This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C4EB6A8F83611F0A81BACB2DAE4EC9C.roa
File:                     2C4EB6A8F83611F0A81BACB2DAE4EC9C.roa (raw, json)
Hash identifier:          slfzWmolHMW1ZFm50TZfW3vyOZ47MfAKYkl8vJ7g4K8=
Subject key identifier:   DA:48:C3:1B:D4:36:DB:FA:71:AD:EE:6C:D0:01:9E:4C:A7:7A:22:80
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0198C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C4EB6A8F83611F0A81BACB2DAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 08:33:21 +0000
ROA not before:           Fri 23 Jan 2026 08:33:16 +0000
ROA not after:            Sun 01 Mar 2026 08:33:16 +0000
asID:                     202437
IP address blocks:        156.228.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104649 (0x198c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 23 08:33:16 2026 GMT
            Not After : Mar  1 08:33:16 2026 GMT
        Subject: CN=69733251-05e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:3a:85:57:e7:d8:13:e2:f0:ae:9e:66:9b:4c:
                    d1:9e:df:32:e0:56:b9:d6:cf:2c:cc:e5:09:31:20:
                    70:f5:8a:46:cf:58:dd:28:ce:4c:c5:7a:57:47:6b:
                    74:a7:c6:f6:52:8c:ec:e6:38:61:21:18:7a:7a:7f:
                    af:3c:f5:38:fe:ec:07:39:e9:42:eb:ff:7c:a2:3f:
                    a7:09:46:15:ca:8b:4f:17:32:00:f2:65:20:37:7d:
                    e5:0c:fb:7a:34:4a:5c:1f:4a:47:66:ab:c4:06:ba:
                    f6:fb:c0:99:b3:02:55:b1:96:02:3c:eb:16:77:8e:
                    bd:8f:97:a7:6e:cb:28:1b:8b:8e:61:c5:8d:ca:a2:
                    d0:00:6f:9d:75:9a:8b:bd:18:0e:cd:d3:39:4e:e9:
                    79:07:75:d7:dd:5b:90:9f:18:e8:ad:5b:97:1d:b9:
                    94:4c:57:a9:94:11:3b:61:4d:26:72:bd:43:a4:ce:
                    55:46:80:c6:c1:1f:22:8b:76:7f:83:85:c8:6f:e6:
                    1d:28:f3:ae:9c:10:2d:c1:8b:37:26:59:1f:34:8a:
                    19:43:20:28:a1:4f:f4:bc:9f:2b:1c:b3:82:0d:82:
                    6e:5b:c9:a4:76:be:be:de:2b:b6:6f:6b:7e:38:b9:
                    0f:4c:bc:03:2a:95:92:e3:fb:2c:a8:75:da:28:e8:
                    94:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:48:C3:1B:D4:36:DB:FA:71:AD:EE:6C:D0:01:9E:4C:A7:7A:22:80
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C4EB6A8F83611F0A81BACB2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:ae:96:9c:68:f3:db:29:f4:94:03:36:c5:f2:af:7d:51:09:
         85:52:3d:05:77:f0:30:62:ac:4b:2b:d7:0a:9d:1d:d3:b1:8d:
         30:fd:d0:42:ac:16:32:24:cc:ca:f2:e1:fb:b7:40:53:1d:69:
         eb:6a:95:78:81:10:87:e5:4e:42:d3:a2:bf:82:74:80:6c:c6:
         e9:aa:5e:1d:da:88:10:08:52:85:a2:7f:2a:07:51:1f:ca:50:
         f8:52:18:d8:b6:fb:a6:ca:7b:04:dc:f2:83:b7:6b:5b:32:c8:
         05:a0:c8:90:f2:63:8d:a0:92:92:06:39:fa:ef:64:76:03:06:
         2f:cd:c8:1f:7f:87:d2:1b:1a:68:28:5d:4f:c6:c1:92:ba:a7:
         4a:45:c0:a6:b6:18:55:0e:bf:fb:25:c1:86:a0:93:93:f0:86:
         ba:77:25:1c:dd:74:c0:2f:96:a8:4e:84:1b:88:4e:89:00:93:
         c8:ec:44:27:1b:db:93:4a:50:65:42:03:d8:f0:c2:7f:68:8b:
         47:f6:e0:b8:10:0c:ec:b5:f9:8c:cd:cc:ce:67:69:bd:78:95:
         e0:cd:c3:f3:3e:8d:51:a2:1e:dd:b9:b2:8a:05:20:16:b1:45:
         18:d6:11:c3:94:bc:69:07:10:8b:b3:ad:c2:ce:37:f9:8f:1d:
         04:82:fc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:42:31 2026 by rpki-client