This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C048A56AF7A211F0B15DCEA0DAE4EC9C.roa
File:                     C048A56AF7A211F0B15DCEA0DAE4EC9C.roa (raw, json)
Hash identifier:          WSJK56/Ai+APRbVbZv6AsBrRbekFbdgix5LHe8OiYmo=
Subject key identifier:   1F:41:67:65:BE:86:3D:FA:69:46:57:2F:F8:1B:C1:7C:4A:2B:D5:D1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019887
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C048A56AF7A211F0B15DCEA0DAE4EC9C.roa
Signing time:             Thu 22 Jan 2026 14:58:03 +0000
ROA not before:           Thu 22 Jan 2026 14:57:58 +0000
ROA not after:            Wed 28 Jan 2026 14:57:58 +0000
asID:                     152705
IP address blocks:        156.239.227.0/24 maxlen: 24
                          156.239.228.0/22 maxlen: 24
                          156.239.228.0/23 maxlen: 24
                          156.239.228.0/24 maxlen: 24
                          156.239.229.0/24 maxlen: 24
                          156.239.230.0/23 maxlen: 24
                          156.239.230.0/24 maxlen: 24
                          156.239.231.0/24 maxlen: 24
                          156.239.232.0/23 maxlen: 24
                          156.239.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104583 (0x19887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 22 14:57:58 2026 GMT
            Not After : Jan 28 14:57:58 2026 GMT
        Subject: CN=69723afb-1d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:0a:60:e8:e6:86:21:04:ab:0d:54:1f:43:
                    d6:4e:86:0a:85:f4:a0:92:fe:1b:c1:43:1b:25:f4:
                    a1:f4:b5:23:1d:47:f6:92:06:5d:ed:2b:e7:aa:fb:
                    44:aa:2d:43:c5:7a:47:f8:61:4e:c9:97:c8:57:af:
                    62:cd:7e:4a:4d:ef:0f:7b:b4:f2:9a:89:30:a7:92:
                    96:61:ab:13:18:c6:70:84:7c:89:ef:2b:f4:77:85:
                    23:59:bc:45:c8:5c:8b:f4:00:bc:82:fc:f4:e9:c4:
                    7d:e0:5e:a8:eb:97:da:c0:7e:48:01:76:74:5f:46:
                    d7:9e:27:4c:e6:60:d8:5b:5a:cd:00:e8:9b:85:fd:
                    99:7b:d7:98:27:03:2b:b3:5c:3f:9c:d5:7f:3b:ec:
                    5d:c7:fb:f9:16:41:10:7f:9b:e4:a0:41:9f:2a:61:
                    0d:f0:1e:dc:55:8a:fb:a3:5d:50:d6:45:1d:b6:97:
                    36:87:03:05:d2:3d:b3:6a:eb:d4:d2:0d:9a:07:f4:
                    f8:b0:66:52:9d:65:85:6c:45:48:e3:f9:fc:7e:27:
                    80:8c:76:eb:e7:4f:f6:d6:49:83:f3:dc:fa:28:6e:
                    be:40:ae:ec:1c:ae:23:05:97:7e:90:16:0c:1e:b4:
                    b6:1a:11:eb:00:99:c6:36:05:00:d1:b9:75:1c:46:
                    e9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:41:67:65:BE:86:3D:FA:69:46:57:2F:F8:1B:C1:7C:4A:2B:D5:D1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C048A56AF7A211F0B15DCEA0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.227.0-156.239.233.255

    Signature Algorithm: sha256WithRSAEncryption
         b7:10:c7:e8:2f:81:f2:8f:3e:4a:68:22:15:65:a1:49:73:b1:
         6c:61:a1:b4:f2:9d:6a:e5:5d:bc:9e:07:93:62:b6:c3:5e:09:
         e9:d2:e7:c4:ba:43:29:8b:06:a5:cb:6c:de:22:a1:e7:97:de:
         39:30:16:d1:50:2d:b4:68:02:9f:8e:47:a0:c3:b6:67:a0:6f:
         ed:f5:c4:66:72:17:f3:7a:ca:1f:05:85:c2:79:16:e5:11:fb:
         d0:52:c9:d2:e7:cb:ae:fe:8d:7c:10:a7:8d:02:b4:a1:10:ab:
         c9:8f:13:b9:a9:43:4d:99:17:fa:93:70:40:42:54:fa:18:36:
         eb:5c:75:58:8b:9d:80:7d:e1:2e:ae:f4:9c:76:4b:52:50:6a:
         dd:0c:b9:9a:ea:db:38:f6:7b:59:16:75:8f:05:a5:13:f0:23:
         7f:67:da:0b:ff:5d:47:35:9d:e7:f8:30:0d:9c:49:ff:32:3a:
         76:6e:fe:87:c7:53:98:c6:4b:10:78:06:b7:05:2b:b0:47:2d:
         3a:30:ce:ee:fd:a3:c6:a7:23:bf:67:6f:2a:e2:5d:c7:27:b6:
         63:31:66:f0:81:03:ce:23:12:5f:83:37:bb:8a:a4:36:26:c2:
         99:21:4e:9f:32:db:f7:d0:ba:3d:c8:73:73:c9:cd:a5:98:d9:
         63:03:b8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:13:35 2026 by rpki-client