This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC295786EB9611F0A9010FB5DAE4EC9C.roa
File:                     FC295786EB9611F0A9010FB5DAE4EC9C.roa (raw, json)
Hash identifier:          Aa8BgskN4lfkCOVYRzYIGb6iyG42C1N/v6pFxe9DSQ8=
Subject key identifier:   CB:D6:FF:10:50:4D:24:BE:7D:0A:30:D4:B7:4C:DA:0D:76:5F:C1:BF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0194C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC295786EB9611F0A9010FB5DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 07:03:36 +0000
ROA not before:           Wed 07 Jan 2026 07:03:31 +0000
ROA not after:            Fri 23 Jan 2026 07:03:31 +0000
asID:                     141883
IP address blocks:        156.246.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103621 (0x194c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  7 07:03:31 2026 GMT
            Not After : Jan 23 07:03:31 2026 GMT
        Subject: CN=695e0548-920c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:5b:7f:7a:4d:c1:6b:ac:19:57:e9:8f:d8:
                    b3:4f:5e:f7:3b:06:51:e5:36:6f:fa:86:3f:f6:df:
                    b4:80:d9:71:3c:14:71:ff:2b:e7:28:b8:a6:31:59:
                    4c:19:88:81:7c:eb:f3:ab:28:af:ff:ad:74:06:59:
                    d9:30:7c:bb:2e:24:91:ce:a3:a6:52:61:a4:36:8e:
                    08:a0:bb:16:40:26:14:dd:dc:44:1f:32:1b:02:eb:
                    2e:da:fe:7d:e9:e7:94:ab:88:ab:47:74:da:1e:40:
                    7b:36:fa:56:79:c9:2a:89:b4:8c:c2:08:b4:4c:c6:
                    4c:eb:6a:17:0c:e5:cf:bc:41:62:a8:31:48:a8:61:
                    18:1f:9c:20:14:76:04:ce:53:17:da:d1:de:97:6c:
                    aa:b4:b7:a6:e0:0e:d3:17:2c:2b:5e:09:8f:cd:40:
                    d3:f0:04:9f:37:2d:67:d0:7d:20:52:b5:ec:e3:d6:
                    4c:8a:e7:0b:25:9d:55:87:9b:b2:b7:25:53:ed:fa:
                    0c:62:7a:69:35:85:ec:72:bc:82:6b:2b:a6:34:08:
                    e8:c4:bd:63:e1:21:a4:b7:cc:c0:e8:f6:4c:c5:d0:
                    74:aa:99:52:14:60:08:dd:e6:e6:cb:d3:64:48:62:
                    cd:96:25:7a:62:79:5b:b5:f8:ee:3c:36:8c:1c:61:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D6:FF:10:50:4D:24:BE:7D:0A:30:D4:B7:4C:DA:0D:76:5F:C1:BF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC295786EB9611F0A9010FB5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:76:27:6c:0d:f2:1c:65:86:e1:e2:44:75:09:4b:d1:ce:4a:
         b8:ad:76:e9:7d:ec:3b:9b:b2:6e:01:91:13:23:27:1f:13:a3:
         ee:f4:d8:06:9b:88:38:6b:3f:58:6b:6f:eb:83:bf:ce:7a:4d:
         f4:9d:12:bc:4b:55:aa:b9:44:3d:16:f6:a0:35:14:06:79:c1:
         f2:da:55:18:8c:57:10:9f:47:61:25:88:41:68:f3:be:0f:33:
         49:f9:43:8d:5f:da:35:d2:77:38:46:0c:cf:86:f8:bf:bb:55:
         68:82:2a:9f:26:c2:f6:40:07:a8:3a:b5:e9:92:54:44:e6:de:
         01:53:86:3b:0e:a6:bf:6b:49:54:d5:0a:8e:7a:be:73:1e:e5:
         44:a8:12:42:f4:38:f2:c1:3d:6b:a3:64:79:b1:f1:d2:5e:16:
         7b:09:c5:14:8f:15:1c:71:e8:19:e5:3e:69:e6:41:12:7e:49:
         92:ff:9e:74:b9:cc:ed:29:a0:b1:d5:fd:28:bd:f3:1d:28:41:
         18:dc:3f:7b:5b:9a:3b:d5:17:a2:33:f7:da:7e:96:10:0f:f8:
         cb:d4:c2:7b:81:4e:23:d4:38:0f:db:75:f0:75:8b:ce:3d:21:
         74:f6:b3:34:25:7b:a5:cb:2c:58:c9:0b:ab:77:e4:7a:e2:14:
         92:f6:08:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:14 2026 by rpki-client