This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0902C274F8F511F09F92A2C9DAE4EC9C.roa
File:                     0902C274F8F511F09F92A2C9DAE4EC9C.roa (raw, json)
Hash identifier:          PgLdJRbpV1YcPAEWpPmlN9mqE61r6HdZ+PdVr/agBss=
Subject key identifier:   92:77:6F:DF:9B:A9:32:ED:8E:A2:59:3D:15:2B:54:F9:B7:E8:E7:B3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019923
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0902C274F8F511F09F92A2C9DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 07:19:35 +0000
ROA not before:           Sat 24 Jan 2026 07:19:31 +0000
ROA not after:            Mon 23 Feb 2026 07:19:31 +0000
asID:                     401739
IP address blocks:        156.247.40.0/24 maxlen: 32
                          156.247.41.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104739 (0x19923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 07:19:31 2026 GMT
            Not After : Feb 23 07:19:31 2026 GMT
        Subject: CN=69747287-a588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:b1:b7:04:81:57:75:69:39:52:7d:79:69:
                    1e:5d:28:94:84:19:60:c1:51:d4:da:11:a7:e3:7c:
                    4c:28:d0:94:6e:33:8d:2a:eb:50:3c:f8:29:39:3f:
                    f6:53:94:20:66:37:9d:dd:79:42:f1:a2:c8:18:7e:
                    61:21:1b:64:23:9a:a9:5f:bb:6c:0e:fe:d7:dc:35:
                    da:09:5c:dd:13:71:df:dd:52:de:1a:e2:3f:e6:19:
                    e2:dd:b8:51:fb:7f:75:3e:f0:c1:d2:41:e4:d4:89:
                    dc:0e:e5:e4:83:96:25:69:b8:27:0a:7b:a8:01:78:
                    e5:8c:24:04:3d:d1:95:76:2e:b5:fc:a8:d3:a8:b5:
                    58:2f:ab:e6:9f:0f:06:81:3e:6c:73:3d:12:7e:53:
                    12:28:ca:1f:23:ce:0e:78:cb:58:3b:eb:50:df:85:
                    42:a4:65:9f:95:ad:c4:30:ec:73:51:ab:17:33:f8:
                    0f:c6:9f:97:59:bd:46:c4:33:8a:3b:b1:e0:61:59:
                    41:fd:71:46:34:3d:6e:ec:bd:af:d3:56:e8:ba:64:
                    56:13:0c:a4:72:2b:e5:26:54:06:9f:79:52:55:8c:
                    d0:93:23:8b:6e:2e:c3:34:d7:2a:81:66:55:63:0e:
                    31:82:bd:c3:a5:34:19:c5:f7:d1:6c:93:ce:38:b1:
                    6a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:77:6F:DF:9B:A9:32:ED:8E:A2:59:3D:15:2B:54:F9:B7:E8:E7:B3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0902C274F8F511F09F92A2C9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:fd:11:0c:e9:b1:75:32:1e:3e:ad:44:3e:17:d5:ec:e9:37:
         cc:98:bd:b2:77:cf:7b:0e:1c:60:19:ed:39:8e:c8:43:10:ea:
         75:a0:96:9f:f0:55:ce:ee:57:24:0a:8d:13:9b:ae:cd:a3:00:
         db:56:6b:11:2b:75:96:ff:19:97:e0:a6:33:a5:cc:05:96:a5:
         c0:db:b1:6b:41:f6:c9:87:e6:7b:df:5c:6f:a4:4b:e7:0e:40:
         eb:4d:45:ed:8b:80:96:8b:dc:5b:33:1f:ae:f6:6a:b3:10:32:
         fb:59:6e:fd:2f:18:4c:d6:40:59:97:ba:8d:9c:20:72:f6:09:
         42:58:09:8c:20:88:9c:29:54:14:54:59:7d:0c:ab:21:18:11:
         5c:77:1e:75:1f:43:1f:9b:a4:bf:3c:70:55:af:37:9f:c9:fc:
         ce:2f:9a:ef:3c:f8:91:64:0a:58:0d:a6:76:65:6b:2f:62:c9:
         5b:4f:6b:0d:2e:61:76:78:f4:ce:34:b6:46:93:93:2e:37:e1:
         5f:81:6c:6a:25:d4:fd:5d:90:6c:06:9d:cc:3a:2c:55:19:81:
         a4:a4:a6:c8:cf:fe:17:52:70:b4:76:f9:7e:1d:b5:83:b9:26:
         da:16:39:52:3c:20:5e:51:9b:39:d7:16:1a:d8:7c:65:89:5c:
         b8:18:c5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:17:47 2026 by rpki-client