This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B890958F8C311F0BC41F883DAE4EC9C.roa
File:                     1B890958F8C311F0BC41F883DAE4EC9C.roa (raw, json)
Hash identifier:          TR+Ax4UbMnO3SgrxrzM/Wv598+XUOdefTvj169vQ0fY=
Subject key identifier:   C0:A5:AB:DD:75:95:86:26:1F:41:D8:A9:B9:BA:22:2D:AE:AC:53:11
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019906
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B890958F8C311F0BC41F883DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 01:22:12 +0000
ROA not before:           Sat 24 Jan 2026 01:22:07 +0000
ROA not after:            Wed 04 Feb 2026 01:22:07 +0000
asID:                     138195
IP address blocks:        156.234.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104710 (0x19906)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 01:22:07 2026 GMT
            Not After : Feb  4 01:22:07 2026 GMT
        Subject: CN=69741ec3-733f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:93:63:f3:5f:58:0b:5c:36:b5:9a:6f:b4:7e:
                    8d:4c:b6:90:02:88:d2:58:c1:aa:3d:73:80:7d:21:
                    11:2c:60:ad:2f:0a:77:a4:d6:73:05:4c:1b:fd:43:
                    92:54:fd:68:2b:83:9a:2a:e0:65:1f:b9:66:c3:f2:
                    f8:f4:e3:07:32:86:43:1c:bc:7e:85:d8:68:98:06:
                    4e:c6:e3:8d:a4:16:b0:89:b3:15:8c:3d:09:11:10:
                    e4:3f:b8:4a:6a:e7:6e:20:52:8b:c0:41:72:35:67:
                    c3:f8:8f:df:0c:76:a0:b7:35:d5:81:3e:a2:df:c3:
                    e8:b5:99:f7:ba:8b:75:9c:77:58:03:9e:65:ec:79:
                    41:1c:b8:ae:53:f0:25:d7:45:4a:85:8d:b2:a9:4f:
                    c9:4a:fa:80:ec:08:8d:0c:0e:7b:f7:4c:e2:87:48:
                    67:dc:e7:43:a6:5a:85:f7:f5:de:60:1b:a4:27:e9:
                    d0:65:21:a7:79:8b:71:2e:57:d4:84:1a:fc:4a:9d:
                    85:79:01:0a:ae:87:bc:09:ea:32:79:1a:6d:ef:4e:
                    b4:51:db:11:e7:ee:c8:c9:30:e6:66:a3:a6:06:c3:
                    36:6e:36:5a:6d:0f:67:6f:54:23:20:76:e8:f0:27:
                    3e:90:72:81:6e:df:96:2d:56:e1:04:8f:15:cf:91:
                    b9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A5:AB:DD:75:95:86:26:1F:41:D8:A9:B9:BA:22:2D:AE:AC:53:11
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B890958F8C311F0BC41F883DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ba:31:09:1b:6f:d6:43:af:2f:6e:21:95:69:e8:52:aa:c2:d4:
         80:b3:4e:b3:c4:dd:c3:8b:a4:74:65:95:fe:2d:13:2e:bd:95:
         c6:5b:01:50:6e:11:d3:3c:8f:d0:4f:b2:c9:bf:80:10:cb:7e:
         eb:fe:63:ff:c6:76:51:52:d0:0b:c9:ab:65:fb:e0:81:84:56:
         20:19:76:61:05:6e:35:05:59:e5:a9:1c:06:7e:8e:51:e3:9e:
         f0:c9:ad:04:74:a5:ae:9b:df:86:af:b8:18:a5:ef:00:32:a4:
         86:6b:da:c2:cb:35:17:3c:58:31:ce:a0:26:f2:2c:2e:ad:c4:
         01:a5:40:64:ac:71:de:64:17:17:34:22:10:6a:42:3f:a8:04:
         5d:cc:86:fe:46:b2:8c:47:71:54:93:75:d3:9b:62:4d:c5:b0:
         ea:6e:3a:d2:ef:27:b0:da:3e:31:53:7d:a4:4a:12:86:fb:4a:
         fc:9f:95:82:87:2e:24:86:1c:2d:b1:b8:33:ea:7a:a9:51:f2:
         5a:0a:50:4f:b9:d4:a8:4e:4d:89:0c:0a:7b:e3:8f:76:75:22:
         99:5e:59:07:6e:88:84:72:a6:06:a0:93:35:08:20:3b:36:ac:
         bb:fa:c9:e2:67:fd:a8:d2:96:e1:0b:7f:72:83:1e:50:68:b7:
         01:40:ba:08
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIDAZkGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTI0MDEyMjA3WhcNMjYwMjA0MDEyMjA3WjAYMRYw
FAYDVQQDEw02OTc0MWVjMy03MzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1ZNj819YC1w2tZpvtH6NTLaQAojSWMGqPXOAfSERLGCtLwp3pNZzBUwb
/UOSVP1oK4OaKuBlH7lmw/L49OMHMoZDHLx+hdhomAZOxuONpBawibMVjD0JERDk
P7hKauduIFKLwEFyNWfD+I/fDHagtzXVgT6i38PotZn3uot1nHdYA55l7HlBHLiu
U/Al10VKhY2yqU/JSvqA7AiNDA5790zih0hn3OdDplqF9/XeYBukJ+nQZSGneYtx
LlfUhBr8Sp2FeQEKroe8CeoyeRpt7060UdsR5+7IyTDmZqOmBsM2bjZabQ9nb1Qj
IHbo8Cc+kHKBbt+WLVbhBI8Vz5G5CQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMCl
q911lYYmH0HYqbm6Ii2urFMRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQjg5MDk1OEY4QzMxMUYwQkM0MUY4ODNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnOowDQYJKoZIhvcNAQELBQAD
ggEBALoxCRtv1kOvL24hlWnoUqrC1ICzTrPE3cOLpHRllf4tEy69lcZbAVBuEdM8
j9BPssm/gBDLfuv+Y//GdlFS0AvJq2X74IGEViAZdmEFbjUFWeWpHAZ+jlHjnvDJ
rQR0pa6b34avuBil7wAypIZr2sLLNRc8WDHOoCbyLC6txAGlQGSscd5kFxc0IhBq
Qj+oBF3Mhv5GsoxHcVSTddObYk3FsOpuOtLvJ7DaPjFTfaRKEob7SvyflYKHLiSG
HC2xuDPqeqlR8loKUE+51KhOTYkMCnvjj3Z1IpleWQduiIRypgagkzUIIDs2rLv6
yeJn/ajSluELf3KDHlBotwFAugg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:51:30 2026 by rpki-client