This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2394E6AF60D11F08D319BE2DAE4EC9C.roa
File:                     C2394E6AF60D11F08D319BE2DAE4EC9C.roa (raw, json)
Hash identifier:          etUFthqnKI8AhrPO4YuKulVaV/p4rARPt80OD6FQWc4=
Subject key identifier:   D4:0C:79:68:95:E6:C7:57:E2:3F:3C:88:AD:E1:DC:17:ED:E1:3B:C3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0197EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2394E6AF60D11F08D319BE2DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 14:39:01 +0000
ROA not before:           Tue 20 Jan 2026 14:38:55 +0000
ROA not after:            Tue 27 Jan 2026 14:38:55 +0000
asID:                     269984
IP address blocks:        156.255.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104431 (0x197ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 20 14:38:55 2026 GMT
            Not After : Jan 27 14:38:55 2026 GMT
        Subject: CN=696f9384-4eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:83:9d:ea:3f:8e:ce:cb:83:11:64:00:40:
                    57:57:64:82:2b:4a:c8:19:62:c4:95:b2:09:71:44:
                    10:59:db:d1:2b:5e:3e:2f:45:60:d2:a7:d1:30:21:
                    d4:6c:a3:43:e7:93:14:f9:d3:0e:d3:e7:fe:06:90:
                    c5:b5:df:31:ed:2d:d3:0e:d8:76:02:7e:e3:1c:d3:
                    8b:cb:7c:49:72:8c:2a:72:38:d0:1d:a5:6a:d4:85:
                    c0:32:d9:0f:1f:df:23:a9:08:f9:fc:eb:1c:e9:1b:
                    a6:a8:c6:55:e8:13:09:46:82:31:d4:9c:b0:13:c2:
                    f6:51:d6:4d:17:42:55:57:a9:0e:f6:64:32:b8:8d:
                    ad:19:d6:47:93:28:be:84:80:e7:8e:cb:86:c1:e0:
                    e2:58:d4:85:73:0e:17:93:82:9c:cd:c9:b0:02:f5:
                    c5:18:42:d5:45:8b:0e:8e:28:d6:42:66:0a:b0:dd:
                    d2:79:03:93:d7:2c:31:ec:13:c4:ad:85:e8:3b:c5:
                    f5:07:e3:94:58:0b:f1:8c:83:ad:cb:4f:e2:ee:9b:
                    84:bf:be:16:41:f1:72:ef:ab:5e:8e:94:50:ee:b0:
                    5c:fc:45:14:d9:89:a7:b4:51:ca:67:19:4c:4b:56:
                    8d:78:89:38:c6:59:02:d8:45:16:96:e0:8a:18:6a:
                    f2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0C:79:68:95:E6:C7:57:E2:3F:3C:88:AD:E1:DC:17:ED:E1:3B:C3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2394E6AF60D11F08D319BE2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:c4:38:17:f0:81:e2:b0:d5:24:83:a3:c9:89:e9:1f:88:39:
         71:35:78:a1:aa:50:be:d0:b4:e3:de:59:c9:5f:02:c2:a1:d0:
         60:7e:6d:64:5b:3f:c6:a1:e3:6a:1a:ac:e4:41:25:5f:50:bf:
         bd:f0:18:12:a3:76:be:38:19:6a:4e:dd:49:77:43:1a:b2:83:
         a5:e8:76:68:3f:83:fa:24:98:53:bb:ff:e3:82:2e:04:9b:0f:
         70:ed:30:28:5a:5a:d8:8c:1d:de:67:36:f7:52:ca:d6:bc:ea:
         cd:4e:a0:85:f5:51:26:43:91:2a:b6:3f:27:d4:64:56:51:ed:
         3b:be:cc:88:b0:fc:bc:e4:0c:65:66:95:57:fd:64:f6:7d:b4:
         6d:6d:41:ea:c6:bd:57:23:b3:9a:4d:83:47:31:93:1b:b0:b3:
         e7:e7:d8:c1:0d:0a:52:52:ca:dc:5e:58:69:3f:ff:20:40:a5:
         83:1e:20:35:85:51:64:f7:3e:95:21:59:05:c8:7b:2c:e1:22:
         b8:04:0b:d7:92:cb:35:aa:01:64:1c:43:a8:cf:91:45:11:eb:
         97:d2:4c:fe:29:4e:6f:73:81:8a:6a:0b:c6:d1:eb:2e:8a:a1:
         18:5e:03:94:03:6f:1a:a9:51:0e:8e:10:38:ea:32:e0:18:42:
         26:04:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:39:23 2026 by rpki-client