This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E96E01CF86211F08FD627BFDAE4EC9C.roa
File:                     7E96E01CF86211F08FD627BFDAE4EC9C.roa (raw, json)
Hash identifier:          AbMA7FPSe+gtELK2kPRP+rX6cvsdNmCcosXDQZ1etPM=
Subject key identifier:   93:F9:AB:0F:F3:A8:6F:37:5A:37:DE:A3:42:20:B6:76:A3:66:1A:DA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0198F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E96E01CF86211F08FD627BFDAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 13:50:37 +0000
ROA not before:           Fri 23 Jan 2026 13:50:32 +0000
ROA not after:            Sun 01 Feb 2026 13:50:32 +0000
asID:                     149641
IP address blocks:        156.224.0.0/24 maxlen: 24
                          156.225.128.0/24 maxlen: 24
                          156.240.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104697 (0x198f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 23 13:50:32 2026 GMT
            Not After : Feb  1 13:50:32 2026 GMT
        Subject: CN=69737cad-15fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:66:22:13:1f:bf:bd:3b:8f:bc:76:3e:77:
                    56:84:0c:3b:71:7e:0c:61:42:67:4f:ab:c5:23:f2:
                    0d:0d:20:cd:25:29:eb:58:86:40:c2:7d:78:4a:fb:
                    ad:6a:1e:96:65:08:82:36:f8:08:80:25:be:78:a9:
                    da:d4:1a:cc:d6:03:f8:bc:db:1c:35:44:d7:d5:af:
                    c5:5a:7c:77:d8:89:cf:3b:a3:08:a3:f9:cd:02:93:
                    b7:c7:43:30:89:91:1e:3e:20:56:0e:55:37:6b:43:
                    a5:8c:2a:58:4a:38:7f:d4:16:d9:c7:07:44:1a:d7:
                    75:d2:d0:d5:15:60:28:f7:d5:fe:0a:f8:fa:3d:d1:
                    87:04:39:05:14:6d:21:36:f9:b6:9b:ea:50:b3:7e:
                    ff:b2:8f:6a:00:7c:75:90:86:fa:36:94:95:26:a6:
                    fc:24:d9:85:c9:4c:5b:90:4d:e4:bf:ef:a0:9e:c6:
                    f7:49:50:9f:1a:a5:93:68:40:6a:8d:1c:43:e9:1d:
                    39:35:43:7b:62:37:01:97:84:13:76:f4:8a:6b:1d:
                    05:93:ce:00:84:8d:cf:1c:a1:b9:67:52:07:3e:d0:
                    84:f9:0a:89:bb:3b:3c:4e:50:36:ce:c9:97:e8:ac:
                    aa:48:07:0b:ac:1d:95:6d:b3:45:b6:4c:5a:98:7e:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F9:AB:0F:F3:A8:6F:37:5A:37:DE:A3:42:20:B6:76:A3:66:1A:DA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E96E01CF86211F08FD627BFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.0.0/24
                  156.225.128.0/24
                  156.240.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:bf:59:f5:2c:7e:9a:b9:e2:16:a5:82:f0:f7:da:b8:1e:25:
         4d:1f:87:3a:ea:00:45:2c:71:a7:43:14:cc:f0:d4:76:d5:0c:
         bb:ac:a5:5a:28:d9:78:3e:5d:71:15:45:27:f2:47:d8:93:ea:
         52:e4:f3:21:f9:a0:40:95:5d:f6:cf:c9:70:94:94:11:8a:97:
         a0:c3:8b:9f:68:4f:57:ca:6f:2f:69:eb:b6:fe:05:68:69:9e:
         d9:87:fc:4f:4a:f3:59:aa:94:c7:a0:d1:82:22:37:6c:cf:3a:
         54:db:e9:83:41:a1:0c:3c:04:6f:fd:82:6d:b8:3c:5e:28:ad:
         ed:ad:00:96:c1:fe:c0:4f:53:38:1f:88:d9:b7:5a:b1:d6:2a:
         44:37:49:d4:4a:a3:e4:32:ca:ef:ac:a4:8d:70:81:47:16:f3:
         72:bb:81:c2:09:9c:c8:81:ea:92:b4:ec:af:78:93:ff:ec:a5:
         0f:d9:ca:21:52:86:9e:10:6b:bd:e5:9c:60:7c:92:50:05:96:
         a6:c7:83:28:4d:da:21:70:8e:97:52:5c:66:43:c5:cd:b0:ea:
         cd:3e:48:44:52:72:31:28:8f:6a:68:f6:cb:42:ba:42:e4:1a:
         37:69:ce:9b:95:3b:16:13:c4:66:cb:95:86:be:7f:09:64:be:
         7c:04:75:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:13:17 2026 by rpki-client