This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/218CB2A8F8F711F0AFC411D6DAE4EC9C.roa
File:                     218CB2A8F8F711F0AFC411D6DAE4EC9C.roa (raw, json)
Hash identifier:          /tG2MAr1IlYbj59EsWpiBFzGvtnaypQI0DSIiBZIEUo=
Subject key identifier:   1F:B4:C8:30:39:E3:49:07:C0:D7:D9:C5:87:A2:F8:A3:EC:30:96:44
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019931
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/218CB2A8F8F711F0AFC411D6DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 07:34:35 +0000
ROA not before:           Sat 24 Jan 2026 07:34:31 +0000
ROA not after:            Wed 04 Feb 2026 07:34:31 +0000
asID:                     138415
IP address blocks:        156.234.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104753 (0x19931)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 07:34:31 2026 GMT
            Not After : Feb  4 07:34:31 2026 GMT
        Subject: CN=6974760b-da43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:c1:ea:3a:45:9d:1e:8b:70:68:dc:12:bf:
                    be:a0:c8:4f:d3:09:c9:47:60:a0:c1:40:c5:8d:13:
                    a2:f5:fe:3e:a3:c5:5f:42:35:6c:fd:eb:d2:77:fb:
                    7e:0e:d8:1f:ce:36:eb:42:20:f8:52:e1:7a:8c:ca:
                    05:09:4a:17:f1:e5:f3:bd:9e:19:a9:92:22:bb:ee:
                    10:ab:1f:76:4d:b5:f3:89:30:e7:71:70:97:ff:e8:
                    95:38:fe:a5:02:ad:71:8a:be:70:d9:5a:de:d3:02:
                    a2:90:c9:c2:f1:5b:1d:ff:7d:14:f4:cd:44:32:be:
                    e8:6a:90:ac:e3:6e:8b:c9:a2:65:ad:99:2a:d2:01:
                    84:b1:01:77:dd:b3:65:8b:9b:e7:cb:6b:70:d7:c3:
                    80:19:00:28:91:0a:25:f8:41:9a:99:f4:71:bc:78:
                    cd:f3:ab:d4:12:99:3a:f7:6b:07:be:01:a2:52:62:
                    2e:c4:8c:4b:7d:45:29:16:81:ae:fd:48:38:21:00:
                    72:cd:50:b5:c1:d1:f2:60:c8:e8:a8:e6:5d:08:a5:
                    7c:87:69:c5:2e:44:8c:c2:e3:f3:73:db:bc:4b:0b:
                    7f:5e:ae:1f:f6:4a:b8:db:85:3d:6e:91:0e:71:0f:
                    77:9f:49:62:45:54:81:80:e4:81:5c:f5:91:bf:82:
                    23:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B4:C8:30:39:E3:49:07:C0:D7:D9:C5:87:A2:F8:A3:EC:30:96:44
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/218CB2A8F8F711F0AFC411D6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         89:55:70:52:45:94:cc:e3:9f:0d:37:9d:e1:02:9d:ba:c2:39:
         fd:5d:50:a3:6c:62:d5:95:63:18:0e:09:77:3a:ca:fc:56:22:
         37:00:86:d4:27:b5:18:65:53:1f:bf:90:bf:a1:4a:2f:68:91:
         75:bd:a2:ff:d0:40:5e:2c:23:53:c0:4f:02:59:26:50:15:16:
         e7:0d:f0:ef:0d:f3:01:0a:62:21:bc:3c:60:84:93:eb:ff:5e:
         24:ad:c6:ee:17:8a:13:d0:cb:9e:9b:74:18:03:bc:39:6b:7c:
         00:31:dd:98:cb:a5:f4:7b:90:33:10:55:9e:46:5a:6e:6d:66:
         a7:0e:e1:38:a6:bd:4c:1f:18:f5:a0:00:2c:ec:f2:00:a5:c9:
         49:5c:73:64:cc:aa:1f:86:ef:26:a0:4e:87:7c:3d:69:8b:ab:
         da:5e:a4:6b:f1:d8:48:3c:65:c2:e0:44:5d:77:7c:59:9c:f5:
         22:df:13:1a:36:5b:bd:65:4a:04:7a:7e:5b:4b:db:95:09:6a:
         11:70:70:4d:28:91:ac:fb:62:28:70:bf:32:81:38:dc:f3:d1:
         06:0f:67:9d:74:f2:de:66:e6:f7:a0:82:b5:a4:cc:54:e9:4f:
         b9:5f:7f:09:31:73:09:ec:35:02:76:58:e4:b9:cc:6a:06:e2:
         e9:a3:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:32:21 2026 by rpki-client