This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/162D4448F2AA11F0A268099ADAE4EC9C.roa
File:                     162D4448F2AA11F0A268099ADAE4EC9C.roa (raw, json)
Hash identifier:          yJEWtADFU1Ak0Lk9uvy3ZlDWvaHzbcXffpXIJMdaW8c=
Subject key identifier:   3A:BA:29:11:73:4B:8E:81:D3:95:77:2E:2D:D3:E0:83:8E:DA:23:0B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01972F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/162D4448F2AA11F0A268099ADAE4EC9C.roa
Signing time:             Fri 16 Jan 2026 07:07:58 +0000
ROA not before:           Fri 16 Jan 2026 07:07:51 +0000
ROA not after:            Mon 16 Feb 2026 07:07:51 +0000
asID:                     22773
IP address blocks:        156.242.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104239 (0x1972f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 16 07:07:51 2026 GMT
            Not After : Feb 16 07:07:51 2026 GMT
        Subject: CN=6969e3ce-f012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bb:b9:30:b7:94:dd:38:87:fe:dd:2f:ff:87:
                    ce:e0:94:bf:c1:4f:32:cb:e3:ad:7c:77:24:4a:5d:
                    6c:8b:4b:c4:05:9c:5d:4c:e3:70:71:d5:d6:0c:c2:
                    75:90:42:0a:aa:97:f5:0c:50:80:43:7e:0d:00:f7:
                    e3:f5:5f:6d:cc:52:42:99:ab:18:21:6c:0e:e5:b1:
                    5d:1e:60:3e:79:1b:40:81:aa:40:76:7e:92:4c:b2:
                    a6:6c:19:d9:0e:ca:6c:20:16:99:98:29:ce:85:22:
                    8c:0d:88:a4:17:21:a3:87:af:fb:42:f1:99:4a:05:
                    7b:2b:74:2d:f0:81:3f:e3:fa:15:2e:7e:7f:4b:6e:
                    7c:0f:6f:d8:7e:94:61:0b:3d:91:99:3f:27:e2:bd:
                    da:41:52:cc:b3:ed:20:90:12:18:cf:f2:63:97:b5:
                    5a:ec:a9:58:c4:24:ba:42:66:0d:42:99:0a:d2:52:
                    e9:ab:36:04:b3:a0:9e:19:65:0c:18:82:9a:01:ed:
                    5e:81:74:01:08:4c:40:3f:b0:49:5f:64:ce:12:51:
                    7d:a0:0c:c2:36:13:a0:23:34:12:d6:2a:4a:a8:64:
                    54:53:3e:e3:54:70:f4:6c:99:29:a2:d8:2e:25:2f:
                    50:c2:bc:96:58:8c:2c:30:43:c9:ad:9e:0c:f8:51:
                    f7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BA:29:11:73:4B:8E:81:D3:95:77:2E:2D:D3:E0:83:8E:DA:23:0B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/162D4448F2AA11F0A268099ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:53:50:9f:03:3d:2c:6b:a2:a1:49:eb:a3:7e:ac:ce:17:39:
         ac:8d:f2:84:89:c7:13:48:c7:c7:6c:a7:b2:f1:3d:33:e5:88:
         b8:3f:09:b8:3d:20:c3:19:68:b4:7b:a4:e9:d8:6a:86:0f:5d:
         82:4a:83:1e:dd:be:f5:d7:90:7e:72:11:75:53:b1:66:0f:a7:
         44:bf:68:71:7d:76:c6:06:fe:a9:72:83:0d:bb:98:e1:e7:e7:
         ba:13:ff:d9:3a:15:13:52:d5:55:2c:c1:3c:bb:63:1c:70:e2:
         3c:dc:c6:17:c5:1e:03:ac:d0:0d:8a:d6:74:e6:db:96:0d:34:
         a3:ec:3e:cc:8d:ce:c6:4b:06:03:ee:3a:42:d4:98:97:89:8f:
         91:e6:bc:c2:14:26:4a:a3:fd:ed:26:47:b2:0a:38:26:70:74:
         6f:46:a8:77:49:7c:38:68:78:c5:f5:a4:0a:a6:28:6f:69:d9:
         0d:38:e7:51:e0:52:48:e9:b8:ae:2e:c3:c4:77:a5:fc:f1:e3:
         1f:23:4e:36:d6:df:8f:97:64:80:7d:7a:93:36:b0:28:3d:8a:
         02:90:fb:f1:8a:b8:31:c3:ad:3a:c7:1e:69:2f:b6:ab:82:ef:
         ed:b8:41:67:01:14:44:0f:2b:e3:dc:f5:c8:63:bb:90:39:c7:
         67:93:3a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:09 2026 by rpki-client