This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90EFDD76F8C211F08F5E677FDAE4EC9C.roa
File:                     90EFDD76F8C211F08F5E677FDAE4EC9C.roa (raw, json)
Hash identifier:          sNORGkbwP+uIJQVWs2gZ+ofQGVg6e/SbS0xP224ZySs=
Subject key identifier:   6D:3A:62:2F:A4:C0:F7:1B:E8:6B:B0:C1:D7:73:04:57:A0:33:AE:4E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019904
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90EFDD76F8C211F08F5E677FDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 01:18:19 +0000
ROA not before:           Sat 24 Jan 2026 01:18:14 +0000
ROA not after:            Wed 04 Feb 2026 01:18:14 +0000
asID:                     18013
IP address blocks:        156.234.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104708 (0x19904)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 01:18:14 2026 GMT
            Not After : Feb  4 01:18:14 2026 GMT
        Subject: CN=69741ddb-a1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:f4:1c:38:56:ae:3b:81:65:3c:77:3b:30:
                    a2:ff:4a:59:b6:55:84:d2:5e:5b:a1:62:1f:97:64:
                    d1:e9:89:4e:b7:2d:cc:c0:0a:80:fe:12:7e:0a:6c:
                    63:87:45:91:d7:ae:77:00:4d:30:1e:17:df:2e:fb:
                    7a:60:62:ea:62:c0:e7:c3:8e:94:3d:40:c0:06:72:
                    0d:5c:90:b7:93:b6:ea:51:3e:d1:5d:be:18:31:d5:
                    08:41:0c:d1:10:be:90:a2:c4:ed:30:68:e0:d1:03:
                    f0:16:01:37:89:54:5a:88:60:8d:46:b1:38:d9:44:
                    10:0d:66:e0:80:7d:ed:02:de:da:fb:df:fb:2d:46:
                    46:88:bc:83:06:01:80:6c:2d:36:50:be:02:22:b8:
                    cd:16:22:a2:36:f9:60:a2:7e:75:cc:08:42:1b:03:
                    4e:b8:cc:e4:c6:d7:74:92:d8:26:f4:16:3b:01:0d:
                    f3:e7:da:49:c4:cb:d6:13:77:66:6c:95:73:ae:9c:
                    9c:d0:64:9a:51:a2:59:fc:1b:92:e7:f3:f8:b1:8d:
                    ab:42:ab:8f:d2:52:7c:bb:2e:ba:b9:11:ef:0e:b0:
                    9f:bc:a7:3f:a7:70:cc:95:f8:0a:72:4b:67:4b:bd:
                    2a:9e:15:92:b4:e0:d1:67:46:35:2d:8e:d4:e4:ce:
                    a6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3A:62:2F:A4:C0:F7:1B:E8:6B:B0:C1:D7:73:04:57:A0:33:AE:4E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90EFDD76F8C211F08F5E677FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:4f:4c:07:59:e9:6f:94:10:70:bf:e4:8b:16:49:48:ce:36:
         d5:de:8e:0b:d3:39:8c:c7:e9:ef:79:c0:c5:c1:bd:09:ba:b2:
         12:f2:a5:6b:46:b2:23:de:ba:5c:cb:30:d1:19:54:8d:1e:06:
         f6:37:47:d9:59:53:20:5d:a4:d9:b4:0b:dd:09:ed:7d:36:cb:
         ad:c8:db:b5:3e:c5:f3:40:57:4e:d5:55:d9:72:00:32:97:53:
         6a:de:4d:b1:d6:78:1b:d2:a1:8c:05:41:52:d1:72:ca:cd:7b:
         85:1f:e8:f7:b7:1c:fe:27:bd:83:35:08:33:f7:cc:63:0d:09:
         25:eb:54:6e:fe:12:5a:b3:72:7a:ba:e2:39:0a:4a:2b:d9:f9:
         62:ba:70:5d:aa:9f:c4:83:70:0a:23:39:a0:2a:a8:43:c9:29:
         28:01:23:73:ed:60:b5:63:96:d2:ce:35:c5:ba:a6:03:79:d3:
         ce:88:9c:5b:ac:45:c3:bd:a1:20:e5:7c:92:3a:55:40:5d:91:
         a3:7f:85:93:0e:ca:88:99:7f:64:9a:9a:0a:de:6d:95:f0:a8:
         d6:ba:29:43:c2:fd:e9:ba:38:1d:7f:f6:23:34:49:4a:c0:52:
         89:c2:b9:e8:fb:6d:b5:d2:ca:68:76:35:6d:8c:d3:76:a6:e7:
         f8:bc:8f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:47:58 2026 by rpki-client