This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE6DC168F96A11F0AECAE68EDAE4EC9C.roa
File:                     EE6DC168F96A11F0AECAE68EDAE4EC9C.roa (raw, json)
Hash identifier:          eAJ9U1iwE3Q6Bk7TZsaBdthOkUzY1oBF9qzv1WoAOVk=
Subject key identifier:   79:BE:E5:D6:9B:E5:BD:96:5E:DF:D4:DD:86:63:AA:1E:F8:83:09:03
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0199A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE6DC168F96A11F0AECAE68EDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 21:23:31 +0000
ROA not before:           Sat 24 Jan 2026 21:23:26 +0000
ROA not after:            Tue 03 Mar 2026 21:23:26 +0000
asID:                     44559
IP address blocks:        156.233.8.0/24 maxlen: 24
                          156.233.9.0/24 maxlen: 24
                          156.233.33.0/24 maxlen: 24
                          156.243.150.0/24 maxlen: 24
                          156.243.151.0/24 maxlen: 24
                          156.243.156.0/24 maxlen: 24
                          156.243.158.0/24 maxlen: 24
                          156.243.224.0/24 maxlen: 24
                          156.243.226.0/24 maxlen: 24
                          156.249.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104864 (0x199a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 21:23:26 2026 GMT
            Not After : Mar  3 21:23:26 2026 GMT
        Subject: CN=69753853-64a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8e:af:bf:cf:f3:22:01:e0:cc:0a:b4:98:a5:
                    95:4b:6a:02:a3:9d:87:88:f7:f2:5b:8d:12:85:82:
                    09:ba:fd:0d:74:0c:82:f8:66:e7:43:95:53:70:8e:
                    8f:93:27:e2:80:bc:05:3f:d9:0c:a5:b2:9d:36:ec:
                    c2:f5:15:24:d8:9c:33:a9:8b:60:87:99:96:a7:e4:
                    2b:c9:64:49:fe:f0:8d:28:34:c8:89:f3:44:96:fb:
                    55:b6:7c:95:5f:b8:5f:28:5e:51:0f:aa:86:3e:06:
                    99:ac:ec:a9:a1:aa:50:97:8e:25:94:ed:f3:7c:e3:
                    a6:8f:4a:8c:61:38:11:ec:f0:09:c1:96:be:ef:ae:
                    31:40:56:06:f4:b4:65:20:39:da:fa:3b:1d:62:21:
                    23:8b:95:b0:63:3c:f4:39:1b:e2:c4:48:b2:55:cf:
                    c3:22:1c:3b:fe:19:d6:b2:c6:e0:75:3b:be:cf:91:
                    ae:52:f4:9c:62:5a:86:cc:b1:f0:ad:62:03:8f:35:
                    a3:60:4f:47:c6:d3:09:50:22:f2:62:2d:84:aa:fa:
                    7b:36:7a:ec:ca:e1:e2:8f:55:b7:d9:8e:dd:90:99:
                    ea:23:c1:d6:27:18:d1:31:41:0d:c1:03:dd:0f:b6:
                    24:e5:08:0f:1f:64:c7:8e:ed:c4:23:75:29:42:d9:
                    b5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BE:E5:D6:9B:E5:BD:96:5E:DF:D4:DD:86:63:AA:1E:F8:83:09:03
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE6DC168F96A11F0AECAE68EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.8.0/23
                  156.233.33.0/24
                  156.243.150.0/23
                  156.243.156.0/24
                  156.243.158.0/24
                  156.243.224.0/24
                  156.243.226.0/24
                  156.249.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:97:8d:dd:d3:5d:b7:37:85:b8:a1:81:13:eb:44:3c:b4:af:
         0b:eb:8e:17:c0:c5:22:48:87:ea:68:35:c1:68:6b:f1:16:32:
         65:22:70:2e:04:72:0d:58:0c:b0:8d:c8:d9:3c:a5:21:f9:e2:
         da:e0:01:04:63:a0:63:95:bf:63:ac:d0:52:6c:b6:94:98:ae:
         b7:9e:17:e1:28:99:cc:92:86:00:4a:c8:82:61:a0:29:74:dd:
         b5:70:a9:02:35:b7:c0:3d:fa:ff:74:35:08:67:19:6d:45:00:
         c3:fc:e6:77:e9:fd:8c:3f:e6:79:0a:7a:60:90:a1:84:cd:e7:
         e9:7a:22:f6:9e:1c:93:23:81:ad:26:25:ab:c5:b0:c7:3b:ae:
         36:06:56:40:5f:bf:97:bd:e7:ea:12:7d:13:be:cd:24:f0:28:
         1f:ce:91:46:24:9f:af:9e:37:dc:d5:e6:c6:a5:c7:26:30:c5:
         39:a7:8d:ed:6d:df:de:4a:10:55:71:74:85:e0:c6:b8:34:a2:
         fc:d2:0e:cd:b3:6a:64:e7:02:18:56:46:b1:42:43:87:55:b0:
         14:cb:2b:8b:7c:52:df:f2:c2:e2:5c:ee:06:d7:e0:2f:d7:e1:
         e7:b7:b7:5b:47:84:1b:ff:73:04:0b:73:c6:bd:61:36:da:a3:
         26:cd:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:43:15 2026 by rpki-client