This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BC59F54F5DF11F0BE7D96CADAE4EC9C.roa
File:                     0BC59F54F5DF11F0BE7D96CADAE4EC9C.roa (raw, json)
Hash identifier:          mH1I1eLfS9B7ZWu2SxLPPbFgjQY2kOdRBwVe3ipiG7A=
Subject key identifier:   AF:6B:AD:15:E5:B8:AA:6B:F8:12:98:77:2A:12:AD:F8:7D:AC:76:80
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0197C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BC59F54F5DF11F0BE7D96CADAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 09:04:37 +0000
ROA not before:           Tue 20 Jan 2026 09:04:32 +0000
ROA not after:            Tue 17 Feb 2026 09:04:32 +0000
asID:                     395793
IP address blocks:        156.230.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104386 (0x197c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 20 09:04:32 2026 GMT
            Not After : Feb 17 09:04:32 2026 GMT
        Subject: CN=696f4525-ab27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0c:56:4e:1e:9f:cd:63:d0:c0:70:b9:73:46:
                    a9:c3:b8:bf:49:b6:e5:de:1e:31:5d:65:28:f2:28:
                    fc:9b:d1:72:69:71:f3:02:01:ea:0a:fd:c7:b0:35:
                    c7:e6:e5:87:72:fa:73:1b:eb:06:50:35:1d:f6:30:
                    f9:73:39:05:eb:b6:0a:47:98:3d:b5:11:c9:a7:79:
                    4e:bd:46:c2:1c:40:25:a3:a5:05:3f:2e:03:db:06:
                    94:1c:2f:0a:22:9e:3f:6a:a6:dd:22:bc:47:e1:d2:
                    1f:7a:a4:73:0b:3b:58:72:c2:40:e7:e0:c0:de:dd:
                    ef:8b:cd:a7:60:dd:16:70:82:2b:2b:96:47:f7:41:
                    1e:00:ae:08:3e:ad:20:5b:a0:88:77:4e:eb:b5:f6:
                    80:db:55:24:c8:4a:36:09:db:9e:b3:e0:15:7c:56:
                    25:6d:6d:43:f1:8f:6f:44:47:91:2e:70:13:19:2b:
                    be:3e:c6:df:a6:6d:67:a7:24:21:db:32:e4:4b:77:
                    7e:ae:29:d2:58:09:4d:2f:1a:94:8c:a7:86:44:fd:
                    c8:1f:e0:3c:1d:ab:1b:0e:bd:b0:40:20:0e:4a:12:
                    6b:2c:4c:4d:3a:d5:b0:0c:9b:8a:25:9a:89:91:69:
                    8b:3d:3f:2d:98:9a:32:a0:76:be:69:a0:97:2d:2b:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6B:AD:15:E5:B8:AA:6B:F8:12:98:77:2A:12:AD:F8:7D:AC:76:80
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BC59F54F5DF11F0BE7D96CADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:67:0f:d9:b3:ec:c8:bb:03:c3:67:c9:f1:90:c5:ca:bc:8c:
         67:3c:2f:ad:fc:1b:86:70:ec:d2:4f:a7:0f:4b:36:48:4b:46:
         48:3e:3c:cf:ad:0c:3d:d7:99:7d:86:26:de:ab:01:95:ae:b1:
         58:d8:8f:59:8f:3f:50:7a:a1:25:51:84:4d:43:b9:5c:6a:a2:
         a5:4d:84:f4:bc:a1:e6:1d:a8:c4:de:67:de:a1:34:d1:e9:5a:
         0e:ec:15:b4:74:ac:17:f5:4f:14:ee:33:ce:0a:c2:f7:8d:c1:
         a9:38:ec:07:09:a9:38:d2:c8:dc:40:82:e4:6c:0b:2a:86:5b:
         0d:67:9f:72:7b:e6:28:43:42:61:a0:e0:04:60:8a:1f:ea:2b:
         48:2b:0e:86:1b:e9:0c:52:59:8a:bc:e8:eb:12:dc:d2:90:f3:
         83:c7:a4:c0:53:15:27:ae:d6:ab:46:d0:df:e7:35:ae:c9:7f:
         4b:19:2b:d3:d4:a0:77:1a:d9:8d:63:63:d7:cc:c1:2a:89:67:
         ec:25:a4:62:93:29:70:59:a8:06:80:37:0c:84:48:2e:b4:17:
         54:59:80:d5:d9:8b:3f:b0:02:74:48:d9:bd:0a:58:e2:5b:bd:
         47:5a:16:ec:31:c6:e5:9b:d2:de:1a:82:a0:52:37:f7:83:a6:
         24:25:12:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:14:28 2026 by rpki-client