This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7379CBF0F8C511F097DE3E93DAE4EC9C.roa
File:                     7379CBF0F8C511F097DE3E93DAE4EC9C.roa (raw, json)
Hash identifier:          hAToRhytS+Rn7Hg30gI2ws61SYHupLtaAT+4hPWdJHI=
Subject key identifier:   83:95:45:F8:4F:AF:8D:AB:AD:7C:A0:3E:59:C9:A9:5A:3A:43:82:5D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019910
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7379CBF0F8C511F097DE3E93DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 01:38:58 +0000
ROA not before:           Sat 24 Jan 2026 01:38:53 +0000
ROA not after:            Wed 04 Feb 2026 01:38:53 +0000
asID:                     136800
IP address blocks:        156.234.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104720 (0x19910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 01:38:53 2026 GMT
            Not After : Feb  4 01:38:53 2026 GMT
        Subject: CN=697422b2-a875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:d8:4c:a6:51:79:bc:e0:6c:6a:64:32:54:
                    f6:f7:8e:1f:0d:ef:0c:cc:a5:e6:a2:ed:58:20:0e:
                    64:92:6b:5e:ac:b7:61:6d:a4:63:4c:c5:6a:64:a1:
                    4f:11:64:d0:01:4a:f3:67:6b:79:06:4b:80:ae:4b:
                    1d:ed:4f:14:1d:d2:9e:d4:48:9f:6b:a1:03:a3:22:
                    19:b6:cc:e8:aa:5b:98:2c:fc:ec:41:ba:06:40:e2:
                    f0:2d:16:49:2a:9b:a8:fe:e4:d4:33:60:fb:d5:eb:
                    a8:09:4d:bc:f6:40:5d:aa:67:72:12:fb:15:20:ed:
                    07:c0:b5:ec:b1:63:dd:a0:1f:fb:66:7f:c8:65:da:
                    52:47:ea:4f:fe:c6:d5:40:f0:42:fb:c2:99:46:5b:
                    da:77:73:75:d3:24:e7:a2:e7:2b:a7:0b:e7:1e:6a:
                    58:be:75:b9:3a:24:0a:fd:2f:af:fb:11:4a:89:95:
                    b0:0d:ab:ce:aa:e1:7f:b9:b3:1f:93:78:ed:39:16:
                    71:37:e6:7e:d1:cb:9a:65:39:e1:00:e8:54:b5:df:
                    19:92:77:a9:2f:c9:f8:32:b8:68:97:85:5f:54:4d:
                    dd:71:9f:3f:f6:46:65:0e:b0:84:b0:8b:1e:75:ac:
                    b7:fe:0f:18:41:d5:42:a0:d3:4d:da:64:41:01:c3:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:95:45:F8:4F:AF:8D:AB:AD:7C:A0:3E:59:C9:A9:5A:3A:43:82:5D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7379CBF0F8C511F097DE3E93DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:32:1e:79:06:fd:de:06:26:c9:04:bd:a6:25:26:25:be:
         35:ca:57:2f:3f:c4:e5:8b:ff:cf:b8:9b:5a:9d:c2:ee:59:71:
         4a:5a:2c:31:f4:44:6b:8f:cb:c5:36:0f:1b:59:34:ee:fd:28:
         ca:98:d4:75:b3:31:af:99:fd:03:18:d7:1a:35:f8:a2:fd:71:
         63:9b:e4:5a:98:87:ce:b6:06:7e:ad:5a:67:79:b1:06:65:92:
         a6:06:09:b3:78:bf:e6:ea:45:64:15:b1:79:4b:e5:40:36:78:
         4b:db:77:a1:b5:90:41:ec:b1:e4:31:fe:22:56:cb:b4:82:ec:
         36:74:b2:01:d2:b7:fe:bf:7c:56:3a:bd:e7:e5:5c:78:ae:05:
         2e:f0:91:25:ff:71:56:fb:c1:c2:89:20:e4:b0:33:77:11:a2:
         c9:0e:c2:aa:f5:7c:5c:9d:03:60:64:4e:d4:df:00:0b:86:eb:
         2a:85:0e:f8:fb:3d:22:85:e8:35:f8:40:22:1f:f4:5a:60:4a:
         40:b5:b3:34:1e:d1:0c:66:a1:12:88:66:d3:66:88:ec:4b:60:
         9f:7e:55:2f:76:c3:ab:b3:53:d6:78:3a:58:16:bb:a7:b6:e8:
         f6:e3:98:2b:3d:0a:6f:95:55:1e:c7:15:17:c8:17:20:10:da:
         b1:17:3a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:25:13 2026 by rpki-client