This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/062E4768EC6011F0B579958DDAE4EC9C.roa
File:                     062E4768EC6011F0B579958DDAE4EC9C.roa (raw, json)
Hash identifier:          vg3gwaBjYySL54BKs8HVtIavSW+NUM1v8r+xfwIja0Q=
Subject key identifier:   29:35:78:D9:72:76:FB:A2:C1:E2:2F:EC:89:1D:D4:61:7E:B4:2A:FE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01956A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/062E4768EC6011F0B579958DDAE4EC9C.roa
Signing time:             Thu 08 Jan 2026 07:02:42 +0000
ROA not before:           Thu 08 Jan 2026 07:02:37 +0000
ROA not after:            Wed 04 Feb 2026 07:02:37 +0000
asID:                     142032
IP address blocks:        156.238.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103786 (0x1956a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  8 07:02:37 2026 GMT
            Not After : Feb  4 07:02:37 2026 GMT
        Subject: CN=695f5692-6934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:21:6b:ac:7e:16:60:89:b9:45:85:46:cf:
                    f1:24:4a:98:ed:58:14:49:55:94:ff:05:87:4f:8d:
                    76:44:2b:9d:37:c6:87:73:32:8a:d6:fe:b4:bc:ba:
                    81:a0:47:17:29:65:fe:9e:08:6e:4f:f0:ed:18:aa:
                    e9:79:32:07:e9:6e:90:c5:30:a0:82:cf:4e:6b:f9:
                    57:9d:50:b9:a2:9f:d1:b1:90:c6:e1:10:c3:8d:8b:
                    4d:09:0a:c2:a8:3d:c6:d6:0b:ba:66:ac:5a:b7:2a:
                    74:d1:d5:92:b2:4b:74:6f:7e:7d:87:1d:42:01:6a:
                    9c:5e:ab:ae:57:b4:57:4e:81:7a:f0:77:6c:24:df:
                    08:0b:92:66:d2:e1:c3:10:e6:13:90:9d:48:56:f2:
                    57:72:37:34:ed:8e:04:8e:af:9c:52:f4:cb:ee:d8:
                    d9:59:1f:d3:70:4f:36:b7:7d:2b:a2:94:84:e6:88:
                    6a:ce:55:b3:cf:7a:9d:f5:71:64:bd:2e:d3:6b:91:
                    2f:45:57:39:e6:df:b1:5a:e5:be:93:55:d9:bd:b8:
                    84:52:8a:d3:30:ce:5b:3c:cc:1e:27:22:35:8d:1f:
                    39:25:08:ad:39:83:c9:a4:5a:8e:22:d7:c3:2f:a6:
                    12:84:d1:17:01:4f:aa:2c:29:d9:91:97:76:81:02:
                    71:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:35:78:D9:72:76:FB:A2:C1:E2:2F:EC:89:1D:D4:61:7E:B4:2A:FE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/062E4768EC6011F0B579958DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:55:79:d3:1e:66:83:3e:cd:89:9b:64:7f:4d:e5:36:19:c0:
         a5:a7:3c:47:eb:a8:9b:52:53:3d:86:a4:8e:49:a6:55:5d:7b:
         e4:3a:b9:41:52:4c:9e:ce:95:99:2a:d5:f2:1f:e5:bc:be:fb:
         f4:04:46:ba:a7:c1:24:4b:b8:4f:7e:17:71:71:b3:6a:33:5b:
         d9:b1:9a:4a:ff:f6:98:69:90:b6:73:e5:9b:dc:40:04:b6:c6:
         69:88:69:1b:d4:6b:a4:f2:7c:51:df:8c:58:23:0e:6e:40:02:
         6d:16:c5:c8:bc:66:ac:30:d9:85:00:37:90:6c:d7:24:0b:c0:
         66:e0:57:cf:03:f4:11:93:f4:b0:73:bb:b6:58:58:14:57:a6:
         ed:f5:87:43:ef:01:cb:bf:0e:5a:48:2f:e3:46:d7:71:57:e4:
         04:ae:e0:b7:8f:d9:ae:5b:b2:38:58:87:e7:71:50:d7:88:ed:
         c1:ad:fc:10:fc:e7:7f:29:c9:1b:dc:26:3a:58:dd:5f:a7:0a:
         6d:95:08:02:ce:66:d2:a8:47:a7:cb:33:45:d5:94:1d:df:c6:
         62:fe:8e:1c:7e:ea:75:95:30:74:9c:a7:c0:61:1f:0a:d5:1c:
         48:31:40:9d:de:07:44:22:38:87:7c:d6:ec:67:cb:6d:30:41:
         bb:48:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:10 2026 by rpki-client