This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2648C82FCEB11F0BE5E2AA9DAE4EC9C.roa
File:                     F2648C82FCEB11F0BE5E2AA9DAE4EC9C.roa (raw, json)
Hash identifier:          LPbrwgz/mTWyZVHnKwuyBm5eoTGbFfG9VC9uwBEUFGI=
Subject key identifier:   EF:CE:C6:CA:E6:3A:E9:E1:5F:6D:C5:31:77:D2:91:DC:47:61:7D:41
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019A8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2648C82FCEB11F0BE5E2AA9DAE4EC9C.roa
Signing time:             Thu 29 Jan 2026 08:24:36 +0000
ROA not before:           Thu 29 Jan 2026 08:24:32 +0000
ROA not after:            Sat 07 Mar 2026 08:24:32 +0000
asID:                     401701
IP address blocks:        156.238.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Feb 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105102 (0x19a8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 29 08:24:32 2026 GMT
            Not After : Mar  7 08:24:32 2026 GMT
        Subject: CN=697b1944-e203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:00:f1:dc:c9:d0:08:a0:1f:cf:63:95:27:
                    5d:a1:84:53:f0:17:6c:10:9d:eb:1e:8e:95:66:4b:
                    ac:dd:f9:ea:86:48:2d:c5:b2:ee:8b:ff:17:2c:d8:
                    64:27:22:ef:78:02:89:7b:ad:75:42:cf:a3:d9:22:
                    27:9b:f1:17:19:8c:d2:d4:d8:8d:99:5b:40:9f:fb:
                    5c:5e:a2:ea:87:d1:59:fd:6e:a7:c8:38:2b:4a:af:
                    ed:c2:7f:8a:5a:56:b3:65:24:d9:9f:f7:37:d4:2a:
                    91:1e:5e:ce:27:b8:f8:32:d3:8c:fa:21:b6:4b:64:
                    97:5c:74:0c:c2:fa:92:1c:29:ee:aa:0c:ba:00:d2:
                    d2:e7:dd:a3:ba:7b:86:99:2e:c0:61:b1:37:b7:3a:
                    8b:cb:93:de:b8:fd:45:75:4a:8f:68:67:11:4d:ab:
                    36:f9:54:38:b3:ca:fa:ff:4d:a9:14:31:ca:a2:7c:
                    43:97:81:bf:52:4b:5d:2c:3f:5e:6b:8d:9e:c1:39:
                    80:15:78:85:54:0b:30:61:be:2f:2e:b3:86:71:ac:
                    77:29:d4:00:4b:c0:e5:d5:82:84:c8:ce:7d:a0:8e:
                    60:06:c8:22:c3:aa:8b:7f:11:ba:65:0f:2d:01:15:
                    ff:ea:91:3d:28:06:3e:88:33:77:d1:18:0c:77:35:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CE:C6:CA:E6:3A:E9:E1:5F:6D:C5:31:77:D2:91:DC:47:61:7D:41
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2648C82FCEB11F0BE5E2AA9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:5c:59:1d:a0:2e:2d:a2:41:c0:00:bd:12:28:fe:c2:16:c9:
         70:51:ab:af:2a:36:7a:a2:a9:20:48:57:79:ce:f7:45:11:5d:
         7a:d8:bf:6d:25:b5:9f:55:7d:1d:c9:06:46:53:70:55:9f:dc:
         22:ad:65:75:86:ff:24:b3:38:7a:41:3e:7d:24:98:11:a1:0f:
         e2:07:3a:41:ae:39:4b:b1:9a:56:57:ff:09:6c:64:f0:b5:e8:
         c0:50:f3:1e:f3:bd:e4:32:32:78:b7:cf:cb:e2:46:8d:41:ea:
         23:fa:e5:34:77:9f:9f:c9:1b:95:21:59:4a:73:1c:08:8f:eb:
         8a:f3:f4:ab:42:bc:88:64:a4:ef:4f:8e:6c:1d:a4:84:c2:6c:
         c9:a1:f3:93:da:7e:60:47:db:b2:3d:85:78:b2:dd:f7:94:71:
         33:d3:5d:95:b4:8d:c4:14:fe:92:f4:25:6e:01:c5:d1:81:12:
         5b:50:58:0b:1c:ad:b6:e3:e5:89:e7:f3:a6:65:85:3d:7a:95:
         31:44:54:80:a4:a8:03:80:44:3a:32:75:9e:5e:f3:d1:cc:ef:
         c0:36:e4:0e:32:88:b4:81:29:c2:22:08:30:cd:7c:6f:96:03:
         d5:6f:d2:75:9a:14:af:a4:21:29:6b:89:db:ad:c2:b9:88:4e:
         fd:3c:59:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 12:59:11 2026 by rpki-client