This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B383002F9A811F095A1A99BDAE4EC9C.roa
File:                     5B383002F9A811F095A1A99BDAE4EC9C.roa (raw, json)
Hash identifier:          4YXKWQKwE/bDqXpxW6CLaDCYLFHxMfnNfqWhLTGW8a4=
Subject key identifier:   69:56:CD:37:89:46:82:23:01:CB:13:DB:C5:1F:3A:B4:CE:48:5C:C9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0199CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B383002F9A811F095A1A99BDAE4EC9C.roa
Signing time:             Sun 25 Jan 2026 04:43:13 +0000
ROA not before:           Sun 25 Jan 2026 04:43:08 +0000
ROA not after:            Wed 04 Feb 2026 04:43:08 +0000
asID:                     203607
IP address blocks:        156.225.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104907 (0x199cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 25 04:43:08 2026 GMT
            Not After : Feb  4 04:43:08 2026 GMT
        Subject: CN=69759f61-9c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:3b:7a:d7:4a:36:d0:68:43:1c:b4:9e:cc:
                    58:c2:e2:6f:2e:ee:4e:5c:b4:41:ad:4b:a3:f9:ac:
                    88:28:65:d8:cd:25:3d:5d:5f:bd:14:68:24:ab:61:
                    5f:22:9d:b6:b5:4b:04:71:44:c0:87:f8:07:75:c9:
                    d5:e6:2c:ae:cf:1f:07:f4:c6:ee:c7:e9:1e:46:7d:
                    bb:a0:96:44:83:9e:0f:d1:ca:b7:12:a7:7a:e5:99:
                    0b:7c:5b:38:a6:a7:21:0c:fb:c1:98:57:87:95:64:
                    08:f1:7e:41:ea:3a:40:f2:7a:86:8d:58:f5:2b:b1:
                    f0:58:25:cc:e2:09:df:6c:1c:25:e3:ad:d6:1d:86:
                    78:7c:04:24:48:d3:2f:14:cb:4a:a9:30:44:17:93:
                    63:df:97:c7:81:8e:d5:38:74:0f:89:6f:6a:d3:73:
                    c8:10:d0:ba:1b:71:b9:f9:9f:f2:1f:bb:3d:ec:56:
                    13:94:a4:7f:74:7d:54:41:c1:8a:f3:34:e8:bf:71:
                    06:f0:6c:df:71:8f:f7:a2:17:be:d1:28:74:f8:b5:
                    ae:0e:3d:2d:f1:13:6d:43:83:c4:aa:6e:de:1c:78:
                    20:66:15:8a:49:81:e2:f4:dd:cd:0d:4b:48:75:a0:
                    53:bd:87:ca:9f:8f:54:7d:4e:8a:0d:8e:42:79:dd:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:56:CD:37:89:46:82:23:01:CB:13:DB:C5:1F:3A:B4:CE:48:5C:C9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B383002F9A811F095A1A99BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:fc:2f:3f:28:f5:ee:a3:b5:0c:56:c9:f0:c9:eb:e3:08:fd:
         e9:c6:ad:f5:39:57:97:68:5a:c2:8e:95:9e:6b:bf:29:09:8d:
         9a:02:ba:5b:68:c5:16:db:19:f9:16:7c:1f:77:4e:a3:f6:c1:
         c9:c2:2e:3c:a1:64:c0:6f:0e:20:aa:ac:7e:be:e2:c1:f3:d4:
         94:4d:59:8f:3e:aa:b8:4e:1c:47:97:07:2b:6a:2f:f9:11:eb:
         cf:c2:91:21:02:6f:1d:dc:e4:a6:67:3a:a9:72:94:8f:87:8a:
         10:d5:52:c0:d5:f9:98:6d:57:f7:bc:fe:67:91:9f:5a:b4:1d:
         8a:55:d5:cb:d2:46:60:e1:24:ab:bc:d4:7d:45:3a:19:c8:69:
         41:cc:10:15:6c:1c:76:65:94:da:26:7f:79:ef:a2:a0:a4:b4:
         95:61:71:33:0a:29:90:1b:6c:c4:1e:ff:dd:1e:14:95:0f:e6:
         35:7c:cb:ac:01:b5:e4:f2:41:a5:30:a1:a4:b1:69:d2:7b:fe:
         12:12:21:75:73:1f:cf:50:c2:40:27:0d:6d:83:9a:71:35:f3:
         75:39:8f:bc:01:61:ee:f3:ca:8c:66:94:35:3b:e3:ed:6f:02:
         4b:74:5c:a9:3b:b2:b1:4e:87:e3:b7:7a:b3:2b:60:13:34:d4:
         9c:b6:c4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:16:17 2026 by rpki-client