This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E3981DCF82511F0A9AF12CDDAE4EC9C.roa
File:                     4E3981DCF82511F0A9AF12CDDAE4EC9C.roa (raw, json)
Hash identifier:          lGMuGRCpzOUfkluDEYHpaO5mlwsav/sHF2wPgAqpTm8=
Subject key identifier:   51:FD:3C:44:D5:AF:25:63:2B:49:F9:D8:92:DC:0F:71:15:02:41:E0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0198AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E3981DCF82511F0A9AF12CDDAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 06:32:36 +0000
ROA not before:           Fri 23 Jan 2026 06:32:31 +0000
ROA not after:            Wed 28 Jan 2026 06:32:31 +0000
asID:                     134365
IP address blocks:        156.239.244.0/24 maxlen: 24
                          156.239.245.0/24 maxlen: 24
                          156.239.246.0/24 maxlen: 24
                          156.239.247.0/24 maxlen: 24
                          156.239.248.0/24 maxlen: 24
                          156.239.249.0/24 maxlen: 24
                          156.239.250.0/24 maxlen: 24
                          156.239.251.0/24 maxlen: 24
                          156.239.252.0/24 maxlen: 24
                          156.239.253.0/24 maxlen: 24
                          156.239.254.0/24 maxlen: 24
                          156.239.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104621 (0x198ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 23 06:32:31 2026 GMT
            Not After : Jan 28 06:32:31 2026 GMT
        Subject: CN=69731604-de63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4e:5e:35:cd:33:6f:5a:48:39:7a:b1:cc:2e:
                    9e:cf:dd:fe:5b:ca:f4:0c:94:da:0c:d0:b3:d2:50:
                    b4:62:d3:a1:25:2e:fe:b9:03:da:64:03:fc:61:32:
                    ff:e2:53:fd:26:de:96:8a:0f:23:17:c3:db:5c:e4:
                    24:5f:05:7b:95:5d:86:f4:94:7b:b1:2d:8f:ed:c1:
                    5c:56:b9:75:85:36:73:d1:08:1e:a1:c7:1d:87:98:
                    9b:13:f5:34:92:c9:97:c5:c8:43:8d:23:8c:aa:d0:
                    7c:ae:06:72:83:49:eb:83:f6:c7:c0:98:3d:b9:30:
                    81:b2:dd:4c:71:53:f4:64:99:99:41:44:ad:14:c3:
                    4f:b4:a3:9b:77:54:b6:28:47:17:02:f5:f9:b1:21:
                    c2:b4:df:10:95:9b:ea:a1:74:a3:1e:f9:e7:92:d6:
                    7c:53:e5:b5:19:d5:58:c9:0b:68:b7:14:77:03:ff:
                    65:25:31:1b:1c:20:07:38:91:f1:bc:73:35:19:c9:
                    14:7f:d6:23:77:e3:07:50:47:d5:fd:01:55:5d:26:
                    95:04:22:eb:a4:0b:e8:3c:f5:e3:08:d3:56:bc:15:
                    32:3a:1c:61:58:a1:2b:b7:6d:a6:ea:18:96:aa:ca:
                    d2:4d:89:f7:07:89:5b:11:c1:fb:84:55:11:e2:14:
                    d8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FD:3C:44:D5:AF:25:63:2B:49:F9:D8:92:DC:0F:71:15:02:41:E0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E3981DCF82511F0A9AF12CDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.244.0-156.239.255.255

    Signature Algorithm: sha256WithRSAEncryption
         41:74:46:e8:34:34:0c:51:65:1e:0e:cc:63:b8:33:a5:63:8b:
         f5:d7:4a:7c:44:a9:52:b5:45:e1:44:61:d9:20:a9:3e:12:3a:
         2a:ac:bb:24:a7:d3:d9:04:fd:33:e0:69:ba:31:e6:76:17:f5:
         3d:aa:31:96:f0:f4:0e:c7:b8:33:1e:24:0d:4f:63:9a:fc:d0:
         f3:9c:50:61:94:5a:1a:e6:77:0f:0a:7f:8f:d5:7e:6e:13:cb:
         de:72:fa:65:8f:a4:65:e0:4d:5e:b7:0b:56:8f:55:58:f9:38:
         e7:29:59:45:7f:61:ad:f2:8f:63:77:19:ab:7c:15:8b:56:81:
         71:d4:ae:4b:42:ac:eb:80:53:06:7e:57:51:c5:1e:72:fc:71:
         2c:f1:1e:c5:cf:40:22:dc:f0:4c:67:36:a0:d8:73:8b:c2:a9:
         42:86:a1:0b:f3:18:13:b3:c2:3d:e0:a9:70:6e:68:b9:a3:56:
         a8:65:1f:c6:31:58:d5:bd:90:ed:8c:02:a3:0c:0c:b8:10:58:
         89:9d:e4:c3:8b:01:87:1e:93:4b:db:fa:d8:ff:69:ae:67:a1:
         2c:6d:22:ac:ac:a1:36:4f:52:db:bf:0c:d5:22:ae:d1:b2:bb:
         90:62:37:96:9c:d5:7e:e3:5d:04:d3:00:c9:7f:6e:72:38:95:
         92:ca:b1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:14:25 2026 by rpki-client