This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C5CC476F82611F0B96231D1DAE4EC9C.roa
File:                     0C5CC476F82611F0B96231D1DAE4EC9C.roa (raw, json)
Hash identifier:          z2bcsivL8eCtZXoj4CyMgKelKD301OYL5jq+4j25kZc=
Subject key identifier:   12:78:26:39:0E:A1:40:33:43:5F:3C:8B:5C:B4:41:A7:10:AB:C5:B4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0198B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C5CC476F82611F0B96231D1DAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 06:37:55 +0000
ROA not before:           Fri 23 Jan 2026 06:37:50 +0000
ROA not after:            Wed 28 Jan 2026 06:37:50 +0000
asID:                     136907
IP address blocks:        156.230.32.0/21 maxlen: 24
                          156.230.40.0/21 maxlen: 24
                          156.230.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104625 (0x198b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 23 06:37:50 2026 GMT
            Not After : Jan 28 06:37:50 2026 GMT
        Subject: CN=69731743-884e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:fd:66:67:a6:83:07:56:a9:ca:13:c9:ce:
                    1b:4e:47:05:85:d2:f4:fb:3d:f0:e4:5f:71:10:79:
                    62:ae:34:e1:6e:58:6c:9f:5c:08:8d:1c:3d:03:c1:
                    4b:a4:4f:9a:f4:6f:e2:5b:d4:37:6e:17:3c:e4:61:
                    56:d7:62:a6:e5:de:1f:af:6f:ad:48:a8:6c:cb:a1:
                    8c:fc:34:63:a5:3a:91:15:17:6d:a9:26:f4:20:5d:
                    2c:cd:e2:a8:77:cc:ff:9d:59:57:2c:73:05:68:c8:
                    db:69:9e:c1:42:bc:a0:35:10:0e:1f:75:54:ea:72:
                    24:9a:3c:fd:e4:11:41:81:51:54:aa:7a:82:13:85:
                    cf:0d:d6:7a:ea:0f:25:47:e3:75:32:f5:88:76:e0:
                    26:a6:02:23:50:e1:41:56:ae:b5:cc:74:3b:68:99:
                    ae:1b:3f:c0:40:56:fd:3b:6b:14:58:20:bb:01:ea:
                    c1:00:69:9f:67:5c:26:e4:48:2f:64:bd:24:20:c1:
                    04:4d:f0:30:27:a9:75:b9:ae:f7:03:0b:37:fd:1b:
                    d8:b2:f8:0d:d0:ef:ec:34:4b:6d:5c:79:f0:57:05:
                    a3:d5:59:f4:c7:d8:45:1e:8d:00:a6:15:8f:cf:d2:
                    48:9c:05:5c:cb:3f:39:9b:24:f6:ec:7c:2a:ca:3a:
                    da:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:78:26:39:0E:A1:40:33:43:5F:3C:8B:5C:B4:41:A7:10:AB:C5:B4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C5CC476F82611F0B96231D1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.32.0/20
                  156.230.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         76:3a:9e:e6:61:9b:55:18:ae:7b:ed:de:d2:fe:49:63:f5:50:
         49:a3:f1:e2:e9:68:48:4f:ca:c0:3c:c5:2c:8c:06:04:e0:5e:
         47:ca:3b:e7:2f:1f:8f:94:92:48:73:28:21:cf:86:aa:e2:b4:
         a2:4b:21:d1:d2:42:51:26:2b:66:91:46:99:6c:bc:44:ca:40:
         1b:a1:f3:53:0e:7b:63:72:38:4e:dd:72:1c:70:16:87:b6:54:
         33:30:6d:04:6f:fd:d9:7a:45:f2:35:ec:1f:b4:b5:3e:0f:58:
         3d:fb:f7:76:25:14:68:8f:da:ad:e2:41:e0:5f:ac:2a:f1:d6:
         00:bc:ea:a3:d9:40:70:09:29:12:05:f2:0d:9c:01:e4:d7:9b:
         fb:04:28:8d:44:cb:53:0f:98:1a:77:7f:a1:11:c6:3b:db:16:
         75:3a:28:14:3d:e9:f3:22:63:60:43:7d:1c:b2:dd:9d:8c:0d:
         50:d0:55:2d:cb:b2:1d:3b:1b:5f:ea:20:40:a4:89:57:ab:d9:
         fc:e7:83:96:52:5f:c4:e7:69:25:ab:b7:e9:cd:05:c1:88:bb:
         4e:39:b2:43:ab:21:12:87:8c:71:2f:bd:e5:04:6a:44:60:f5:
         09:36:11:f9:75:25:bc:d9:07:bf:37:65:d3:53:1f:b3:e2:3a:
         0e:49:84:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:39:40 2026 by rpki-client