This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31594F86F8A011F082F3FDAFDAE4EC9C.roa
File:                     31594F86F8A011F082F3FDAFDAE4EC9C.roa (raw, json)
Hash identifier:          dY8k1gbVYpK91T840/jks6nigDveOIhGaAID+uRKurM=
Subject key identifier:   8B:1C:D7:B1:DB:51:CB:98:9C:0A:CD:5C:7D:34:2F:D1:AC:3A:05:0F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0198FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31594F86F8A011F082F3FDAFDAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 21:12:16 +0000
ROA not before:           Fri 23 Jan 2026 21:12:10 +0000
ROA not after:            Sun 25 Jan 2026 21:12:10 +0000
asID:                     203607
IP address blocks:        156.225.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Jan 2026 21:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104701 (0x198fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 23 21:12:10 2026 GMT
            Not After : Jan 25 21:12:10 2026 GMT
        Subject: CN=6973e430-b2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:24:8b:b7:9f:18:a3:f0:3a:03:dc:6e:bb:
                    5a:b9:65:45:9d:03:53:e3:1d:dd:60:1e:64:45:35:
                    3e:73:73:2e:17:de:e8:a8:b8:49:70:a0:a0:04:ae:
                    bc:83:f4:f1:61:5c:04:fe:b2:a4:b9:7d:0a:b8:91:
                    85:10:3d:db:60:50:e0:79:92:d9:cc:86:60:c2:05:
                    57:4a:79:13:9f:9a:c2:9a:5c:ab:f7:8a:6f:51:b2:
                    1c:3d:3d:dc:08:d3:5f:42:69:1d:9f:a6:ff:bf:30:
                    d1:21:5f:fc:3b:a2:b2:50:6d:7e:d4:2b:78:41:b7:
                    2c:5c:e5:99:fe:99:5f:2e:83:72:29:90:86:e0:bb:
                    09:3f:be:27:c4:10:a4:ac:84:7b:61:e8:09:dd:77:
                    3a:70:49:26:81:4f:93:9a:85:75:ac:73:fd:0a:92:
                    fe:1c:a0:5f:c8:d2:e5:75:dd:e9:82:39:fb:af:7c:
                    cc:d1:44:57:51:6f:88:52:f4:02:06:2b:e4:2a:04:
                    a8:16:8c:84:7d:e6:d7:6f:28:97:a7:d3:a6:58:df:
                    d9:c2:9e:7f:64:34:7d:9f:b5:61:0f:e0:b5:0f:6f:
                    bd:11:f7:57:f0:a6:2f:9f:c9:2c:8b:93:df:17:e4:
                    cd:ec:15:d5:66:53:fd:e7:5d:9d:e1:22:bd:cd:41:
                    a0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1C:D7:B1:DB:51:CB:98:9C:0A:CD:5C:7D:34:2F:D1:AC:3A:05:0F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31594F86F8A011F082F3FDAFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:8d:a8:2a:34:ae:48:90:d7:c4:ad:43:2a:a4:39:50:d8:95:
         62:e2:f6:0d:c9:5c:f1:92:84:3d:d0:8a:6b:4a:fb:ef:2c:7d:
         3d:61:54:38:e6:dd:b9:f8:74:21:83:40:28:ba:29:35:d1:23:
         d8:49:74:4b:d8:37:52:96:b6:5e:e9:c2:cd:41:e3:67:2d:3a:
         ab:ee:67:5b:f7:78:ff:97:9b:c6:e4:05:55:55:52:df:d3:8b:
         58:b6:df:57:97:ef:f6:76:12:14:d8:6c:b1:69:f1:81:94:87:
         ae:2d:63:13:2e:3a:ce:29:a4:7a:7e:6d:33:20:44:41:ca:0e:
         6f:bc:57:9d:f8:e2:e9:6f:c0:92:f3:6a:e0:4a:bd:2e:a6:be:
         8e:d1:9a:de:f6:2d:ed:ad:ff:b0:8c:32:b7:b4:ed:c5:fe:2c:
         c5:f4:4b:6e:9f:c6:35:c2:a4:7d:a9:07:1d:b2:64:bd:8b:6f:
         e0:51:ed:96:ed:a2:0c:3a:b1:93:87:b2:89:24:de:59:15:7b:
         bc:b0:80:82:13:d0:09:f6:9d:b9:a2:82:40:18:f7:70:bc:01:
         9b:47:2c:f6:05:a3:73:75:74:75:ed:a9:ec:0f:ed:3c:9f:56:
         82:9e:96:22:bf:db:9e:37:03:cf:21:94:74:bd:5a:5b:90:ef:
         b5:7d:5c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:08:26 2026 by rpki-client