This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D52C91A8F50411F0AB0A0492DAE4EC9C.roa
File:                     D52C91A8F50411F0AB0A0492DAE4EC9C.roa (raw, json)
Hash identifier:          97ugvqiymtQQxIdGPdG3CS3CLDLcF6esdysn8C/xf50=
Subject key identifier:   64:21:F7:A6:15:B7:44:7A:84:1A:3A:F7:15:2D:DC:63:E9:1F:B1:DC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019797
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D52C91A8F50411F0AB0A0492DAE4EC9C.roa
Signing time:             Mon 19 Jan 2026 07:02:36 +0000
ROA not before:           Mon 19 Jan 2026 07:02:30 +0000
ROA not after:            Mon 23 Feb 2026 07:02:30 +0000
asID:                     138415
IP address blocks:        156.247.32.0/24 maxlen: 24
                          156.247.33.0/24 maxlen: 24
                          156.247.34.0/24 maxlen: 24
                          156.247.35.0/24 maxlen: 24
                          156.247.36.0/24 maxlen: 24
                          156.247.37.0/24 maxlen: 24
                          156.247.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104343 (0x19797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 19 07:02:30 2026 GMT
            Not After : Feb 23 07:02:30 2026 GMT
        Subject: CN=696dd70c-a40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:61:52:f9:e1:48:a5:72:a2:b7:f4:c2:5f:
                    6e:f9:88:9a:b8:97:56:e4:09:05:a6:c7:ed:22:21:
                    4d:5d:fa:83:f4:a1:bf:7f:1a:22:ee:fb:85:b6:93:
                    52:76:5d:a4:05:90:10:b3:cd:2b:dd:3c:d3:7c:4a:
                    75:6c:d7:ec:b7:f3:62:17:4c:f5:fc:09:7b:46:e3:
                    65:57:9e:2d:3a:e5:37:4c:c0:36:56:ff:29:32:5b:
                    eb:be:b1:cb:d2:7a:f3:bb:ad:75:bd:95:d3:03:c1:
                    69:1d:68:35:31:7c:4e:08:95:de:ff:45:17:ce:1a:
                    41:37:ca:79:29:8d:07:9a:a9:d2:b1:1d:ea:98:e1:
                    de:b7:c7:58:7d:b6:62:94:60:93:dc:1f:2b:d2:82:
                    92:bb:22:5e:9b:be:3b:e0:45:d7:2d:4e:22:0a:0c:
                    a5:72:6b:a3:04:f0:1d:a7:d8:13:c9:fb:6f:30:2a:
                    f6:31:4c:0b:5f:a7:fd:54:99:13:50:84:b3:ea:57:
                    fa:b8:b9:c1:53:9c:ad:08:fa:dc:01:f8:d4:e9:5c:
                    01:ef:b6:0e:6a:fb:02:49:35:09:56:59:83:8a:68:
                    15:ae:2b:75:ab:f0:73:53:87:54:dc:63:14:83:fa:
                    29:fd:b3:bb:8c:5b:a3:62:17:87:79:cc:70:72:28:
                    e9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:21:F7:A6:15:B7:44:7A:84:1A:3A:F7:15:2D:DC:63:E9:1F:B1:DC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D52C91A8F50411F0AB0A0492DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.32.0-156.247.38.255

    Signature Algorithm: sha256WithRSAEncryption
         59:a4:fe:40:b4:2e:75:88:08:74:5f:29:4c:9c:a5:ae:c7:41:
         94:7a:09:7b:08:16:3b:1b:2d:46:9a:37:92:4c:84:f6:d0:97:
         d7:09:0d:d0:e5:eb:7e:6f:77:90:2c:8e:67:71:5c:c0:62:dd:
         b5:8b:3c:8a:2a:36:ee:6b:67:0d:c7:5c:9f:8f:ee:77:8b:01:
         04:95:a2:fb:c5:dc:f1:76:f2:e3:07:f1:d9:6b:99:9a:2f:ea:
         58:59:b7:af:08:fa:83:58:27:56:44:fe:86:03:1e:64:de:c2:
         0b:5a:b2:a9:e7:45:b5:11:87:3f:9e:fd:41:f9:fa:d9:fd:35:
         82:0a:1d:b0:cb:c0:d7:28:f7:a3:7d:52:4e:06:3d:20:8d:f8:
         11:f9:7c:d6:ca:8c:a7:2b:03:22:96:93:d0:5f:80:23:66:ec:
         7c:c7:74:5f:30:2b:99:a4:a0:1c:ff:76:5c:27:e0:90:48:95:
         ad:b1:4b:53:de:af:97:9e:d0:f1:56:09:9d:7c:ef:12:78:1b:
         91:8c:a0:14:eb:70:8d:c5:b0:db:4c:a5:43:1e:40:10:e4:7d:
         36:9d:1b:67:ae:15:92:c0:e1:be:c3:6a:e8:a9:c9:4a:59:49:
         dd:b2:98:42:0b:a0:12:16:2a:fd:bf:a4:cc:94:38:1d:86:12:
         97:70:fd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:48:12 2026 by rpki-client