This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C323030F96611F0989AE8F3DAE4EC9C.roa
File:                     5C323030F96611F0989AE8F3DAE4EC9C.roa (raw, json)
Hash identifier:          HGWdegAibSC/eCCJ+1oMQjLwgtgq4GCm0d4Mh1m16Wo=
Subject key identifier:   B5:A7:34:2D:AF:C1:2D:15:7A:D7:BF:AC:2D:8D:63:1C:1C:22:2C:40
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019996
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C323030F96611F0989AE8F3DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 20:50:48 +0000
ROA not before:           Sat 24 Jan 2026 20:50:42 +0000
ROA not after:            Tue 03 Mar 2026 20:50:42 +0000
asID:                     44559
IP address blocks:        156.243.232.0/24 maxlen: 24
                          156.243.249.0/24 maxlen: 24
                          156.243.254.0/24 maxlen: 24
                          156.243.255.0/24 maxlen: 24
                          156.244.209.0/24 maxlen: 24
                          156.244.210.0/24 maxlen: 24
                          156.244.211.0/24 maxlen: 24
                          156.248.6.0/24 maxlen: 24
                          156.248.7.0/24 maxlen: 24
                          156.248.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104854 (0x19996)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 20:50:42 2026 GMT
            Not After : Mar  3 20:50:42 2026 GMT
        Subject: CN=697530a8-3221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:2f:be:76:67:19:e5:30:c7:8e:3a:56:3e:
                    1c:d0:6a:08:b2:5f:06:fe:e2:74:10:cf:6f:75:9e:
                    0d:b5:18:bd:0f:3c:9d:ec:40:e8:0f:2a:11:73:69:
                    21:ec:59:da:de:fa:a1:04:32:7a:e7:86:14:c9:cb:
                    e6:c3:26:20:c1:6e:dc:d4:25:9b:34:17:f8:ee:13:
                    d4:29:fd:55:ad:3c:b2:33:df:9c:42:5f:86:f1:42:
                    7a:61:6c:d3:08:dd:e0:01:e5:82:80:b2:ba:aa:b4:
                    1c:4d:71:8c:b8:f4:26:5d:92:55:e4:e2:6b:7e:90:
                    64:d3:54:8c:23:a6:ae:19:f3:36:4c:37:24:f4:13:
                    99:59:54:fe:e9:5d:48:33:56:c7:b6:06:c8:29:21:
                    02:95:f3:41:b2:a3:35:18:f7:66:6c:1e:af:17:07:
                    a8:67:9d:17:19:f4:d4:31:23:e9:48:64:0e:78:3d:
                    c5:1f:b2:52:93:85:5c:b8:bb:91:53:9b:95:8d:1e:
                    c2:df:18:3e:e1:14:44:0c:3b:47:8c:71:de:3a:43:
                    f7:08:e2:5c:7c:57:0a:4a:68:c2:b1:64:9a:b7:1e:
                    32:4a:27:7a:17:07:1c:ab:57:1b:6a:a7:4e:ad:81:
                    09:01:70:35:fc:a6:06:fa:4f:2e:34:97:89:32:47:
                    3c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A7:34:2D:AF:C1:2D:15:7A:D7:BF:AC:2D:8D:63:1C:1C:22:2C:40
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C323030F96611F0989AE8F3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.232.0/24
                  156.243.249.0/24
                  156.243.254.0/23
                  156.244.209.0-156.244.211.255
                  156.248.6.0/23
                  156.248.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:f0:31:ee:e2:1a:04:6f:28:65:e6:c9:47:58:10:76:3f:da:
         59:c1:ec:ae:56:9d:a0:fc:a5:17:38:c6:95:e1:1a:74:18:26:
         e2:59:af:19:b2:83:09:42:f1:5a:c3:18:4a:51:51:5b:17:53:
         a5:f8:bd:69:86:c2:2e:79:5e:20:c2:b4:c5:46:43:12:3a:c5:
         58:19:c3:df:10:57:47:32:d7:d4:ac:23:f6:1d:d2:cd:47:ae:
         e9:1a:bc:dd:c1:7c:c7:29:4c:4e:49:17:eb:2e:fd:d8:87:ac:
         92:fc:5d:1e:16:75:b3:37:bc:90:8c:70:3f:b4:09:b9:d3:1d:
         1f:e2:ed:ea:c8:73:58:d5:90:bf:61:74:04:40:55:2c:65:16:
         7f:47:ef:9a:67:0f:56:fc:54:5b:c1:74:b9:4a:50:d9:7c:d0:
         2e:f4:ed:ef:b5:5e:6c:30:2e:fc:69:f1:49:d9:4a:66:ea:60:
         e7:f9:c0:78:bc:61:42:a5:05:9b:0b:c3:01:a0:13:52:ee:72:
         9f:50:ff:6f:a4:48:b6:7b:6d:53:c1:55:2c:27:91:63:31:ef:
         79:82:d1:5f:fa:0d:f0:80:f0:98:60:38:f0:3b:4e:25:95:c8:
         ae:89:af:96:e3:26:f9:60:ad:cf:89:03:c4:be:24:f3:f5:c7:
         e9:2c:62:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:18:42 2026 by rpki-client