This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4580CCD4F94811F095AEA4BFDAE4EC9C.roa
File:                     4580CCD4F94811F095AEA4BFDAE4EC9C.roa (raw, json)
Hash identifier:          xxYNWUs0VPa6kTo6PROqmg2lWoFWNdVVFXmXJ5d9Bjc=
Subject key identifier:   7A:EE:DA:AB:9F:F6:2A:6C:C3:C5:0E:E7:A3:C0:A5:A1:4D:75:FD:A7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01995D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4580CCD4F94811F095AEA4BFDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 17:15:25 +0000
ROA not before:           Sat 24 Jan 2026 17:15:19 +0000
ROA not after:            Mon 02 Mar 2026 17:15:19 +0000
asID:                     2914
IP address blocks:        156.225.8.0/22 maxlen: 24
                          156.229.26.0/24 maxlen: 24
                          156.229.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Jan 2026 23:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104797 (0x1995d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 17:15:19 2026 GMT
            Not After : Mar  2 17:15:19 2026 GMT
        Subject: CN=6974fe2d-0cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:83:65:6e:4f:bd:5d:50:9d:12:3c:c6:b5:69:
                    d1:57:31:7f:63:76:72:21:9d:3c:81:73:f0:2a:5e:
                    ad:ea:39:9e:12:26:5a:f1:ad:c2:af:dd:7a:d6:56:
                    bf:fd:cf:3b:50:dd:35:a2:d1:47:cd:0d:da:fa:78:
                    0a:d2:b2:91:10:22:79:26:82:f9:84:70:e4:f4:be:
                    c5:64:51:4e:78:96:0c:ab:6c:31:45:27:80:c2:c3:
                    11:5d:a2:f0:7f:15:68:76:de:5e:30:ca:be:62:05:
                    63:a3:04:b3:33:b9:51:2a:78:66:7b:f1:28:ed:83:
                    d0:e9:0b:c1:6b:a3:86:db:76:08:e4:22:88:2d:b3:
                    8f:36:5e:f1:7b:8a:26:7d:7b:ef:ea:b6:3f:c3:1f:
                    6c:db:44:1b:9c:49:4c:9c:9c:94:c4:09:d1:d4:7c:
                    e0:ee:9d:84:24:2d:6a:0a:e1:50:0c:12:ad:75:1d:
                    62:04:00:b3:9c:52:d9:32:af:8a:7e:84:7e:9a:f8:
                    90:32:c1:2d:ed:fa:da:a1:f9:45:d4:5f:89:15:1f:
                    70:25:d6:91:3e:94:da:c9:7d:27:e9:a9:10:a0:40:
                    16:95:ba:59:db:06:70:7d:5f:3f:c4:99:56:0e:d6:
                    c6:80:a2:7d:4c:f1:6c:db:2a:9c:f0:d1:70:43:d8:
                    7c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EE:DA:AB:9F:F6:2A:6C:C3:C5:0E:E7:A3:C0:A5:A1:4D:75:FD:A7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4580CCD4F94811F095AEA4BFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.8.0/22
                  156.229.26.0/24
                  156.229.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:83:60:18:40:52:99:1f:a3:0c:19:23:04:85:5c:a2:0e:41:
         79:1f:f4:7a:98:bd:88:28:a2:c7:57:0e:14:8c:23:a8:dc:81:
         08:e2:8f:a8:c0:8e:33:1e:db:05:c0:8e:f2:0e:50:31:55:df:
         95:ea:c5:1e:cf:03:55:87:6e:a5:e4:bc:b0:86:89:6d:5b:19:
         89:6b:53:57:bd:be:0d:af:20:cf:fc:f4:f5:fe:ab:47:b8:3f:
         84:d1:66:23:22:9b:d6:65:d9:19:e2:71:ca:1a:89:fa:0f:99:
         68:84:9f:fb:07:55:9e:12:ba:82:c0:68:4d:c4:33:e3:27:b3:
         9a:e8:eb:a4:1b:5d:8b:83:13:43:00:0d:05:39:f3:1b:05:77:
         d5:f3:bf:4c:7c:ef:fc:c5:8d:ae:ca:98:ef:82:ef:4e:e4:45:
         4b:4b:4b:55:56:cd:a7:3c:f3:31:72:79:9b:15:7f:b3:05:64:
         c8:49:e8:3b:e0:0b:8b:82:d2:44:aa:4d:cb:f2:d2:45:bc:4e:
         66:54:13:64:a8:82:45:3f:9e:48:79:94:ff:4f:06:df:6e:f4:
         e0:fa:9a:a7:53:23:a3:8f:90:da:5b:a1:99:00:5a:51:e1:f6:
         38:3f:5e:24:b5:f8:54:f5:21:65:91:95:d8:35:4f:84:70:9f:
         a8:53:f9:b3
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAZldMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTI0MTcxNTE5WhcNMjYwMzAyMTcxNTE5WjAYMRYw
FAYDVQQDEw02OTc0ZmUyZC0wY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3INlbk+9XVCdEjzGtWnRVzF/Y3ZyIZ08gXPwKl6t6jmeEiZa8a3Cr916
1la//c87UN01otFHzQ3a+ngK0rKRECJ5JoL5hHDk9L7FZFFOeJYMq2wxRSeAwsMR
XaLwfxVodt5eMMq+YgVjowSzM7lRKnhme/Eo7YPQ6QvBa6OG23YI5CKILbOPNl7x
e4omfXvv6rY/wx9s20QbnElMnJyUxAnR1Hzg7p2EJC1qCuFQDBKtdR1iBACznFLZ
Mq+KfoR+mviQMsEt7fraoflF1F+JFR9wJdaRPpTayX0n6akQoEAWlbpZ2wZwfV8/
xJlWDtbGgKJ9TPFs2yqc8NFwQ9h8ZwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFHru
2quf9ipsw8UO56PApaFNdf2nMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NTgwQ0NENEY5NDgxMUYwOTVBRUE0QkZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCnOEIAwQAnOUaAwQBnOX6MA0G
CSqGSIb3DQEBCwUAA4IBAQABg2AYQFKZH6MMGSMEhVyiDkF5H/R6mL2IKKLHVw4U
jCOo3IEI4o+owI4zHtsFwI7yDlAxVd+V6sUezwNVh26l5LywholtWxmJa1NXvb4N
ryDP/PT1/qtHuD+E0WYjIpvWZdkZ4nHKGon6D5lohJ/7B1WeErqCwGhNxDPjJ7Oa
6OukG12LgxNDAA0FOfMbBXfV879MfO/8xY2uypjvgu9O5EVLS0tVVs2nPPMxcnmb
FX+zBWTISeg74AuLgtJEqk3L8tJFvE5mVBNkqIJFP55IeZT/TwbfbvTg+pqnUyOj
j5DaW6GZAFpR4fY4P14ktfhU9SFlkZXYNU+EcJ+oU/mz
-----END CERTIFICATE-----
Generated at Sun Jan 25 03:59:01 2026 by rpki-client