This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95D6CCA6F8F311F0AAED79BFDAE4EC9C.roa
File:                     95D6CCA6F8F311F0AAED79BFDAE4EC9C.roa (raw, json)
Hash identifier:          //R30HfOrJYgTbKNdDqoMLgQ8A+b8S+MPAmrRk4YLCw=
Subject key identifier:   0F:71:2B:ED:F3:BC:23:FA:2A:2F:4B:C4:C6:9F:3D:66:19:DB:AC:C3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019919
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95D6CCA6F8F311F0AAED79BFDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 07:09:13 +0000
ROA not before:           Sat 24 Jan 2026 07:09:08 +0000
ROA not after:            Wed 04 Feb 2026 07:09:08 +0000
asID:                     136800
IP address blocks:        156.234.77.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104729 (0x19919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 07:09:08 2026 GMT
            Not After : Feb  4 07:09:08 2026 GMT
        Subject: CN=69747018-c72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:a7:4a:20:6a:12:5d:a7:c9:cb:d8:a1:03:
                    62:e1:0a:26:e1:24:f4:2d:ea:ae:31:a5:36:77:5d:
                    bf:0c:75:9d:b8:d3:6a:d0:8b:22:a8:7a:4a:6c:25:
                    d2:8e:4e:78:08:03:d0:10:33:e9:65:b3:02:df:79:
                    d4:25:a0:de:d1:a6:e0:96:60:29:bd:ae:02:87:01:
                    bc:f5:c6:18:53:35:85:43:30:6c:f1:af:d3:b0:28:
                    03:92:c8:dd:ef:42:a7:a0:b5:7e:fd:03:72:e6:3a:
                    d2:16:4d:78:fb:71:97:8b:ba:6e:c4:3a:b6:b4:93:
                    0a:2a:7b:00:3e:c6:f6:7d:3a:8e:9e:5c:9c:23:3b:
                    2e:16:b2:18:b6:84:04:4f:03:53:f1:a3:74:bf:32:
                    38:e5:64:5a:14:7a:59:e7:0a:6e:94:37:d5:7a:c9:
                    c5:2e:38:56:c1:95:52:84:45:b6:7e:c4:27:02:36:
                    7c:3a:c0:39:6e:ce:2b:35:ad:bd:41:33:dc:c1:3e:
                    bc:e6:f5:91:4e:8e:7b:99:8a:c0:d2:40:a7:5f:07:
                    e0:d7:38:ba:fd:82:97:bf:8f:57:2f:1a:c2:4c:41:
                    af:1f:96:27:eb:ab:1d:1e:2e:2d:1b:bc:02:58:af:
                    72:1b:50:97:e3:e6:f1:39:02:5e:64:af:85:37:8d:
                    62:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:71:2B:ED:F3:BC:23:FA:2A:2F:4B:C4:C6:9F:3D:66:19:DB:AC:C3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95D6CCA6F8F311F0AAED79BFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ce:fc:46:1e:42:26:1b:ea:b7:4c:71:70:90:b7:77:41:f1:
         96:a6:00:d4:8d:e9:3a:1f:ee:eb:e0:22:dc:0d:3a:fe:34:cc:
         26:86:c1:3c:38:30:7c:f4:62:74:a6:a6:c2:33:ba:b1:55:ca:
         52:22:ab:cf:44:10:20:1d:0a:0b:ad:a8:10:b4:ff:01:51:d0:
         44:3c:cd:48:3a:42:51:d2:bb:08:79:f1:c9:75:75:7a:11:ed:
         71:ed:25:36:d1:e1:19:22:b2:4b:9c:0e:e9:31:f1:90:6e:fd:
         8b:6a:f7:fd:a5:84:c1:98:ec:46:f3:d3:44:cd:bc:00:d2:29:
         31:45:e9:b6:96:d6:a8:d4:91:c2:96:58:5a:15:f0:a6:14:d3:
         e8:63:7e:21:81:d6:27:c7:d4:4f:13:f3:c8:01:5c:de:85:be:
         ff:73:27:ec:87:90:8c:a7:26:4a:d6:5e:9b:c1:32:3d:e6:5d:
         96:34:02:51:1a:7f:83:0c:1c:29:7d:dc:0e:98:16:9b:11:03:
         23:a7:57:b2:cc:ab:15:87:ce:a2:b5:25:52:37:86:d9:c9:05:
         7f:20:7e:3a:8f:96:2b:d3:39:63:18:45:05:a6:9b:d3:9a:db:
         31:bd:a4:51:8a:19:f9:d1:be:7e:e3:71:3d:4e:cd:4f:2d:e5:
         34:f8:91:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:18:43 2026 by rpki-client