This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E83190EF83F11F093961AE8DAE4EC9C.roa
File:                     4E83190EF83F11F093961AE8DAE4EC9C.roa (raw, json)
Hash identifier:          znYqiK3420BtjBSelVHFzpZyjt5GaSv0MlKt01xp3Uo=
Subject key identifier:   EE:C5:E1:4C:B4:14:66:53:D1:72:A0:2F:64:D2:AD:72:5F:69:B3:27
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0198DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E83190EF83F11F093961AE8DAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 09:38:44 +0000
ROA not before:           Fri 23 Jan 2026 09:38:38 +0000
ROA not after:            Mon 02 Mar 2026 09:38:38 +0000
asID:                     62468
IP address blocks:        156.245.128.0/21 maxlen: 24
                          156.245.128.0/24 maxlen: 24
                          156.245.129.0/24 maxlen: 24
                          156.245.130.0/24 maxlen: 24
                          156.245.131.0/24 maxlen: 24
                          156.245.132.0/24 maxlen: 24
                          156.245.133.0/24 maxlen: 24
                          156.245.134.0/24 maxlen: 24
                          156.245.135.0/24 maxlen: 24
                          156.245.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104669 (0x198dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 23 09:38:38 2026 GMT
            Not After : Mar  2 09:38:38 2026 GMT
        Subject: CN=697341a3-a225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:57:0c:51:40:a2:58:71:73:25:f9:ae:b6:af:
                    43:67:9e:17:df:74:4d:d2:97:18:85:48:12:cd:71:
                    dd:4f:28:fb:94:f5:64:48:b3:dc:0e:41:32:62:ae:
                    33:b6:fb:01:18:29:80:82:cf:21:fe:b3:03:79:07:
                    c8:9b:a2:c0:61:f0:14:d8:7e:e5:3f:54:9d:f5:e7:
                    b5:22:94:08:37:45:a1:04:64:23:86:c1:26:e0:89:
                    9f:bd:ae:e1:60:2e:77:ec:b5:79:87:a9:3a:30:9a:
                    13:f5:05:a7:be:bc:36:f9:45:79:03:ed:03:5b:fc:
                    94:89:f2:50:87:93:ed:7f:30:0b:8e:fe:e4:51:43:
                    42:fb:a0:64:f8:98:22:0d:93:14:fb:d4:7f:32:ba:
                    a1:59:38:e0:ea:88:af:a0:78:64:51:1b:71:e0:20:
                    49:50:51:65:6b:44:ea:49:ab:6a:e2:d4:4c:58:c0:
                    8f:8a:ce:1e:73:3f:75:e5:ca:1b:04:53:02:48:02:
                    9b:49:ae:d8:9b:ba:bf:93:e4:c0:dc:2b:7a:54:14:
                    fa:4a:38:52:11:a8:d4:e9:89:57:e9:a0:73:4f:a9:
                    d6:cb:73:2f:a8:de:e3:3a:07:f8:1f:ef:84:55:22:
                    11:76:40:23:57:65:7d:fd:32:21:ca:92:ff:9b:7e:
                    85:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C5:E1:4C:B4:14:66:53:D1:72:A0:2F:64:D2:AD:72:5F:69:B3:27
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E83190EF83F11F093961AE8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.128.0/21
                  156.245.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:01:e7:30:53:94:85:82:ee:0c:ef:86:6f:f9:43:03:b5:f1:
         50:04:98:0d:8e:02:57:c1:9f:27:7a:6c:58:dd:ff:cf:cf:c2:
         63:79:09:0b:79:d6:32:17:f8:26:96:61:c0:a2:d0:ca:01:43:
         cf:6a:3a:6d:7e:ba:2f:ca:a6:92:9f:0e:1f:f8:aa:49:a1:e0:
         8d:e7:66:1e:1e:43:3c:46:42:77:da:37:c4:5c:e1:10:e5:33:
         3b:fb:8a:03:50:57:9c:9b:ab:5d:2e:1b:60:de:db:0e:89:3e:
         c4:55:2a:41:18:31:2e:45:80:be:e4:27:7b:6d:a2:a0:e6:e2:
         9c:3a:98:f1:3f:22:3f:58:29:90:6d:66:8c:71:96:b8:46:e2:
         d2:24:7c:4a:60:10:34:63:70:14:0e:92:d3:7b:4b:2e:9e:6b:
         fc:ce:8f:d8:81:28:ce:ce:87:61:3f:5f:fa:26:d9:29:cb:07:
         4f:51:2d:16:de:e9:73:57:7b:4a:e3:b6:6f:44:44:11:f8:ad:
         c3:6b:1d:2b:8f:17:ad:4c:75:3d:92:e4:5b:cc:5f:0b:6c:5d:
         c9:c6:fd:8f:7f:66:fe:db:4e:1f:16:df:91:2a:de:0b:21:70:
         03:c2:b4:f4:44:89:2b:27:fe:75:e8:f9:db:15:65:23:80:7f:
         53:3b:03:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:51:40 2026 by rpki-client