This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C1D1206F82611F0BD1A32D5DAE4EC9C.roa
File:                     8C1D1206F82611F0BD1A32D5DAE4EC9C.roa (raw, json)
Hash identifier:          hym0lXmoGh8E0+RWN7fP97D7cnhZEUzZnVcAQoSbhfw=
Subject key identifier:   26:F7:D8:FF:77:08:58:99:53:87:CB:C2:BD:97:2F:59:94:D7:33:2E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0198B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C1D1206F82611F0BD1A32D5DAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 06:41:29 +0000
ROA not before:           Fri 23 Jan 2026 06:41:24 +0000
ROA not after:            Sat 28 Feb 2026 06:41:24 +0000
asID:                     44559
IP address blocks:        156.246.150.0/24 maxlen: 24
                          156.246.151.0/24 maxlen: 24
                          156.246.152.0/24 maxlen: 24
                          156.246.153.0/24 maxlen: 24
                          156.246.154.0/24 maxlen: 24
                          156.246.155.0/24 maxlen: 24
                          156.246.156.0/24 maxlen: 24
                          156.246.157.0/24 maxlen: 24
                          156.246.158.0/24 maxlen: 24
                          156.246.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104627 (0x198b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 23 06:41:24 2026 GMT
            Not After : Feb 28 06:41:24 2026 GMT
        Subject: CN=69731819-fdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:b7:38:26:21:ff:92:ba:ef:36:2a:65:ab:
                    c2:48:44:55:94:67:14:30:50:e0:bb:e6:2e:ce:20:
                    f6:d8:55:0f:41:ab:eb:1c:9c:ed:3c:b5:78:31:67:
                    61:5b:5e:22:ed:7d:a2:d3:c7:6e:7e:dc:09:a8:f9:
                    32:ae:80:66:3f:36:88:59:63:9f:11:dd:97:02:ca:
                    86:51:c1:dd:9b:5d:20:18:ab:36:44:4f:fa:8e:f6:
                    85:be:d8:5c:3b:1a:d5:c5:c3:48:7d:ab:cd:87:e6:
                    28:58:ba:27:00:5b:27:d6:41:1f:db:97:6b:da:e8:
                    b7:6f:f2:58:9d:65:0b:51:f1:63:b3:87:9b:9a:98:
                    b6:c8:ed:d8:50:5b:53:24:17:67:19:24:14:4d:a2:
                    6c:d9:3d:9c:76:d1:ea:6d:8c:c1:74:08:6f:87:08:
                    c7:e5:2f:2b:a4:6d:c4:31:fd:58:55:ed:cb:05:46:
                    ba:32:53:8b:f1:f3:24:f4:ac:1a:1f:29:8a:84:7c:
                    81:d7:95:fd:b0:d7:ed:44:aa:b9:24:3f:98:ba:de:
                    51:a1:d1:67:ce:59:95:ff:2d:46:63:7d:58:4f:f0:
                    9c:2a:ce:5a:b6:12:06:bf:f8:f9:3b:f9:fe:98:b9:
                    85:7f:ff:a7:13:ab:61:5f:6a:a3:01:ba:4a:34:50:
                    ba:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F7:D8:FF:77:08:58:99:53:87:CB:C2:BD:97:2F:59:94:D7:33:2E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C1D1206F82611F0BD1A32D5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.150.0-156.246.159.255

    Signature Algorithm: sha256WithRSAEncryption
         1c:12:36:d3:c4:c1:85:75:ef:bb:bd:4c:34:7a:85:9c:1b:db:
         a6:9a:07:17:15:51:1a:3c:02:b9:88:28:46:ae:c5:c7:d5:ea:
         f1:f8:50:c7:c7:8e:fb:7e:15:0a:30:ad:3f:51:a0:01:d9:9f:
         b8:84:c4:cb:cf:09:0e:10:41:99:30:3b:2f:1f:5c:3d:a5:13:
         33:6c:74:d5:e5:89:40:4c:c5:a5:dd:e2:22:7a:08:61:15:4c:
         6f:5b:35:26:a8:92:89:96:d1:74:c1:8e:99:f6:59:01:39:53:
         bb:f5:d7:f1:a5:ce:d7:53:9c:3c:6b:b8:e1:33:ea:3d:87:49:
         6f:11:f5:5f:a8:32:b7:d7:d7:ed:8a:99:42:da:9a:8c:6a:43:
         b4:86:66:f6:8a:73:8c:e1:8e:38:bc:33:a8:e7:94:df:ad:4f:
         cc:3d:bb:e6:1b:c2:2e:7a:c9:1f:3d:35:98:32:31:7c:33:a2:
         4e:c6:0d:8a:6e:07:77:06:53:ff:b1:f1:88:1c:fc:3f:86:81:
         32:43:e1:fa:8e:27:2f:c9:da:58:6d:92:5c:af:e1:06:5a:24:
         83:fb:0d:65:5f:07:2f:a7:c6:59:b9:ee:18:3f:04:48:5e:3f:
         ff:0b:07:29:42:d4:20:19:74:00:27:ca:64:9b:d6:0c:bd:84:
         d6:8f:57:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:12:04 2026 by rpki-client