This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CA200DCF8C511F0A4FDBB92DAE4EC9C.roa
File:                     0CA200DCF8C511F0A4FDBB92DAE4EC9C.roa (raw, json)
Hash identifier:          /wxj66hu04yN1O1qFpZ8ESqOlTNAUy8qAYgHbhP0R2A=
Subject key identifier:   BA:FB:2C:62:78:92:F1:4B:E5:C1:41:8E:29:67:0D:91:93:20:AB:64
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01990E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CA200DCF8C511F0A4FDBB92DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 01:36:05 +0000
ROA not before:           Sat 24 Jan 2026 01:36:00 +0000
ROA not after:            Wed 04 Feb 2026 01:36:00 +0000
asID:                     18013
IP address blocks:        156.234.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104718 (0x1990e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 01:36:00 2026 GMT
            Not After : Feb  4 01:36:00 2026 GMT
        Subject: CN=69742205-f446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:36:91:82:cf:cb:0b:3b:cd:a5:33:0b:90:
                    f9:3d:81:60:d6:de:be:de:56:c7:3e:fd:13:cb:60:
                    72:63:45:92:fc:d7:16:a0:23:31:34:44:d3:2a:8f:
                    fb:44:6b:e6:f1:89:94:d8:5e:05:c2:3a:24:51:12:
                    62:6c:53:ca:06:7c:4e:d2:41:53:08:c5:bb:c4:b8:
                    83:c7:36:f6:9a:e3:e1:3f:5f:f4:e6:54:1a:ac:35:
                    c0:ed:2d:d3:a5:e4:7f:81:07:5c:d6:81:b4:26:e9:
                    3e:e6:2f:1d:f3:76:4f:1e:e7:7b:a9:86:53:e5:e2:
                    46:fe:d9:5f:d3:6a:be:38:e3:d8:a1:66:ed:80:76:
                    b2:66:e0:f1:1f:15:9f:e2:ee:3a:e2:fe:2b:5d:20:
                    0d:ec:f5:dd:89:f3:69:01:0c:e5:92:ae:eb:6c:07:
                    ec:68:af:ab:fe:ca:1b:a1:ed:40:9f:40:2c:03:82:
                    6e:26:c1:12:56:ac:0b:1a:d1:ec:68:0f:49:46:85:
                    04:ea:0d:ee:bd:3a:8c:d4:fd:35:a8:0d:48:b7:65:
                    26:9d:a6:ab:ad:40:cd:63:76:d7:60:4e:3f:f5:32:
                    fa:8a:51:2c:72:6f:b0:90:83:4d:2e:64:c7:15:f9:
                    1e:97:a0:6e:86:ab:09:1b:e5:84:f5:c6:ae:ac:d7:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FB:2C:62:78:92:F1:4B:E5:C1:41:8E:29:67:0D:91:93:20:AB:64
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CA200DCF8C511F0A4FDBB92DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:47:74:75:6a:b0:5d:8d:bc:7b:e3:c7:31:0a:a5:01:62:17:
         c8:d4:a1:00:36:9b:27:f6:d4:c7:e5:c9:fd:98:a4:88:ef:51:
         a4:ad:08:5a:4f:ee:f7:dd:86:12:e2:6c:1e:65:de:9f:65:40:
         1c:b2:04:50:4d:1f:db:22:98:c1:37:cc:29:bf:9d:7d:11:4d:
         be:ed:71:26:77:f0:f5:0f:08:ae:9a:39:20:05:9e:6f:34:72:
         43:08:da:74:52:1e:6e:4f:68:68:91:45:51:6c:cf:d4:c9:f5:
         34:bb:02:5e:60:c4:a4:44:4c:7d:35:19:59:d9:62:5e:93:0b:
         63:fa:c5:85:24:2f:ff:e6:b0:2f:ba:e8:6f:b2:c4:96:26:4b:
         39:33:87:be:9b:fe:78:bf:47:88:68:0f:b9:f3:7d:fd:30:08:
         f5:6d:90:0c:90:69:4a:f9:75:7e:70:80:cb:a2:17:48:00:51:
         c6:15:6c:81:84:1e:e7:e6:b9:51:fc:50:d4:39:27:02:1d:04:
         11:2a:08:a0:dd:84:b3:11:a1:1c:76:0f:fd:65:3f:88:d6:e5:
         33:76:5f:c7:6c:c9:a9:3e:77:88:8c:a4:2f:51:6d:46:60:ae:
         be:7d:dc:68:6b:fc:68:a7:8e:06:91:2d:58:ac:18:8f:65:66:
         1e:d2:cb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:48:44 2026 by rpki-client