This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F386A90F82C11F0976DE5F5DAE4EC9C.roa
File:                     1F386A90F82C11F0976DE5F5DAE4EC9C.roa (raw, json)
Hash identifier:          5BnePOg+KEhHWReaWgbvVdqRL2gxsLiDXSf/YSJCmr4=
Subject key identifier:   D8:63:6B:96:C4:DF:DB:63:E6:2B:AC:D0:DC:CC:25:89:B4:68:2F:3C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0198B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F386A90F82C11F0976DE5F5DAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 07:21:24 +0000
ROA not before:           Fri 23 Jan 2026 07:21:19 +0000
ROA not after:            Wed 28 Jan 2026 07:21:19 +0000
asID:                     134365
IP address blocks:        156.239.224.0/19 maxlen: 24
                          156.239.240.0/20 maxlen: 24
                          156.239.240.0/21 maxlen: 24
                          156.239.240.0/22 maxlen: 24
                          156.239.240.0/23 maxlen: 24
                          156.239.240.0/24 maxlen: 24
                          156.239.241.0/24 maxlen: 24
                          156.239.242.0/23 maxlen: 24
                          156.239.242.0/24 maxlen: 24
                          156.239.243.0/24 maxlen: 24
                          156.239.244.0/22 maxlen: 24
                          156.239.244.0/23 maxlen: 24
                          156.239.246.0/23 maxlen: 24
                          156.239.247.0/24 maxlen: 24
                          156.239.248.0/21 maxlen: 24
                          156.239.248.0/22 maxlen: 24
                          156.239.248.0/23 maxlen: 24
                          156.239.248.0/24 maxlen: 24
                          156.239.250.0/23 maxlen: 24
                          156.239.252.0/22 maxlen: 24
                          156.239.252.0/23 maxlen: 24
                          156.239.254.0/23 maxlen: 24
                          156.239.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104629 (0x198b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 23 07:21:19 2026 GMT
            Not After : Jan 28 07:21:19 2026 GMT
        Subject: CN=69732174-ab60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:46:1b:02:fa:56:5b:5f:b8:0d:7a:fb:27:
                    c4:75:29:2a:b2:63:97:36:b4:21:c2:02:a0:97:37:
                    20:b4:53:f1:40:b7:f5:01:d0:00:aa:f3:4e:a6:e9:
                    b2:94:1c:98:0e:24:b2:0a:0b:aa:a6:f9:12:67:dd:
                    ca:c3:d8:38:e6:1f:ae:51:c1:a5:2c:05:10:b5:ac:
                    09:fd:5d:df:fc:1c:be:26:7f:2c:11:3d:e3:9a:51:
                    c3:81:8e:5e:9b:9f:21:dc:aa:9d:5c:0b:2c:9d:37:
                    c7:9c:e8:b9:f7:b9:3a:3a:2e:24:9b:ff:f6:95:ca:
                    c0:8f:2c:d3:2a:ac:c9:d2:f6:12:13:52:94:69:b0:
                    70:fd:55:34:9f:b9:52:f1:1d:60:a9:05:b1:81:20:
                    51:24:38:d1:c7:1f:a3:47:0a:60:ef:23:7b:f6:ce:
                    f1:85:3a:ee:9e:1c:5e:99:ff:0e:92:9c:14:b4:42:
                    97:9d:76:b1:67:7f:1a:db:b1:4e:b6:b5:d3:b8:d7:
                    08:6e:67:fe:24:ba:9d:4c:34:e1:09:d2:e0:e2:83:
                    df:f9:f7:6d:c7:cf:23:62:4f:6f:60:10:66:9b:db:
                    dd:c3:04:43:b6:cd:ab:99:5c:4e:93:34:a1:37:11:
                    e9:9e:5a:1f:88:e6:17:ec:59:e3:a9:5f:b8:95:1b:
                    bc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:63:6B:96:C4:DF:DB:63:E6:2B:AC:D0:DC:CC:25:89:B4:68:2F:3C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F386A90F82C11F0976DE5F5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6b:46:e3:99:82:c0:b0:ce:ec:bd:a8:84:f7:b7:a3:5d:e1:31:
         61:25:22:f5:da:14:21:85:d2:77:a0:83:23:c5:15:d6:5f:78:
         ff:54:56:0b:66:2f:3b:ac:db:ca:52:34:34:a7:a7:40:e9:7d:
         d2:6f:59:97:7c:25:a0:83:d0:b7:d4:c4:cc:d9:66:a6:4c:14:
         9f:f4:99:58:9a:d6:b5:79:b0:de:17:e1:5d:f4:d8:96:b5:06:
         c0:37:84:a1:3f:16:ec:62:ee:c7:f1:61:42:a6:26:d6:86:01:
         ff:5a:ff:82:08:94:7b:d2:3c:f4:dd:c7:ff:e0:12:88:12:91:
         76:74:17:02:a9:74:08:1f:1d:8c:fe:07:90:69:74:49:9b:88:
         bf:0a:d2:db:92:cd:a6:0a:92:a1:9a:b9:a6:f6:2a:e1:a8:7a:
         61:77:29:29:be:b8:5b:65:3a:6c:45:24:f2:cc:02:14:f1:76:
         b1:c9:fa:ab:30:65:52:50:05:a8:be:f1:5b:1a:22:5e:61:3b:
         81:6e:90:42:be:05:ef:a5:a5:bb:42:6a:76:6d:f2:86:3b:ea:
         00:da:60:74:df:ae:68:16:cf:b1:37:16:ed:28:c8:b2:31:1a:
         97:1f:42:fb:78:76:8b:01:23:4f:94:c6:b3:ec:5a:dc:9b:a8:
         f7:ac:71:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:51:25 2026 by rpki-client