This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C09972F94311F0897F05A3DAE4EC9C.roa
File:                     C2C09972F94311F0897F05A3DAE4EC9C.roa (raw, json)
Hash identifier:          /1poKqzuJLQb/R4RIwF2WbzqGqGNoiYRBOTHpfGW1Cw=
Subject key identifier:   0E:92:81:40:C4:AA:85:D5:AB:ED:EA:A3:38:7A:3E:90:15:77:67:74
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01994F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C09972F94311F0897F05A3DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 16:43:08 +0000
ROA not before:           Sat 24 Jan 2026 16:43:03 +0000
ROA not after:            Tue 03 Mar 2026 16:43:03 +0000
asID:                     44559
IP address blocks:        156.233.43.0/24 maxlen: 24
                          156.233.46.0/24 maxlen: 24
                          156.233.49.0/24 maxlen: 24
                          156.233.50.0/24 maxlen: 24
                          156.233.52.0/24 maxlen: 24
                          156.233.53.0/24 maxlen: 24
                          156.233.55.0/24 maxlen: 24
                          156.233.57.0/24 maxlen: 24
                          156.233.59.0/24 maxlen: 24
                          156.233.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104783 (0x1994f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 16:43:03 2026 GMT
            Not After : Mar  3 16:43:03 2026 GMT
        Subject: CN=6974f69c-46a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:2d:ab:61:35:3e:b5:e2:62:bb:a6:9c:d0:
                    b5:2d:95:80:ea:c1:f4:72:8e:4b:aa:65:19:78:53:
                    9f:e6:9a:dd:c5:35:e3:10:f3:56:35:81:85:42:d3:
                    9c:7f:1e:a8:fd:e0:12:7f:50:a7:af:49:45:69:c5:
                    43:6f:15:a3:f5:5c:ba:13:15:d3:fd:27:74:ee:1f:
                    65:23:92:c7:f9:0b:93:56:19:d4:46:23:b6:c4:9a:
                    19:c8:9e:3e:6f:b8:44:1e:5b:b1:d4:61:8b:2e:73:
                    61:23:14:cc:d5:85:ea:4e:0f:7f:d7:92:f2:2c:32:
                    a3:ea:9e:2c:ec:94:4f:e2:38:3b:73:4a:c5:4d:32:
                    56:bc:5a:26:65:ea:8b:f0:a5:42:10:c0:0d:d1:f5:
                    ac:dc:cf:12:45:af:df:d1:75:49:f9:71:7f:53:68:
                    5d:2b:ed:01:be:99:bb:73:e0:15:0d:ad:96:6d:42:
                    3b:14:a5:96:84:fb:81:f6:38:a6:bb:b4:76:00:df:
                    26:27:52:5a:d4:41:81:b0:de:59:d1:03:7f:5f:a3:
                    5f:7c:d1:bb:ae:03:b4:26:11:57:16:9c:27:04:7f:
                    2a:ff:96:8d:ec:3f:b7:a2:45:68:07:6b:a4:12:cb:
                    5a:ee:b9:34:19:4c:f6:0c:5a:37:08:67:06:e7:b0:
                    a0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:92:81:40:C4:AA:85:D5:AB:ED:EA:A3:38:7A:3E:90:15:77:67:74
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C09972F94311F0897F05A3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.43.0/24
                  156.233.46.0/24
                  156.233.49.0-156.233.50.255
                  156.233.52.0/23
                  156.233.55.0/24
                  156.233.57.0/24
                  156.233.59.0/24
                  156.233.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:d0:d2:3d:29:9a:4d:87:90:b2:42:85:78:48:fc:4f:6f:04:
         cf:07:b2:a1:cd:dd:b8:36:bd:70:38:cd:40:3c:db:cf:99:bf:
         cd:89:a5:b7:5e:15:ed:30:b6:d2:cc:ee:68:1e:9f:13:08:5e:
         3a:69:2f:a9:af:08:7d:76:1d:cf:7d:13:82:51:63:84:d5:14:
         d9:da:91:4c:c9:fa:9c:9a:65:30:d4:73:11:ce:68:78:b5:bd:
         8b:78:6e:0a:b2:3c:b6:52:b2:5b:7c:9a:99:82:5f:20:00:e8:
         f4:4a:95:38:88:8a:97:1c:14:33:ce:06:4a:b1:62:83:29:6c:
         fc:8c:49:ed:88:e3:d5:f1:98:8a:85:b9:89:cc:e6:c5:f3:7a:
         e1:61:1e:8f:69:bc:5c:25:5c:4d:cf:b6:29:fa:6e:38:b2:6a:
         19:a4:35:3a:d8:e5:28:a1:d4:88:7a:34:e2:70:b7:62:97:6d:
         09:44:8f:d5:7f:75:6b:54:24:32:a5:b2:9d:a0:b6:3c:66:b3:
         7e:98:07:25:6b:b8:db:7c:d2:79:26:8c:ad:3f:b6:c2:bc:d8:
         6f:65:6f:f1:29:8e:53:fc:6e:22:5b:15:47:01:3b:4d:1f:3d:
         28:e3:1a:37:59:52:4d:eb:1b:49:ea:6a:2c:9b:ce:5b:f6:83:
         90:2b:4d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:14:56 2026 by rpki-client