This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58CBF3B4F8F711F0B7493CD8DAE4EC9C.roa
File:                     58CBF3B4F8F711F0B7493CD8DAE4EC9C.roa (raw, json)
Hash identifier:          AImudHFrWHGuHsicrmxNsmaUtDdCDlcKzv/F5RSxmAw=
Subject key identifier:   E4:DF:3B:4B:EE:77:C0:65:55:7E:16:36:18:4E:B3:75:15:3E:1F:A6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019933
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58CBF3B4F8F711F0B7493CD8DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 07:36:08 +0000
ROA not before:           Sat 24 Jan 2026 07:36:04 +0000
ROA not after:            Wed 04 Feb 2026 07:36:04 +0000
asID:                     138195
IP address blocks:        156.234.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104755 (0x19933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 07:36:04 2026 GMT
            Not After : Feb  4 07:36:04 2026 GMT
        Subject: CN=69747668-cd53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:3b:44:ec:4d:dd:0f:9c:93:42:6c:aa:22:
                    29:2f:d5:f8:77:c5:b1:d7:fa:7c:61:c1:b4:93:4a:
                    c6:7d:a7:b0:b9:68:2a:4c:f2:88:80:25:65:fc:b5:
                    d0:c7:7f:b7:69:24:1d:30:09:ae:87:4f:aa:97:c3:
                    9c:18:c3:a6:77:97:c4:b2:40:7e:68:8d:d2:55:38:
                    1c:bd:b6:09:98:a3:38:12:55:c4:6d:b2:bc:4d:92:
                    0c:92:cd:37:b5:7d:03:82:26:6b:cd:35:22:c7:f9:
                    d7:5d:84:4c:70:06:e8:e1:06:f2:da:eb:8e:24:12:
                    2c:53:bd:98:c1:c3:85:7d:8e:f5:72:a6:ac:2a:ff:
                    42:a2:ba:ce:04:ce:7b:ab:00:9a:9e:c5:04:da:7f:
                    c8:91:9d:fc:56:84:11:d3:4a:10:c3:c5:b3:3f:ba:
                    6e:0b:71:dd:18:40:27:eb:ca:83:a8:42:76:5e:4f:
                    ae:0e:18:76:c9:8e:46:60:06:49:df:31:06:c3:9f:
                    a7:aa:37:e7:d7:1a:81:96:e8:03:85:86:68:d1:f8:
                    17:53:a7:8f:a5:5d:14:f2:eb:d8:3b:4e:0b:2f:72:
                    f2:2f:0f:a9:6c:29:f3:f4:0b:4a:ff:42:13:53:d4:
                    a8:c9:94:b8:08:be:a5:e0:90:ef:57:e1:c1:58:67:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DF:3B:4B:EE:77:C0:65:55:7E:16:36:18:4E:B3:75:15:3E:1F:A6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58CBF3B4F8F711F0B7493CD8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         93:f1:9d:a4:be:7b:d0:a3:87:e7:d7:f9:29:81:25:69:b1:1c:
         92:72:fd:7b:85:ca:76:ef:d1:f1:52:ba:6b:3b:59:e6:12:f6:
         e3:4e:57:f2:06:90:ec:d7:0a:8f:f0:0f:9b:ca:11:f4:0d:5e:
         95:48:2a:79:d4:ff:bf:9e:36:d0:7b:40:34:bf:d8:33:37:04:
         e1:65:73:ef:a0:95:a5:73:2f:26:bf:ee:3a:58:87:94:76:29:
         62:96:a4:65:31:71:83:9b:26:85:6b:68:a2:29:f1:d4:54:27:
         f0:2f:7b:cd:fa:6e:b8:cc:8f:5c:d1:c5:61:6d:f0:5d:18:16:
         34:45:af:34:73:a2:b8:bc:50:7f:2e:59:68:55:5c:a2:c4:d4:
         46:32:4a:17:58:fc:11:20:c5:fa:e7:98:eb:bd:13:b0:54:0b:
         56:77:1b:2e:21:02:44:8b:d7:d5:ef:b2:a9:d2:44:40:86:68:
         69:9d:23:7b:96:31:70:ef:8d:ed:cb:74:81:b7:ac:9d:62:c0:
         3b:65:04:1f:54:87:70:16:c8:f3:a3:99:61:53:bc:27:e3:5e:
         4b:9d:58:9d:98:4d:64:ca:dd:0e:a3:a5:6b:a1:8e:5b:d6:0c:
         e2:85:df:53:d4:6f:49:3c:c4:23:f6:11:58:6d:62:03:11:9b:
         37:b2:70:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:03:59 2026 by rpki-client