This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955F2038F79611F0B590ADD7DAE4EC9C.roa
File:                     955F2038F79611F0B590ADD7DAE4EC9C.roa (raw, json)
Hash identifier:          CU2b+xLQh9S1hV9s+tEFfdm1zn0Hys9TWcSg6Va8yB8=
Subject key identifier:   3C:9F:1D:B6:73:4E:7C:B4:AF:46:1D:3C:1E:7E:C9:9D:E4:02:7D:F0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01986B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955F2038F79611F0B590ADD7DAE4EC9C.roa
Signing time:             Thu 22 Jan 2026 13:30:57 +0000
ROA not before:           Thu 22 Jan 2026 13:30:53 +0000
ROA not after:            Sun 01 Feb 2026 13:30:53 +0000
asID:                     21859
IP address blocks:        156.239.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104555 (0x1986b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 22 13:30:53 2026 GMT
            Not After : Feb  1 13:30:53 2026 GMT
        Subject: CN=69722691-39c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:da:8e:c7:ef:da:aa:22:ac:bd:67:dc:d5:5b:
                    2f:9c:be:55:e4:fc:34:1e:d8:8f:cf:87:22:37:d9:
                    22:da:db:c5:d8:28:53:9d:d0:68:b9:20:25:e9:e9:
                    6f:d8:51:d7:71:62:e5:dc:a0:7c:a2:0a:90:3c:c1:
                    3a:5f:6b:ba:2c:2d:64:e2:ad:81:e8:c1:7c:1b:29:
                    69:28:a3:20:bc:0b:7a:bc:9d:b9:80:d1:fd:15:5a:
                    ca:fb:01:8e:9a:0e:6b:ba:d3:19:14:c0:7c:92:fd:
                    47:9a:3e:4c:7d:c5:e9:6b:4b:05:c4:60:3f:5c:b5:
                    f2:78:46:25:84:6d:22:b3:0d:54:6a:0d:a1:5b:e7:
                    9c:27:47:56:24:7c:4c:2c:4b:1b:5d:04:12:f2:43:
                    52:16:37:6d:58:5e:d4:bc:60:92:da:1a:84:f0:0b:
                    4f:9e:f5:c1:66:71:7a:92:86:3c:fa:ed:d9:58:17:
                    fa:bf:7b:2b:9a:a8:92:4f:51:87:d0:58:3a:fc:40:
                    83:c4:7b:4d:37:29:19:6b:1e:48:7c:73:e1:d1:70:
                    4e:be:11:06:91:ef:3b:ef:02:d8:f5:23:08:9c:fc:
                    b2:03:25:90:29:7e:69:d3:25:ff:a5:92:68:2e:22:
                    c7:e6:86:12:21:c0:94:48:c5:9c:92:00:6b:26:82:
                    2c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9F:1D:B6:73:4E:7C:B4:AF:46:1D:3C:1E:7E:C9:9D:E4:02:7D:F0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955F2038F79611F0B590ADD7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:09:59:d6:ef:0b:f0:30:ff:64:bc:c3:87:73:48:04:a1:26:
         58:29:80:ec:a4:6b:85:b1:67:d3:04:79:be:02:72:0e:10:53:
         e7:b1:c5:2f:52:2f:40:e5:47:a0:2d:1f:f9:18:a1:64:d6:96:
         31:9b:8d:d6:2c:52:98:57:fc:4c:c6:f9:ec:de:71:77:ac:bf:
         c4:b7:5c:d6:43:6b:00:18:ce:da:53:34:c9:a2:b3:9d:b5:ca:
         0c:0d:c0:3e:65:46:59:d4:a7:5f:b6:20:e7:33:09:b8:c6:f5:
         f4:e7:2e:0f:31:3e:9b:63:57:7e:0e:7a:fc:f9:b4:5c:58:05:
         02:97:cc:ae:f7:91:5c:31:4c:d8:25:f4:ae:19:8c:f8:84:b3:
         ed:12:1e:2b:c9:08:9f:b8:63:30:56:cd:d0:69:99:c1:56:fb:
         a3:f9:95:09:9c:88:20:99:3c:6f:1e:d6:23:aa:05:a5:c3:6a:
         82:7e:ed:5b:a4:21:62:dc:51:aa:e5:4b:69:32:23:ea:c1:72:
         86:60:6c:86:06:60:05:a8:14:86:4a:17:04:f3:79:2c:3d:12:
         46:7c:b1:66:8e:4b:19:45:06:f2:85:a2:52:48:61:0c:eb:9e:
         c3:4a:f2:12:9b:83:b9:d6:e3:9f:0a:58:19:04:c4:72:89:79:
         f3:b3:16:c6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZhrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTIyMTMzMDUzWhcNMjYwMjAxMTMzMDUzWjAYMRYw
FAYDVQQDEw02OTcyMjY5MS0zOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz9qOx+/aqiKsvWfc1VsvnL5V5Pw0HtiPz4ciN9ki2tvF2ChTndBouSAl
6elv2FHXcWLl3KB8ogqQPME6X2u6LC1k4q2B6MF8GylpKKMgvAt6vJ25gNH9FVrK
+wGOmg5rutMZFMB8kv1Hmj5MfcXpa0sFxGA/XLXyeEYlhG0isw1Uag2hW+ecJ0dW
JHxMLEsbXQQS8kNSFjdtWF7UvGCS2hqE8AtPnvXBZnF6koY8+u3ZWBf6v3srmqiS
T1GH0Fg6/ECDxHtNNykZax5IfHPh0XBOvhEGke877wLY9SMInPyyAyWQKX5p0yX/
pZJoLiLH5oYSIcCUSMWckgBrJoIsNwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDyf
HbZzTny0r0YdPB5+yZ3kAn3wMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NTVGMjAzOEY3OTYxMUYwQjU5MEFERDdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnO/0MA0GCSqGSIb3DQEBCwUA
A4IBAQCHCVnW7wvwMP9kvMOHc0gEoSZYKYDspGuFsWfTBHm+AnIOEFPnscUvUi9A
5UegLR/5GKFk1pYxm43WLFKYV/xMxvns3nF3rL/Et1zWQ2sAGM7aUzTJorOdtcoM
DcA+ZUZZ1KdftiDnMwm4xvX05y4PMT6bY1d+Dnr8+bRcWAUCl8yu95FcMUzYJfSu
GYz4hLPtEh4ryQifuGMwVs3QaZnBVvuj+ZUJnIggmTxvHtYjqgWlw2qCfu1bpCFi
3FGq5UtpMiPqwXKGYGyGBmAFqBSGShcE83ksPRJGfLFmjksZRQbyhaJSSGEM657D
SvISm4O51uOfClgZBMRyiXnzsxbG
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:52:03 2026 by rpki-client