This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/137B88F2F96911F0BEEA2A86DAE4EC9C.roa
File:                     137B88F2F96911F0BEEA2A86DAE4EC9C.roa (raw, json)
Hash identifier:          pToXXmKLpkiWdhWIkoToEurh9p3apvf78hfiYNKjA6w=
Subject key identifier:   B9:DC:22:F3:96:63:87:24:51:CA:A0:C6:BC:22:0C:4A:55:95:EA:CF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01999C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/137B88F2F96911F0BEEA2A86DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 21:10:14 +0000
ROA not before:           Sat 24 Jan 2026 21:10:10 +0000
ROA not after:            Tue 03 Mar 2026 21:10:10 +0000
asID:                     44559
IP address blocks:        156.233.116.0/24 maxlen: 24
                          156.233.117.0/24 maxlen: 24
                          156.233.127.0/24 maxlen: 24
                          156.233.193.0/24 maxlen: 24
                          156.233.194.0/24 maxlen: 24
                          156.233.195.0/24 maxlen: 24
                          156.233.204.0/24 maxlen: 24
                          156.239.140.0/24 maxlen: 24
                          156.239.142.0/24 maxlen: 24
                          156.239.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104860 (0x1999c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 21:10:10 2026 GMT
            Not After : Mar  3 21:10:10 2026 GMT
        Subject: CN=69753536-89a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:51:7b:8e:22:1e:6a:67:02:d7:ed:05:2b:ee:
                    62:61:b2:85:df:aa:ff:fa:3a:77:00:e3:79:5e:f8:
                    41:42:6e:04:23:34:df:5d:f9:78:45:13:df:23:01:
                    6d:3c:0d:c9:4c:28:20:29:6c:a7:38:2b:e3:0a:43:
                    df:51:c5:bb:9c:45:cf:04:42:1d:85:eb:fe:d9:2e:
                    6a:c2:01:8b:d6:3d:39:d0:d0:8a:0a:51:d2:79:ed:
                    48:a4:95:08:6e:b6:f2:1d:22:45:10:fe:6e:33:5f:
                    94:16:40:5b:9d:51:87:0c:95:c0:ad:f2:bd:67:fa:
                    56:59:2d:16:67:b2:d7:2a:ea:55:9d:74:f9:34:8d:
                    42:fd:6e:19:aa:80:16:d6:0f:50:79:8b:f6:6a:8d:
                    4f:60:ac:4c:c7:a0:bf:5b:e3:56:a2:5b:b8:11:ab:
                    55:0c:71:08:6f:c7:e2:f4:db:ca:08:21:25:9f:60:
                    f5:52:f0:be:98:0c:3f:f5:c0:a8:2d:e6:80:51:ae:
                    91:5e:ef:75:06:fd:1f:4e:b9:d7:71:01:0b:bc:27:
                    5a:99:16:2c:2f:ae:ab:8c:84:c4:53:6e:ec:79:e0:
                    c0:73:68:cd:75:be:a4:29:70:00:0b:9a:74:66:57:
                    bb:2d:95:6d:fb:2d:c5:d5:2b:ed:ee:ba:44:64:45:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DC:22:F3:96:63:87:24:51:CA:A0:C6:BC:22:0C:4A:55:95:EA:CF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/137B88F2F96911F0BEEA2A86DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.116.0/23
                  156.233.127.0/24
                  156.233.193.0-156.233.195.255
                  156.233.204.0/24
                  156.239.140.0/24
                  156.239.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:7e:a0:44:d9:41:88:d2:a2:cc:a1:f4:13:ae:6a:0d:a4:a1:
         bb:0e:45:a0:34:11:ed:2c:7e:31:27:31:51:ca:50:9e:f3:d7:
         24:d1:31:e6:15:f6:d3:fa:2b:4a:04:fb:88:15:15:ab:b8:fc:
         e8:71:51:a9:f6:02:f8:66:64:b4:49:ab:7f:6b:18:49:20:48:
         2a:bd:a5:03:84:a1:89:1c:1b:fc:ac:af:a7:c1:73:cc:f3:66:
         0e:1d:0f:e9:09:a0:d9:aa:89:46:59:0a:14:93:8c:3a:3b:a3:
         43:8b:f0:4c:d6:04:b8:9d:96:04:8a:f9:60:3a:17:ff:8e:fa:
         3b:fc:a6:60:56:bd:4e:75:f0:61:1e:75:d4:c1:9c:98:fc:04:
         2e:78:a0:46:8f:bb:2b:83:c3:67:76:df:ea:b9:c6:1d:35:e2:
         67:15:d1:f1:54:fc:85:0d:13:c4:de:34:b7:68:c6:b8:6c:61:
         b7:be:1d:57:0f:93:b7:e6:be:0b:d3:95:31:2a:76:ae:3f:3b:
         24:b4:59:f0:cc:ce:9c:1e:28:d9:90:d3:32:8e:52:78:90:3c:
         44:d9:61:dd:f2:ba:e9:67:55:71:5e:5b:17:26:b8:1f:8e:ac:
         4c:8b:f0:27:1f:60:a7:18:f2:2d:fa:f0:06:62:66:aa:6b:a4:
         22:e0:ca:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:39:45 2026 by rpki-client