This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4A98992F95711F088EF7B9DDAE4EC9C.roa
File:                     C4A98992F95711F088EF7B9DDAE4EC9C.roa (raw, json)
Hash identifier:          K3zFswN4uzUIDj2fbKk9kipYJxlVrIKBlIKU1YTgyEk=
Subject key identifier:   DD:7B:FF:F2:3C:80:12:13:0A:E2:6E:E5:C2:22:80:40:1B:14:2C:79
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01997E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4A98992F95711F088EF7B9DDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 19:06:21 +0000
ROA not before:           Sat 24 Jan 2026 19:06:16 +0000
ROA not after:            Thu 12 Mar 2026 19:06:16 +0000
asID:                     25160
IP address blocks:        156.225.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104830 (0x1997e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 19:06:16 2026 GMT
            Not After : Mar 12 19:06:16 2026 GMT
        Subject: CN=6975182d-5955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2c:f6:2b:53:94:d1:92:fa:fd:08:cf:39:0d:
                    40:de:30:e0:71:b7:d9:ae:78:f5:ec:fb:df:98:8b:
                    96:52:b0:c4:47:e0:f6:64:93:cf:ef:d8:7a:98:0f:
                    7e:84:b7:1d:66:fd:16:95:e4:60:47:7e:fc:b5:64:
                    e7:85:96:0b:7c:8e:5b:5a:a6:e0:b4:85:f8:fe:df:
                    16:46:95:52:78:2b:c1:de:63:62:fe:25:bf:3b:9d:
                    f6:27:f0:3f:e6:b4:31:7d:5e:3d:2a:e2:61:4c:70:
                    60:44:90:78:f5:3e:ca:99:09:9c:9e:e3:b0:18:84:
                    4a:c8:36:12:5e:c4:9a:eb:db:22:88:fd:cf:69:92:
                    4d:f2:bf:05:9b:49:02:d1:04:c7:81:9b:3e:7e:84:
                    69:f3:d2:b7:ab:21:33:5f:bd:b2:25:2e:c0:33:67:
                    b4:b4:73:02:6a:80:45:71:ff:c6:af:b6:16:78:ce:
                    8e:cf:56:4b:20:ee:ae:b4:56:8e:a4:d3:be:eb:fa:
                    72:9d:27:f6:1d:bd:78:5a:b2:c9:0b:13:6c:19:b7:
                    42:d2:59:9f:55:1f:56:6c:b4:ac:80:86:7b:7d:c3:
                    e2:be:aa:25:a3:07:b8:9b:eb:13:54:b8:11:47:fd:
                    ae:2c:0a:e7:b7:ae:e3:fe:c1:29:15:b4:30:69:0e:
                    5d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7B:FF:F2:3C:80:12:13:0A:E2:6E:E5:C2:22:80:40:1B:14:2C:79
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4A98992F95711F088EF7B9DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:6b:b5:8f:06:0a:ab:1b:a3:ce:bd:2b:53:a5:41:f4:f8:f9:
         ae:97:36:77:66:08:f9:65:98:e9:25:31:8a:2c:11:4a:2c:07:
         57:18:54:c3:46:73:db:61:2f:9d:73:ac:a1:b6:c5:55:e7:19:
         01:90:fc:2c:ea:2e:cb:8f:35:b1:e1:5c:c7:68:65:77:4a:18:
         4c:91:59:6a:52:78:57:76:3a:f3:e8:91:85:ba:a3:96:f2:28:
         97:15:c0:3b:5c:57:04:40:e9:92:ae:55:7f:42:df:3d:35:93:
         ba:60:ca:9a:76:8e:57:3b:c8:63:65:06:59:e5:de:c9:65:bc:
         95:3f:46:9c:25:24:ad:75:ed:e9:77:2b:44:67:b4:47:97:bc:
         0b:eb:75:4b:dd:f7:70:84:a5:f1:3e:a5:65:1b:b5:70:c9:2e:
         41:67:20:d1:ea:37:27:05:3c:b2:b4:cd:4e:0e:1f:ae:4b:e8:
         28:b2:ff:04:cb:5a:e9:ee:c1:98:7c:c5:38:05:9b:91:6d:49:
         6d:85:90:91:1c:5d:15:a6:a9:08:f9:1e:35:b0:98:46:f4:ba:
         0e:84:7f:c6:a2:1b:f0:ae:b8:4c:fb:e4:1e:b0:43:24:bf:a3:
         e2:1f:1c:fa:0f:9c:16:78:43:08:6c:66:51:25:7a:79:0a:33:
         9d:a9:d7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:51:51 2026 by rpki-client