This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3D5CE12F83211F08F28269EDAE4EC9C.roa
File:                     B3D5CE12F83211F08F28269EDAE4EC9C.roa (raw, json)
Hash identifier:          1Nhxx3omEhVdTn6vkHCkPRunXUDvmTzHdDL/XArv3tM=
Subject key identifier:   63:57:47:FB:3C:7F:05:80:81:35:98:4A:AB:93:CB:11:ED:7A:F3:B3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0198BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3D5CE12F83211F08F28269EDAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 08:08:30 +0000
ROA not before:           Fri 23 Jan 2026 08:08:26 +0000
ROA not after:            Sat 28 Feb 2026 08:08:26 +0000
asID:                     59187
IP address blocks:        156.238.97.0/24 maxlen: 24
                          156.238.98.0/24 maxlen: 24
                          156.238.99.0/24 maxlen: 24
                          156.238.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104639 (0x198bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 23 08:08:26 2026 GMT
            Not After : Feb 28 08:08:26 2026 GMT
        Subject: CN=69732c7e-4cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:80:e8:c1:47:f7:95:8a:35:06:8d:b0:87:46:
                    ff:66:d0:12:ac:ba:ac:e3:26:a3:d1:d6:4b:cd:cf:
                    8d:e0:8a:36:15:f9:2a:ea:37:dd:9f:c2:ca:f4:09:
                    c9:49:28:c4:bc:59:88:eb:8c:4e:4d:49:35:6f:a2:
                    d9:6d:35:e5:b8:3b:af:25:69:48:cc:e7:cd:f0:cf:
                    e8:1c:41:35:57:81:55:31:57:3f:aa:e5:11:6d:04:
                    be:18:4d:46:c8:7f:01:bf:77:9c:f8:b9:1a:85:0b:
                    77:ff:69:13:f0:f7:57:1a:be:d6:25:d3:39:b2:be:
                    7c:dd:fe:a4:f5:ab:6b:b5:cf:ba:21:02:c8:8a:98:
                    b8:48:b5:68:97:ed:a6:df:5f:f5:09:72:cc:ec:6a:
                    a3:05:22:17:fc:7a:db:fa:37:23:be:da:ad:d1:54:
                    13:5c:23:8c:7b:2e:ca:32:25:40:03:ee:71:a4:da:
                    5f:c8:dc:16:53:7d:6b:7e:8a:cf:35:5c:e4:cd:a4:
                    d9:1f:fe:51:7a:67:6b:80:8f:4b:0d:c2:3a:1c:83:
                    b2:75:15:d8:19:58:cc:87:57:18:2b:3d:11:cb:62:
                    7c:7c:60:c4:0a:03:73:f5:2d:06:61:79:12:ee:fb:
                    48:b1:48:ad:33:7f:0d:26:e8:18:d2:61:e3:8b:7a:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:57:47:FB:3C:7F:05:80:81:35:98:4A:AB:93:CB:11:ED:7A:F3:B3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3D5CE12F83211F08F28269EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.97.0-156.238.100.255

    Signature Algorithm: sha256WithRSAEncryption
         79:ec:5a:d2:d1:6c:e4:3f:39:95:89:bc:52:ea:59:97:29:9a:
         9a:e6:ea:ac:20:e6:44:42:63:6b:ac:fc:57:b2:f7:7a:42:0c:
         3d:4d:e8:6f:0c:ac:0b:1f:76:15:9c:8d:93:cf:60:7b:ac:30:
         3b:cd:04:b2:b3:40:5d:0b:b8:99:ba:98:88:3e:6f:65:60:78:
         99:1e:4d:50:25:2b:1a:cf:22:42:3f:65:74:6d:3c:67:e7:0f:
         5b:86:a1:d7:59:39:87:c8:a1:40:ab:93:56:b0:55:fe:a0:d8:
         8c:d7:8e:16:7d:6f:c5:5d:bd:fb:e2:54:1d:1c:d3:9e:d7:cd:
         09:7b:18:48:f3:27:db:e7:49:54:b0:1a:a9:ec:b5:48:f8:b4:
         5c:6d:ae:6b:e6:24:e7:0d:17:4a:b4:f2:83:81:66:28:f0:cc:
         67:68:89:ca:a9:21:37:e9:74:7d:aa:b9:9f:98:bd:c0:82:e6:
         2f:7d:44:33:f5:dc:6f:96:db:1e:e7:b2:5c:db:dc:30:0d:0e:
         4f:9c:1f:ef:5f:32:55:f7:68:b6:fd:a8:85:73:bb:f9:eb:a2:
         d1:d8:17:0c:69:a3:55:f9:f8:89:b5:c6:6a:54:5b:6e:3d:f3:
         0c:ed:be:2f:78:6b:3e:e9:64:c9:85:31:b9:0c:9a:9e:49:ee:
         b3:2f:a1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:40:16 2026 by rpki-client