8a:67:99:13:b6:e8:a8:
                    2d:4e:2c:99:76:31:1a:90:4b:4d:4c:d9:3b:26:d5:
                    3b:33:fa:2f:e2:cf:93:86:76:58:06:31:36:93:96:
                    73:f6:9c:99:b3:5d:0c:cf:fc:42:57:b9:d7:a8:bc:
                    d5:e4:49:12:99:ce:c8:06:69:35:b0:e2:aa:47:e3:
                    9e:83:b2:40:23:02:2c:69:3e:6c:9e:89:28:28:08:
                    1a:f4:14:de:95:3f:72:ce:fe:df:be:ae:a2:35:9a:
                    13:91:a1:b3:f3:b1:97:98:ad:b3:ee:a6:d5:6b:7c:
                    e3:39:64:b4:1f:f0:6b:0c:68:2a:fa:fe:51:75:3a:
                    b9:44:42:22:5e:3e:52:12:d2:f8:f8:6f:3e:8c:c1:
                    bf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:04:57:D9:13:04:10:E2:30:82:13:CE:83:6C:D9:8C:B9:5F:06:8A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8A8699AEBA011F08FB515EFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:39:2f:9c:bd:67:6b:a0:59:cc:9c:27:89:e1:2b:ce:7f:25:
         60:38:df:53:6c:b2:8a:75:73:e9:ce:2b:cc:de:e5:04:08:79:
         a9:1a:4f:7c:bd:ba:85:c1:65:f2:58:6a:1f:85:41:74:24:5a:
         da:20:b1:94:ee:6a:b6:d6:ea:ff:8a:80:fc:4c:cd:52:c2:ec:
         22:2c:e9:6e:dd:60:f2:fc:69:88:21:2b:9e:ac:40:c5:71:77:
         3f:c3:84:31:b5:1c:8e:e7:31:63:6a:56:80:30:91:c9:91:42:
         60:f9:4f:a0:fd:82:4c:b4:66:b7:d1:c4:40:3f:5a:37:87:eb:
         8b:b6:5c:8a:d6:6c:14:12:2b:58:6b:f7:18:66:9c:4a:d2:44:
         95:87:77:31:b1:bb:cf:e8:b8:b0:16:c9:d2:38:00:f7:2c:73:
         ea:48:4e:38:5c:22:28:34:c7:0f:4c:e9:45:ad:96:1e:31:a4:
         a1:ac:63:56:16:56:e8:4f:6f:a9:9e:3f:82:bf:10:26:96:fd:
         40:a7:00:cc:63:4a:45:92:0b:ee:91:c0:85:c6:5d:b7:6e:17:
         08:35:ef:cc:d4:e9:cb:78:96:87:dd:4e:05:2a:9d:4e:61:f2:
         14:7e:a5:b0:a4:5b:0d:e5:ad:9a:f2:b3:14:7e:6f:83:14:86:
         9f:a2:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:08 2026 by rpki-client