This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1587FB7EF06011F095D589A5DAE4EC9C.roa
File:                     1587FB7EF06011F095D589A5DAE4EC9C.roa (raw, json)
Hash identifier:          9bEAHp++1HwlTXkxUSODgX2QLwtMCpp4PuW/gYrTxEk=
Subject key identifier:   4C:3F:95:A3:E8:9D:82:88:70:B9:21:FC:DB:7A:3D:8F:DA:DC:3A:B3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01967B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1587FB7EF06011F095D589A5DAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 09:13:12 +0000
ROA not before:           Tue 13 Jan 2026 09:13:07 +0000
ROA not after:            Fri 20 Feb 2026 09:13:07 +0000
asID:                     211265
IP address blocks:        156.231.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104059 (0x1967b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 13 09:13:07 2026 GMT
            Not After : Feb 20 09:13:07 2026 GMT
        Subject: CN=69660ca8-dba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:ad:3d:d6:79:c6:73:4b:2e:1c:fd:ba:9a:
                    eb:02:14:38:22:41:02:ec:7c:8e:e2:82:aa:0f:75:
                    af:3f:5a:d7:d7:6e:e6:c1:e5:26:22:9f:c0:97:64:
                    6f:a1:a6:0d:01:68:03:39:c9:02:b4:16:df:60:2d:
                    bc:46:9e:d4:5c:f6:a4:a7:1f:57:10:a1:bc:d1:d0:
                    37:23:da:97:21:b4:a4:d9:c0:03:6c:bf:b2:07:17:
                    cf:a1:e1:84:47:bb:15:7f:90:2b:c9:17:2e:48:2a:
                    92:22:97:36:43:b0:5e:bd:12:7d:5b:3e:4c:1f:ef:
                    25:7a:9f:0a:5a:76:a7:2f:3f:05:44:01:ab:26:99:
                    3b:f5:44:0b:42:53:fd:c4:a3:3e:b6:03:ec:27:0e:
                    90:f6:ca:2e:83:24:b3:7c:36:de:7b:24:7a:6e:16:
                    cf:8b:4b:b9:55:9f:28:89:4c:68:97:00:57:53:fb:
                    8e:5e:78:38:5e:3c:69:3e:2c:1f:a9:ef:79:59:3e:
                    1b:88:dd:cb:ed:72:ef:eb:e3:0a:bf:c4:b7:65:59:
                    8c:45:1b:05:b5:d5:3c:c3:5d:0e:11:a9:f6:c0:12:
                    97:0e:35:17:65:fd:b9:99:a9:1b:3e:36:eb:b8:56:
                    97:fa:c0:3e:9a:d0:d8:68:a7:4b:40:aa:00:3b:3b:
                    c0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3F:95:A3:E8:9D:82:88:70:B9:21:FC:DB:7A:3D:8F:DA:DC:3A:B3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1587FB7EF06011F095D589A5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:33:47:d9:f2:ea:01:b6:50:be:98:2d:ab:b2:e3:a0:db:e3:
         84:d9:3e:b3:d9:67:eb:e0:4f:25:2d:2c:38:fc:71:c5:c4:91:
         0a:c8:8f:d1:93:bd:cc:b0:ab:64:8a:55:41:83:da:58:91:d2:
         b2:c6:da:dd:92:20:4b:c5:d0:62:54:0a:b9:4e:0c:2f:a0:40:
         ca:7c:ed:e1:12:c3:11:69:3d:f5:c5:c3:2f:fc:97:0c:8b:4b:
         ed:5d:7f:2d:60:20:d1:e3:af:54:73:9d:38:ba:8b:45:d5:c7:
         f8:63:31:ca:2b:0b:76:69:43:9b:3a:66:d1:b3:a6:b1:6e:21:
         1b:1d:9a:9e:3a:60:78:ad:bb:25:c7:9a:41:ba:34:d9:ec:b0:
         18:ca:ed:1b:36:22:a2:f9:82:53:dc:0a:5c:79:76:98:60:b8:
         e5:87:7a:dc:e4:b6:ab:c3:1c:da:60:68:db:79:a5:30:0d:11:
         b4:96:ab:d3:81:22:7c:fa:fe:75:d3:cb:c8:99:31:f7:24:e8:
         5b:8a:0b:4b:bb:ea:96:eb:d6:1c:9e:5d:47:f5:a5:2b:2d:f4:
         d8:7d:df:d4:4d:5b:e3:90:2b:f0:aa:80:9f:3b:14:db:dc:3b:
         55:f4:2e:be:e0:84:fc:9c:37:18:63:02:31:4f:ff:db:36:ba:
         5a:43:7a:71
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZZ7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTEzMDkxMzA3WhcNMjYwMjIwMDkxMzA3WjAYMRYw
FAYDVQQDEw02OTY2MGNhOC1kYmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtzWtPdZ5xnNLLhz9uprrAhQ4IkEC7HyO4oKqD3WvP1rX127mweUmIp/A
l2RvoaYNAWgDOckCtBbfYC28Rp7UXPakpx9XEKG80dA3I9qXIbSk2cADbL+yBxfP
oeGER7sVf5AryRcuSCqSIpc2Q7BevRJ9Wz5MH+8lep8KWnanLz8FRAGrJpk79UQL
QlP9xKM+tgPsJw6Q9sougySzfDbeeyR6bhbPi0u5VZ8oiUxolwBXU/uOXng4Xjxp
Piwfqe95WT4biN3L7XLv6+MKv8S3ZVmMRRsFtdU8w10OEan2wBKXDjUXZf25makb
PjbruFaX+sA+mtDYaKdLQKoAOzvAUwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEw/
laPonYKIcLkh/Nt6PY/a3DqzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNTg3RkI3RUYwNjAxMUYwOTVENTg5QTVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOejMA0GCSqGSIb3DQEBCwUA
A4IBAQAiM0fZ8uoBtlC+mC2rsuOg2+OE2T6z2Wfr4E8lLSw4/HHFxJEKyI/Rk73M
sKtkilVBg9pYkdKyxtrdkiBLxdBiVAq5TgwvoEDKfO3hEsMRaT31xcMv/JcMi0vt
XX8tYCDR469Uc504uotF1cf4YzHKKwt2aUObOmbRs6axbiEbHZqeOmB4rbslx5pB
ujTZ7LAYyu0bNiKi+YJT3ApceXaYYLjlh3rc5LarwxzaYGjbeaUwDRG0lqvTgSJ8
+v5108vImTH3JOhbigtLu+qW69Ycnl1H9aUrLfTYfd/UTVvjkCvwqoCfOxTb3DtV
9C6+4IT8nDcYYwIxT//bNrpaQ3px
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:33 2026 by rpki-client