This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B1E7E2CF79E11F086AACA86DAE4EC9C.roa
File:                     3B1E7E2CF79E11F086AACA86DAE4EC9C.roa (raw, json)
Hash identifier:          3NXnrRqzk+Dn/4csIBfOyYs4N/+tzqFyTNDwbiUxvQc=
Subject key identifier:   DA:F1:5D:6B:1F:C3:2E:D4:BC:29:93:41:6F:FE:24:DB:20:7F:7E:CB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01987D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B1E7E2CF79E11F086AACA86DAE4EC9C.roa
Signing time:             Thu 22 Jan 2026 14:25:42 +0000
ROA not before:           Thu 22 Jan 2026 14:25:36 +0000
ROA not after:            Wed 28 Jan 2026 14:25:36 +0000
asID:                     62468
IP address blocks:        156.239.254.0/23 maxlen: 24
                          156.239.254.0/24 maxlen: 24
                          156.239.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104573 (0x1987d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 22 14:25:36 2026 GMT
            Not After : Jan 28 14:25:36 2026 GMT
        Subject: CN=69723366-e8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:c6:b3:31:8b:f7:2a:1d:13:1f:23:1e:29:
                    05:b2:f7:d9:e2:21:04:76:dd:03:32:55:dd:54:05:
                    df:62:08:71:31:ca:14:ab:31:e0:7f:b4:80:8c:18:
                    7c:e7:d4:dd:72:87:34:a7:cb:da:0c:aa:27:5f:a2:
                    a5:6b:61:a4:2c:6a:ba:c4:23:94:ad:a8:9e:42:d8:
                    50:ee:0a:75:f4:30:43:42:95:22:b4:4f:a3:9b:10:
                    de:0b:a0:a2:30:31:3e:03:ae:65:35:86:a8:af:d6:
                    6c:09:a5:dc:bb:06:e2:5f:b8:02:46:2b:15:6f:30:
                    d7:c9:8d:ba:32:0e:7d:2a:08:43:5e:83:14:5e:72:
                    a6:57:95:bb:18:ec:22:b8:a4:38:f2:52:a1:fe:16:
                    25:8c:18:5f:ac:f5:c0:82:f0:71:6f:ea:88:54:70:
                    54:ae:53:2e:2c:6b:28:06:54:b1:5c:32:55:d0:01:
                    3b:6c:90:93:b4:b3:65:63:16:98:56:80:af:af:88:
                    df:57:7c:8e:15:d8:e8:70:26:62:e7:95:d4:ff:44:
                    87:56:00:95:39:79:48:40:e8:ea:a9:bc:a8:c8:43:
                    af:5a:f3:3e:6d:68:c1:1e:34:fe:6a:13:e6:16:4e:
                    ea:26:93:35:be:33:45:54:6c:8a:ca:4c:37:79:27:
                    58:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F1:5D:6B:1F:C3:2E:D4:BC:29:93:41:6F:FE:24:DB:20:7F:7E:CB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B1E7E2CF79E11F086AACA86DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:9e:08:c4:11:44:83:45:15:3e:e1:63:f6:de:c3:dd:4e:2d:
         41:f5:95:7f:6b:63:d0:4c:12:31:98:50:a3:58:da:68:b4:75:
         65:13:ce:ba:76:60:b8:18:43:d7:b3:44:91:3b:6a:e8:f2:7b:
         7b:27:29:79:cb:c7:50:92:c9:de:ae:ca:3f:ce:2a:a5:2a:ad:
         08:94:9d:24:c0:bd:e3:68:5a:2b:f6:e6:14:e0:56:26:46:44:
         50:f4:28:46:b3:30:11:83:01:50:31:81:79:7f:46:38:10:23:
         76:e2:83:94:cd:d7:17:a3:da:ae:be:bc:25:9e:d7:6c:2f:17:
         1c:93:df:aa:e9:20:f0:12:df:e0:a4:b7:b0:bd:d5:29:26:0d:
         37:8f:a0:72:2a:39:b5:ef:46:3e:72:b1:62:49:78:c9:d2:2e:
         a8:de:be:95:81:5d:5b:79:c9:6d:a2:a4:75:5c:17:e7:55:ce:
         00:f1:69:8a:cb:22:86:fd:33:c6:45:3c:e0:80:a8:13:e4:79:
         67:40:bb:f6:fe:f9:49:89:ec:12:0a:5d:61:84:a3:8c:97:34:
         6a:ab:b4:58:86:72:68:44:f3:ca:93:0e:69:83:ff:d1:0e:ad:
         4e:55:fe:66:15:65:42:5f:51:af:d0:e9:42:ef:14:dc:dc:26:
         63:49:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:52:03 2026 by rpki-client