This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0089E8DCF96A11F0B4B4918ADAE4EC9C.roa
File:                     0089E8DCF96A11F0B4B4918ADAE4EC9C.roa (raw, json)
Hash identifier:          MdXUj9gBYtUwkp2RDHls3NSvragwXFivO4AzsXFch1g=
Subject key identifier:   EA:B9:99:9D:B3:55:18:E0:04:7D:79:60:DC:A4:E9:E3:CB:81:28:0A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01999E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0089E8DCF96A11F0B4B4918ADAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 21:16:52 +0000
ROA not before:           Sat 24 Jan 2026 21:16:46 +0000
ROA not after:            Tue 03 Mar 2026 21:16:46 +0000
asID:                     44559
IP address blocks:        156.233.32.0/24 maxlen: 24
                          156.239.154.0/24 maxlen: 24
                          156.239.155.0/24 maxlen: 24
                          156.243.32.0/24 maxlen: 24
                          156.243.33.0/24 maxlen: 24
                          156.243.80.0/24 maxlen: 24
                          156.243.132.0/24 maxlen: 24
                          156.243.133.0/24 maxlen: 24
                          156.243.139.0/24 maxlen: 24
                          156.243.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104862 (0x1999e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 21:16:46 2026 GMT
            Not After : Mar  3 21:16:46 2026 GMT
        Subject: CN=697536c4-fec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:f3:67:12:c9:a3:e1:4c:9c:27:d1:33:af:
                    29:ec:b5:26:30:94:69:e1:69:c6:af:b6:58:10:5b:
                    26:09:49:14:d0:90:de:1e:c6:73:aa:b3:eb:b7:8d:
                    3f:e8:19:44:24:c0:f9:5c:e0:a8:d2:dd:ee:bd:ad:
                    e6:92:a1:b4:01:e0:bf:15:c5:97:c1:89:06:0d:25:
                    81:20:52:e5:5a:9b:c8:4d:e9:ad:9d:95:43:64:af:
                    16:8e:2e:ef:0f:bd:e0:98:77:64:c4:d9:33:5d:75:
                    b1:13:63:49:1e:bf:25:23:eb:50:36:ac:a6:74:33:
                    0c:a7:7e:a8:20:62:e0:56:b0:f6:c5:00:14:1b:7b:
                    69:bb:f8:fa:0c:f6:48:57:f3:a0:c5:58:61:9a:a4:
                    83:8c:ef:4a:e1:74:94:33:4b:a1:c8:4c:70:ec:79:
                    7b:db:ec:0c:bd:97:e5:bc:51:97:67:21:46:93:c0:
                    e2:55:88:76:2a:7b:39:95:88:9c:0c:d4:a7:2d:17:
                    5c:9a:0f:f2:08:2e:98:70:79:11:b8:7d:a9:90:a5:
                    26:c2:1e:b8:05:c5:ec:c1:04:29:c1:9c:39:ce:33:
                    28:64:78:75:b0:42:b9:04:d4:9e:11:ff:dd:25:7f:
                    30:92:c6:0f:5c:86:d5:80:19:7c:89:15:71:5f:2d:
                    88:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B9:99:9D:B3:55:18:E0:04:7D:79:60:DC:A4:E9:E3:CB:81:28:0A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0089E8DCF96A11F0B4B4918ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.32.0/24
                  156.239.154.0/23
                  156.243.32.0/23
                  156.243.80.0/24
                  156.243.132.0/23
                  156.243.139.0/24
                  156.243.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:66:ef:63:ad:b3:e9:4b:35:b0:17:76:c6:a5:d3:6d:67:8e:
         8b:e9:32:c8:6e:2a:ec:c6:0d:09:21:aa:c7:da:0c:ba:bc:60:
         54:1e:b9:49:46:42:c8:f4:b1:5c:88:5a:77:11:d9:f5:ed:74:
         4f:f5:7c:67:1e:a0:03:4b:80:33:55:dc:c5:c8:87:13:59:f0:
         db:ea:cb:f2:33:f7:4e:a3:05:63:b3:b4:1e:49:0f:4d:38:cc:
         2f:fa:3a:8d:ad:ee:07:14:b0:5a:06:ca:54:89:be:16:bd:60:
         2d:93:88:30:1c:b5:b4:d0:b0:e2:da:29:bd:2b:10:99:cb:9d:
         30:25:60:4f:8d:72:4b:ad:34:83:18:9c:b3:50:64:e1:be:d5:
         53:5b:94:e4:55:30:0a:ee:2b:f2:72:15:01:ae:63:60:5c:e3:
         05:ad:c1:7e:e6:9c:d5:fa:d5:78:3e:69:88:db:e3:76:4f:14:
         b9:ba:52:b5:af:50:c8:ee:17:f3:55:8b:df:64:59:51:83:2e:
         53:91:51:6e:de:1c:14:a5:f8:26:10:3d:da:b9:2c:83:6b:27:
         01:b6:a8:12:33:cd:b5:90:b6:40:ba:ed:74:03:da:5b:fc:d2:
         88:b3:69:57:41:d2:88:15:47:bb:22:b4:0f:7e:f2:ed:aa:9c:
         79:5b:53:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:52:04 2026 by rpki-client