This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90D5AAD0F95A11F0833CF4ADDAE4EC9C.roa
File:                     90D5AAD0F95A11F0833CF4ADDAE4EC9C.roa (raw, json)
Hash identifier:          ENiDg71rCoh2f4DeKHFWpxcEI07DRjbEunBsBpmwP9g=
Subject key identifier:   2C:DE:C6:82:66:08:8E:D8:AF:2D:69:7F:98:AD:F6:40:8B:7C:B4:02
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019982
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90D5AAD0F95A11F0833CF4ADDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 19:26:22 +0000
ROA not before:           Sat 24 Jan 2026 19:26:17 +0000
ROA not after:            Thu 12 Mar 2026 19:26:17 +0000
asID:                     3257
IP address blocks:        156.225.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104834 (0x19982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 19:26:17 2026 GMT
            Not After : Mar 12 19:26:17 2026 GMT
        Subject: CN=69751cde-7adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:3b:35:f7:4f:64:8c:17:e0:f6:0a:29:fd:
                    8c:8b:3d:eb:8d:1d:e0:4a:ea:5a:53:d9:29:bb:ab:
                    b6:66:59:21:6d:61:d2:dc:66:72:89:7f:55:58:5e:
                    c4:5f:02:f1:97:4a:23:d7:a7:6e:7d:d1:c8:22:18:
                    d9:f7:88:bc:bb:6f:a3:26:ca:2a:62:d5:62:4e:f7:
                    17:9e:ac:cd:a2:62:00:b5:6a:2c:ce:3e:33:0c:cf:
                    c9:9c:24:bf:22:50:6f:32:19:e2:40:04:90:89:71:
                    3f:9c:c2:a9:0a:16:4f:eb:0c:a9:ce:f9:ad:e9:0e:
                    30:5f:de:67:83:4e:27:e1:47:d7:56:36:97:87:dd:
                    41:13:4f:57:53:48:f7:3e:44:ff:ed:4f:ec:0e:e6:
                    7b:4a:ae:39:df:8a:2c:69:a5:64:e7:45:15:82:3d:
                    1e:0e:ac:9a:23:4b:45:33:3a:45:8c:6c:ed:f4:79:
                    f3:cf:d6:6e:e7:92:90:74:33:84:7c:fc:ce:86:30:
                    cd:a2:5a:95:1b:8a:55:5f:77:72:80:17:37:8f:ef:
                    16:28:05:b7:85:a9:30:0e:e6:74:ee:1e:5e:ea:aa:
                    9e:92:8f:0e:41:74:18:52:19:b6:14:70:f4:06:f0:
                    d5:da:a8:10:92:58:7a:de:33:99:6b:90:8c:cb:b8:
                    d6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DE:C6:82:66:08:8E:D8:AF:2D:69:7F:98:AD:F6:40:8B:7C:B4:02
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90D5AAD0F95A11F0833CF4ADDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:f4:c5:a4:a7:e7:96:e9:78:55:de:32:de:3f:63:60:74:b2:
         80:b4:3d:af:34:ba:86:3c:f2:e2:51:d0:14:4b:ea:93:1e:e0:
         06:10:6f:a9:20:6e:b3:86:91:e8:20:1e:54:55:21:3d:78:63:
         70:93:ff:b2:52:02:1b:cf:78:c4:db:c5:e7:b1:84:6c:a9:c9:
         75:86:87:7c:04:e0:8c:19:42:8d:33:97:a6:45:c7:61:46:28:
         21:87:27:a9:7c:80:14:a1:0e:a5:6d:86:15:a3:39:48:42:a3:
         44:31:a8:51:59:73:3b:68:e4:13:25:65:a8:e9:e7:27:32:56:
         74:63:77:53:90:a9:19:2a:cb:34:01:b8:9b:e2:9a:ac:6f:0c:
         ae:57:37:63:62:29:78:6c:1a:7c:44:c6:ff:b9:e2:70:64:ce:
         7a:4e:01:41:7c:14:5f:dd:d9:43:52:c1:05:0a:7b:40:38:f9:
         54:4a:82:b4:09:c2:4b:be:12:64:84:c6:38:b0:99:67:7f:c7:
         2a:7d:51:7f:e1:49:e4:e4:d9:9b:bf:16:bb:0f:ea:9f:06:2a:
         e4:7e:75:89:55:c8:82:54:f5:b3:fa:83:a1:02:21:2d:0d:20:
         2a:60:d5:79:d6:a7:47:65:77:a3:55:ab:1f:7e:45:49:95:61:
         fb:9f:c1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:47:23 2026 by rpki-client