This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86F4C94CF96411F08660CDE7DAE4EC9C.roa
File:                     86F4C94CF96411F08660CDE7DAE4EC9C.roa (raw, json)
Hash identifier:          S/vOVacHLM26afFx2W/xQj61KzrgWi2g8nMRhl3QOis=
Subject key identifier:   35:74:39:84:EE:49:7A:4E:38:6C:E3:A6:44:08:4A:F2:32:5C:AB:7A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019992
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86F4C94CF96411F08660CDE7DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 20:37:41 +0000
ROA not before:           Sat 24 Jan 2026 20:37:36 +0000
ROA not after:            Tue 03 Mar 2026 20:37:36 +0000
asID:                     44559
IP address blocks:        156.238.180.0/24 maxlen: 24
                          156.238.182.0/24 maxlen: 24
                          156.239.17.0/24 maxlen: 24
                          156.243.191.0/24 maxlen: 24
                          156.243.216.0/24 maxlen: 24
                          156.243.217.0/24 maxlen: 24
                          156.243.219.0/24 maxlen: 24
                          156.243.220.0/24 maxlen: 24
                          156.243.221.0/24 maxlen: 24
                          156.243.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104850 (0x19992)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 20:37:36 2026 GMT
            Not After : Mar  3 20:37:36 2026 GMT
        Subject: CN=69752d95-3aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:89:97:2b:5e:79:de:8a:19:46:2b:35:98:
                    28:66:0e:89:71:ae:e5:64:45:fe:c9:b8:83:8e:48:
                    7d:7b:33:8c:eb:ff:1e:c2:eb:65:83:70:be:08:6a:
                    c3:09:77:b9:c6:e6:73:9c:38:07:1b:aa:eb:b3:59:
                    ac:bb:fb:fa:bf:57:4c:08:69:ed:ce:78:a0:10:1d:
                    06:38:f5:9a:2a:82:02:80:12:85:ee:e3:31:ce:d3:
                    30:bd:75:1a:df:24:67:03:b4:8e:f4:d2:0f:6a:2a:
                    6d:bd:a0:9c:52:b3:8c:59:41:38:00:a7:9f:26:ac:
                    9e:6b:74:e4:ca:81:dc:a1:9f:9e:66:db:b2:eb:f3:
                    f3:ad:83:27:7e:95:92:93:18:68:93:c8:8f:f6:63:
                    92:94:96:7e:61:90:26:b4:ab:99:d0:99:a8:49:27:
                    82:93:e6:72:97:a6:dd:82:24:f8:64:ed:de:14:da:
                    28:d8:1a:34:30:b0:bb:4f:f3:8f:6e:9f:31:79:02:
                    24:5e:fb:34:b7:b6:5d:07:47:5c:01:ac:ab:61:21:
                    86:3a:4a:a0:8c:90:d1:ce:98:a0:f9:6a:06:ea:c7:
                    d6:c9:f4:7a:93:2f:2d:b2:e4:9c:06:6d:46:2d:67:
                    d6:84:c7:c6:d3:ba:a7:f7:75:69:32:f0:05:65:da:
                    8b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:74:39:84:EE:49:7A:4E:38:6C:E3:A6:44:08:4A:F2:32:5C:AB:7A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86F4C94CF96411F08660CDE7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.180.0/24
                  156.238.182.0/24
                  156.239.17.0/24
                  156.243.191.0/24
                  156.243.216.0/23
                  156.243.219.0-156.243.222.255

    Signature Algorithm: sha256WithRSAEncryption
         31:e5:22:28:b9:a5:9d:34:0e:f2:a6:6c:a1:a8:b2:cd:54:13:
         a0:3b:6c:e8:54:02:bf:be:70:a7:0b:89:51:58:65:48:93:42:
         9a:5b:f7:26:ee:82:84:2b:60:1c:aa:0c:b4:bf:fe:5f:77:00:
         33:da:0f:59:78:e9:65:6a:67:25:c0:5b:e0:f4:40:8d:00:37:
         ff:da:00:40:ba:71:ea:17:98:18:ad:b2:9b:3f:e1:fc:24:34:
         db:42:37:d1:9e:c0:93:2b:b0:13:bd:a6:39:37:d8:e9:00:74:
         1e:fc:e5:bf:47:a3:8f:9a:63:1b:61:b6:ab:dd:91:49:f1:e2:
         e9:dc:9f:91:e1:0a:4d:f1:3b:02:e3:59:b2:5f:e3:4f:0f:9a:
         ab:85:0f:a9:20:77:28:9e:b0:99:42:78:7f:1b:3b:03:16:82:
         26:ba:8e:ca:db:e5:46:2c:72:c9:10:c8:74:58:96:45:16:7e:
         ca:4e:69:3d:a2:8a:53:a4:7b:2a:8e:1b:73:e8:21:93:28:25:
         02:c3:70:28:43:8c:ca:a5:d3:9f:6c:ad:0b:64:36:8e:fd:25:
         6a:7d:61:9a:7d:52:56:d9:61:69:39:30:67:4c:23:af:ee:f9:
         f7:bc:0f:a0:f1:cb:cc:55:f3:54:ef:d2:fb:5d:cf:0b:ef:8e:
         29:36:ff:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:11:56 2026 by rpki-client