This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8B5E23EF6B811F087DFA984DAE4EC9C.roa
File:                     C8B5E23EF6B811F087DFA984DAE4EC9C.roa (raw, json)
Hash identifier:          MhNI2Xn8mLUvEQhDaJTl2ucsHc5QisYIWuSzNGf7cm4=
Subject key identifier:   ED:ED:87:D1:49:97:4F:46:63:0B:38:60:A1:D2:06:FF:AE:F4:8D:51
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019812
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8B5E23EF6B811F087DFA984DAE4EC9C.roa
Signing time:             Wed 21 Jan 2026 11:03:16 +0000
ROA not before:           Wed 21 Jan 2026 11:03:09 +0000
ROA not after:            Tue 28 Apr 2026 11:03:09 +0000
asID:                     13335
IP address blocks:        156.255.69.0/24 maxlen: 24
                          156.255.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104466 (0x19812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 21 11:03:09 2026 GMT
            Not After : Apr 28 11:03:09 2026 GMT
        Subject: CN=6970b274-be34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a7:46:d5:3f:89:26:a0:af:4c:8c:1d:e7:5a:
                    19:8b:cb:3b:e7:7a:e7:ed:20:bd:71:9a:15:f6:d9:
                    65:70:19:bf:53:72:5c:ce:4b:12:3a:55:29:d0:42:
                    29:b7:b7:3c:68:c4:53:11:4f:d7:5f:62:20:7e:f8:
                    22:d4:d5:0c:b3:f6:32:57:21:1d:c5:81:a1:62:fb:
                    c1:88:a0:49:fb:c7:43:cf:a0:5f:12:45:05:8c:80:
                    18:c7:89:92:d5:9e:d6:bc:c5:37:43:1e:79:24:4e:
                    43:00:f0:a5:9a:9d:02:74:45:a5:9f:17:b4:2d:5b:
                    81:cc:c2:da:66:d1:77:cd:4e:20:58:0b:16:b5:12:
                    7a:8a:21:b8:55:04:d1:c5:6c:c3:e9:fa:df:74:02:
                    44:3d:29:1b:75:35:46:00:c8:32:50:17:7e:e9:c4:
                    f7:32:55:14:dd:7e:64:39:ef:90:40:f1:04:01:af:
                    42:2f:92:34:04:e0:8c:b0:2f:4a:37:90:75:e1:a3:
                    54:e1:39:54:bc:11:d0:9a:17:c5:ba:9a:48:0a:6b:
                    47:5e:2c:5f:4b:65:6e:2a:01:c1:73:6f:0f:44:c3:
                    ae:fc:84:ce:88:85:32:12:34:22:b5:93:e0:e6:13:
                    2e:3d:fd:c9:60:1f:cd:9a:b5:28:fa:5c:3a:7d:b5:
                    89:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:ED:87:D1:49:97:4F:46:63:0B:38:60:A1:D2:06:FF:AE:F4:8D:51
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8B5E23EF6B811F087DFA984DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.69.0/24
                  156.255.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:d3:7f:1d:51:d3:2c:5e:ae:02:9e:14:9d:fa:6d:43:40:d2:
         25:40:c7:ef:91:ac:16:02:dd:27:dc:27:b8:25:57:93:e3:76:
         b2:d9:02:08:56:4c:73:b1:dc:2b:d0:bf:81:56:c3:a6:fc:27:
         b4:23:d4:a7:bf:18:64:61:a1:79:23:13:d4:37:2f:a2:29:20:
         97:91:6d:0f:af:fe:eb:dc:a3:71:89:ed:ed:62:cb:dd:d8:7c:
         37:7e:f7:ae:b9:6f:70:f2:d1:27:87:25:fb:21:5b:9d:9f:7e:
         06:7d:15:13:f3:b4:12:8d:d9:5b:0d:da:ae:37:4d:fa:89:e2:
         32:52:8f:f1:d0:5c:b2:af:9c:ba:f8:fb:76:94:e6:7a:28:eb:
         f9:70:1f:86:e5:b8:35:23:19:55:60:1a:24:b9:43:e9:12:15:
         29:92:da:f3:bd:72:e9:1a:0c:7b:ce:5e:d8:35:a0:06:df:cd:
         59:e8:f7:1e:c6:11:5f:10:c6:f2:98:de:1c:38:68:0e:54:a8:
         18:d3:1c:25:36:cb:25:42:0e:39:c3:e7:a5:97:24:1f:14:2d:
         a0:bc:5f:a0:6b:9d:ad:b3:09:f7:f2:db:e1:7d:19:8d:38:92:
         8e:f9:e5:01:b0:f6:b9:dc:21:da:72:b3:3e:ef:58:87:de:7e:
         1b:5b:fe:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:10:41 2026 by rpki-client