This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34D3B868F8F511F08E61C6CBDAE4EC9C.roa
File:                     34D3B868F8F511F08E61C6CBDAE4EC9C.roa (raw, json)
Hash identifier:          YxETzYHgNXDstiAeH6R85WBaZYZ5ZxbkClBnxzjhUa8=
Subject key identifier:   94:95:E3:5D:7F:8D:AB:09:21:B4:5A:42:05:D8:BC:92:1F:9E:DD:3B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019925
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34D3B868F8F511F08E61C6CBDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 07:20:49 +0000
ROA not before:           Sat 24 Jan 2026 07:20:43 +0000
ROA not after:            Wed 04 Feb 2026 07:20:43 +0000
asID:                     138643
IP address blocks:        156.234.0.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104741 (0x19925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 07:20:43 2026 GMT
            Not After : Feb  4 07:20:43 2026 GMT
        Subject: CN=697472d1-78cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:20:08:6c:ca:7e:f0:a7:49:3a:e4:fa:73:
                    09:4a:15:90:19:7b:31:f3:29:6e:e4:a8:71:9e:c9:
                    7f:94:0b:73:1c:0b:61:e5:95:e9:72:ae:46:66:b7:
                    4c:8b:ca:3d:70:21:0b:71:24:17:aa:83:c5:73:31:
                    28:65:03:85:e4:4b:d6:68:c8:ad:89:1d:7a:94:53:
                    d3:b0:f0:a4:7d:db:68:7c:99:c1:b5:dc:a9:5f:80:
                    54:47:96:80:73:ea:fa:8f:b8:01:29:d4:ee:e2:a9:
                    b7:3e:0b:5b:48:87:2e:b6:51:38:19:bc:9d:d5:42:
                    f8:59:d2:71:b7:c1:5f:82:5b:5f:d8:15:14:6e:a3:
                    08:81:dd:31:5b:8f:89:98:6b:f5:87:3a:fa:9b:03:
                    22:a3:ba:28:60:c4:34:c0:c3:95:ca:39:b9:8e:0d:
                    7b:bf:60:e0:c4:68:d0:c8:84:2e:61:15:15:67:1f:
                    5b:f5:80:f5:e6:28:ba:d7:0e:6a:d2:48:6b:d4:33:
                    d8:e4:8f:91:a5:15:16:7d:d9:94:6c:2f:32:f5:84:
                    75:f4:1a:f1:bc:01:9e:ee:e2:a9:36:a2:66:8c:23:
                    9b:e4:40:c0:2a:7c:d5:a5:8a:09:f5:c9:1b:ff:b1:
                    ee:6c:cd:20:35:b0:f4:5a:b0:82:52:a9:21:2f:fa:
                    87:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:95:E3:5D:7F:8D:AB:09:21:B4:5A:42:05:D8:BC:92:1F:9E:DD:3B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34D3B868F8F511F08E61C6CBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:79:50:10:b7:77:aa:3f:a1:5a:35:e5:7f:2d:16:c1:9b:6b:
         70:4c:8c:b6:7f:51:04:c8:11:d7:c8:81:1c:11:7f:86:eb:cd:
         2b:f1:39:6d:c4:49:09:f7:5e:b5:c0:f3:a6:8e:cf:7b:96:37:
         b6:64:b8:79:98:84:bc:10:8e:c4:70:f6:a1:7f:03:7e:bc:69:
         3e:b7:4c:cf:6a:86:9b:5e:18:60:ab:ef:3e:35:f1:5b:41:14:
         35:e1:37:f3:eb:3d:6d:96:69:1c:27:d3:af:5b:e8:f4:11:f5:
         91:2f:23:25:9f:82:34:8e:a1:a2:05:28:72:18:bf:c7:53:f7:
         69:38:6f:71:12:5c:9b:e3:ce:ee:af:48:cf:b2:3f:66:9f:8b:
         19:58:58:3f:75:dc:ea:b4:a4:90:19:7c:78:af:a5:ce:b9:d8:
         97:e1:97:b9:72:fa:73:a0:57:1d:22:db:69:bd:b6:f4:3d:14:
         77:01:cd:55:1e:2f:46:13:c9:f5:58:5f:0d:33:21:7e:d7:5d:
         13:55:c5:08:97:0b:95:5f:1d:89:34:e4:73:6f:50:81:f5:9c:
         fa:0d:a1:2a:c8:92:4a:94:6f:69:42:14:56:4d:cb:9d:29:7f:
         66:f9:33:ca:7c:d4:1d:20:c2:2a:46:8b:f9:4f:5a:1e:58:de:
         3e:a5:19:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:42:14 2026 by rpki-client