This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/104DA3B2F5D711F0B5667B9BDAE4EC9C.roa
File:                     104DA3B2F5D711F0B5667B9BDAE4EC9C.roa (raw, json)
Hash identifier:          hvwjCS4RjV+UaajqsYFuYcp8W/8QMoxSfLlC+AzDYUc=
Subject key identifier:   F3:13:10:BD:73:43:A7:0C:CE:48:E1:1D:0A:43:67:30:1D:0F:5A:91
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0197BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/104DA3B2F5D711F0B5667B9BDAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 08:07:29 +0000
ROA not before:           Tue 20 Jan 2026 08:07:24 +0000
ROA not after:            Thu 26 Feb 2026 08:07:24 +0000
asID:                     274728
IP address blocks:        156.235.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104378 (0x197ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 20 08:07:24 2026 GMT
            Not After : Feb 26 08:07:24 2026 GMT
        Subject: CN=696f37c1-062a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:ee:31:b8:8e:e3:b2:8c:32:22:a9:cb:86:
                    4a:c5:04:30:d6:34:bf:2a:01:ba:16:eb:e6:59:63:
                    20:e1:61:75:8c:d5:0b:06:1d:38:ae:8e:02:60:10:
                    39:a4:c4:20:bf:e5:9b:ca:7f:3d:b2:9c:78:82:fd:
                    51:f2:b7:41:67:db:f0:69:64:71:d9:3b:db:21:b3:
                    81:9a:58:0b:ce:54:8b:0b:a2:23:35:ab:57:ea:ad:
                    9c:f8:70:68:3d:86:98:9c:1a:fd:59:e3:a8:db:81:
                    7f:eb:b8:73:9f:ff:df:f1:8e:93:00:6c:3c:82:03:
                    40:fe:2d:22:2b:43:7c:48:89:76:74:48:84:d8:da:
                    63:56:6e:05:61:46:64:7e:fa:c9:92:29:fe:2b:c7:
                    89:bd:76:2b:21:5b:87:8f:d3:48:71:bf:db:32:1f:
                    81:c2:91:3f:8d:1d:a8:9c:d5:79:20:f4:b1:8f:02:
                    be:22:a7:4a:55:86:08:5b:4f:84:b6:07:ff:6b:18:
                    91:95:c7:10:17:6b:36:f8:29:a2:e2:00:e0:1f:46:
                    a4:14:91:e2:af:df:87:5e:5f:ee:56:82:9a:ba:29:
                    8a:f4:d8:8a:48:95:b9:6a:05:4a:1a:d4:16:9e:cb:
                    92:40:a0:13:65:ba:a0:92:5e:36:8c:25:43:96:9e:
                    75:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:13:10:BD:73:43:A7:0C:CE:48:E1:1D:0A:43:67:30:1D:0F:5A:91
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/104DA3B2F5D711F0B5667B9BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:dc:71:82:ff:1e:df:0a:31:a4:49:92:50:87:60:5c:4c:5f:
         3a:aa:01:86:31:43:de:88:33:e8:55:99:a0:b1:6c:44:be:61:
         5b:9c:de:45:29:32:20:75:6f:84:ee:d0:2d:32:01:6f:16:f1:
         36:50:4b:ce:a0:38:88:0f:9d:21:9c:79:02:74:ab:d3:c3:a8:
         80:0c:99:4a:03:80:74:ae:c4:91:f3:89:3e:5b:5a:ac:3a:30:
         74:e8:b7:5f:b9:ed:5a:2f:e0:39:a0:2e:66:03:50:2b:b2:a7:
         77:d2:38:09:21:b8:da:eb:73:85:35:53:03:34:d6:8a:4f:3b:
         1f:4c:89:59:8e:6b:fe:e3:1c:ef:7d:70:c9:2a:43:bb:fd:e6:
         6e:dc:2f:37:66:c1:b4:a9:36:fd:54:bf:47:95:61:93:83:ec:
         fe:2e:33:15:58:cc:4b:63:b1:72:9d:0e:3e:67:5f:cc:45:57:
         32:b3:2c:70:88:fe:1e:61:ce:2a:48:1a:e5:c9:34:55:4b:29:
         3b:1f:b0:02:90:1b:45:05:84:3b:b0:60:bc:74:88:23:84:4a:
         20:45:c7:3f:33:a3:d0:e7:df:84:0a:95:22:21:cd:22:52:92:
         dc:fd:53:bc:39:2a:8a:f2:b1:ec:62:9d:de:ff:85:c7:68:86:
         85:f9:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:15:38 2026 by rpki-client