This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A21CE44CF79411F0B2F861CBDAE4EC9C.roa
File:                     A21CE44CF79411F0B2F861CBDAE4EC9C.roa (raw, json)
Hash identifier:          70fO3HZNnG6tsC5vN+pDQH7i/OM6Ua9vNHyL4pa+t6M=
Subject key identifier:   88:B0:CF:4A:EC:94:F8:78:34:1F:8A:82:EE:E7:A2:75:A2:A1:BA:53
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01985D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A21CE44CF79411F0B2F861CBDAE4EC9C.roa
Signing time:             Thu 22 Jan 2026 13:17:00 +0000
ROA not before:           Thu 22 Jan 2026 13:16:54 +0000
ROA not after:            Sun 01 Feb 2026 13:16:54 +0000
asID:                     154321
IP address blocks:        156.239.0.0/20 maxlen: 24
                          156.239.224.0/20 maxlen: 24
                          156.239.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104541 (0x1985d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 22 13:16:54 2026 GMT
            Not After : Feb  1 13:16:54 2026 GMT
        Subject: CN=6972234c-742e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:93:15:5d:73:64:74:59:95:e1:3d:94:d0:
                    ee:e8:8e:2e:2f:1e:44:9f:f6:c5:78:91:5f:40:54:
                    65:f3:24:c7:b3:10:c1:ad:6a:0c:fe:3b:33:5d:f3:
                    ee:bb:c3:e3:1b:59:c1:e2:2d:b6:62:97:7a:63:26:
                    14:89:23:9e:a5:18:a0:3d:9b:ab:4a:af:31:ed:97:
                    3a:4d:67:5b:7d:97:bd:ce:1b:f8:be:ec:33:5a:10:
                    13:d3:d0:a7:3e:80:19:25:60:ff:23:74:da:56:a7:
                    f2:44:ed:c9:e9:2f:ab:13:8d:55:4e:8f:49:3a:8a:
                    07:72:5f:c4:90:3b:2b:98:8d:22:e6:1a:c3:e6:6c:
                    2a:6e:54:a0:e4:b4:71:6b:60:40:02:b3:24:e7:6f:
                    be:18:44:6b:99:a5:80:09:e2:77:0b:62:da:77:b6:
                    18:c6:70:97:30:46:d3:05:92:cc:01:0a:b8:65:1d:
                    a4:11:6b:e5:18:e8:38:10:cc:59:40:57:9b:94:5e:
                    fd:ef:d1:f1:bd:0c:1c:ee:29:64:eb:45:b1:6c:94:
                    19:a4:98:28:cc:5c:7f:80:56:b8:d8:e7:86:18:06:
                    da:98:aa:6b:3b:41:e2:63:b0:98:31:33:ed:95:32:
                    52:21:e2:3c:ee:5a:cd:ad:46:e9:74:6c:8f:e5:3a:
                    9e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B0:CF:4A:EC:94:F8:78:34:1F:8A:82:EE:E7:A2:75:A2:A1:BA:53
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A21CE44CF79411F0B2F861CBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.0.0/20
                  156.239.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:4e:94:2e:cc:bb:0e:5a:8e:be:71:5d:20:24:90:c0:05:b1:
         f0:1c:99:8c:ce:5e:6e:05:af:3b:96:7e:fb:de:be:6c:91:78:
         ae:a5:1b:01:0b:14:c0:ac:17:b7:76:cd:ec:fa:f9:19:b1:41:
         b8:7c:09:de:60:7a:19:db:1f:52:20:8f:54:31:84:ae:81:1e:
         1a:2e:40:e2:13:52:5e:99:12:9a:6e:da:24:ab:83:7c:22:b3:
         2a:7f:43:76:85:86:cf:93:2c:30:03:b4:4f:ed:33:f5:a1:30:
         27:a4:3c:df:49:63:7b:86:bf:a8:61:12:87:c3:96:4b:0c:db:
         80:b3:8d:c5:be:54:dc:02:de:5c:fc:5d:8f:f1:c0:21:3f:c4:
         ac:04:77:94:55:bb:78:69:e3:a7:cd:5c:4e:b2:81:51:13:ad:
         78:af:1f:4d:9a:d0:6d:52:db:cd:e5:16:99:d8:a4:f7:8f:1b:
         8c:2c:47:9f:15:d7:b2:1d:cc:ef:ef:a6:c0:85:57:eb:d9:9e:
         96:f6:9f:51:0f:f9:e5:c8:6a:83:f2:10:f8:f7:24:1f:4f:60:
         b4:6d:c7:d8:a6:14:1a:55:71:7a:37:b3:3f:57:55:89:79:22:
         e6:a5:86:d7:fa:0b:f0:3e:6f:bb:c0:73:47:7f:f0:ac:ab:a7:
         2c:b4:3c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:13:48 2026 by rpki-client