This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AD76606F96511F0B0FDE9EBDAE4EC9C.roa
File:                     6AD76606F96511F0B0FDE9EBDAE4EC9C.roa (raw, json)
Hash identifier:          SB3iYP4OLxcW3fXOH0DIwVTa0ngkPQxfcoC9Es3s1xg=
Subject key identifier:   E0:97:70:47:3B:BD:5C:C9:36:8D:71:99:68:54:89:56:87:D4:48:D4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019994
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AD76606F96511F0B0FDE9EBDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 20:44:03 +0000
ROA not before:           Sat 24 Jan 2026 20:43:58 +0000
ROA not after:            Tue 03 Mar 2026 20:43:58 +0000
asID:                     44559
IP address blocks:        156.239.19.0/24 maxlen: 24
                          156.239.20.0/24 maxlen: 24
                          156.239.132.0/24 maxlen: 24
                          156.239.133.0/24 maxlen: 24
                          156.239.135.0/24 maxlen: 24
                          156.243.228.0/24 maxlen: 24
                          156.243.242.0/24 maxlen: 24
                          156.243.243.0/24 maxlen: 24
                          156.243.248.0/24 maxlen: 24
                          156.249.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104852 (0x19994)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 20:43:58 2026 GMT
            Not After : Mar  3 20:43:58 2026 GMT
        Subject: CN=69752f13-157d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d6:ea:b1:0e:49:61:f8:22:56:66:1a:94:3f:
                    2b:d5:c7:37:39:5c:b9:a4:84:e7:38:ed:ca:70:46:
                    a5:57:6b:83:0a:17:84:19:f7:c3:5d:ff:95:ed:3f:
                    a1:e7:2c:ad:82:f5:73:d7:1a:71:6d:fa:c0:7a:62:
                    68:7c:ce:ff:31:9a:b1:93:bf:fb:9a:46:10:cb:57:
                    b3:74:bc:dc:cf:0c:22:e4:a5:72:7c:d1:14:97:88:
                    4a:56:ba:08:1c:55:12:8d:b2:17:4d:e8:d0:ee:cd:
                    b5:b3:48:f2:47:18:c5:4d:25:a7:41:75:50:58:cc:
                    81:74:6f:6b:61:4c:ea:d4:d4:2b:76:ef:a3:d1:13:
                    2d:f6:6c:1e:91:8b:d7:24:fc:a7:dc:b0:a8:31:b0:
                    84:da:9e:1a:20:fa:ec:f4:ef:a2:3e:6a:87:01:bd:
                    70:84:c0:c1:3d:60:bb:ae:49:96:31:cb:93:ca:90:
                    45:a4:e1:1a:7a:ef:e6:d6:0b:79:56:f8:6b:12:f2:
                    13:37:25:50:cf:ea:27:b0:c4:b5:01:63:3a:2a:93:
                    01:11:0a:f4:ee:b8:82:53:d9:d1:97:58:d7:27:16:
                    f3:b6:22:1b:12:13:60:f1:e1:93:13:2c:2e:a7:7e:
                    85:c7:3b:e2:f8:a7:59:1a:fe:c6:6e:22:c6:af:8e:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:97:70:47:3B:BD:5C:C9:36:8D:71:99:68:54:89:56:87:D4:48:D4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AD76606F96511F0B0FDE9EBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.19.0-156.239.20.255
                  156.239.132.0/23
                  156.239.135.0/24
                  156.243.228.0/24
                  156.243.242.0/23
                  156.243.248.0/24
                  156.249.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:89:73:6e:2d:7d:14:ad:30:41:e5:94:91:22:98:67:e6:8b:
         b4:59:22:dd:52:3b:5d:30:31:52:55:28:2a:e8:cd:fb:bf:bd:
         83:85:14:bf:f2:c8:c7:b8:2c:9b:d7:82:02:1d:d5:b2:a5:2b:
         6a:b8:83:7f:bb:78:19:5f:74:f8:7b:0b:4c:75:b3:ab:84:17:
         58:5d:36:81:0a:55:45:27:b7:2a:4c:fb:0c:a3:a1:00:f7:42:
         8c:9f:30:bf:18:2c:f1:d4:78:c0:c3:8e:3f:49:cb:ea:01:b9:
         ce:e4:05:ff:ab:0d:c9:7d:6b:4e:fe:23:bd:77:40:61:52:03:
         a1:e5:cb:aa:50:be:a2:df:96:99:f4:f1:28:db:ae:50:b8:e4:
         d8:00:e1:76:0a:f0:9d:2a:7d:60:50:93:8a:5c:83:c0:bd:8b:
         a4:89:7d:03:b0:df:14:b4:30:6f:d9:61:b3:10:59:52:53:10:
         3e:11:a1:c7:a4:1c:98:91:96:08:ee:8a:b7:39:60:96:bc:a9:
         05:d0:0a:88:2f:e7:94:84:7f:39:5a:35:9c:6c:5b:23:28:b7:
         bf:6b:e8:b6:07:35:13:d8:a4:e8:d9:15:a9:24:c6:a2:33:fb:
         20:dc:1e:d0:83:7b:fd:6f:03:9d:cc:3b:a4:c6:12:c5:34:ee:
         f9:70:04:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:49:15 2026 by rpki-client