This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44D83856F4EF11F0B28E4189DAE4EC9C.roa
File:                     44D83856F4EF11F0B28E4189DAE4EC9C.roa (raw, json)
Hash identifier:          f4dD254xWle/OEjBs+smx62VA9aH/HSvXg1FEMgTHC4=
Subject key identifier:   81:5F:99:5F:F7:CB:19:EF:27:18:70:20:AD:90:5C:AB:1A:1B:3E:BB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01978D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44D83856F4EF11F0B28E4189DAE4EC9C.roa
Signing time:             Mon 19 Jan 2026 04:28:14 +0000
ROA not before:           Mon 19 Jan 2026 04:28:09 +0000
ROA not after:            Mon 16 Feb 2026 04:28:09 +0000
asID:                     150706
IP address blocks:        156.255.2.0/24 maxlen: 24
                          156.255.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104333 (0x1978d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 19 04:28:09 2026 GMT
            Not After : Feb 16 04:28:09 2026 GMT
        Subject: CN=696db2de-ca2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:41:f5:2e:85:9e:f8:77:32:d4:b2:c3:26:
                    f6:b0:53:86:31:dd:c4:ca:02:fc:23:e2:f7:5a:cf:
                    a1:ce:5d:21:85:05:7f:f2:5e:65:17:02:9b:35:38:
                    1a:91:dc:70:15:a5:3d:ac:50:3c:19:22:a8:37:f2:
                    bb:25:4e:bd:a4:bb:45:4c:2d:09:ad:f0:07:79:9e:
                    18:b9:75:fd:af:97:fb:69:2a:58:a0:c1:7d:d1:1f:
                    fd:6c:7c:8e:e8:88:65:20:7f:ae:01:19:0f:24:52:
                    68:fe:14:0d:36:2f:e4:1e:0b:e7:e2:85:6a:77:82:
                    3e:3c:38:42:54:5d:0a:ad:cd:dc:9d:c3:43:17:e1:
                    0c:d8:b9:3e:c9:88:81:c3:98:65:2b:f2:a7:f6:c9:
                    6e:e9:28:4b:45:ca:21:27:08:5f:3c:75:fa:00:97:
                    e5:aa:dc:1c:5c:a6:86:81:d7:60:2f:16:b5:2d:f0:
                    11:5e:99:dd:e7:3b:51:a6:85:70:10:d8:8f:31:44:
                    4f:d8:58:9e:f2:0c:52:b9:0e:74:5e:da:a3:40:0a:
                    fe:6e:d9:8c:7e:75:7c:21:21:1b:5c:84:a2:d4:23:
                    17:e2:ef:73:ea:1d:2a:92:29:81:3a:24:95:2f:91:
                    31:55:36:af:ff:19:3c:65:61:4f:3c:0d:98:bb:62:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5F:99:5F:F7:CB:19:EF:27:18:70:20:AD:90:5C:AB:1A:1B:3E:BB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44D83856F4EF11F0B28E4189DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:51:93:be:a4:9e:02:3f:3a:49:69:0a:40:d3:f3:ea:a7:f3:
         f1:ce:ce:f0:82:bd:0a:37:f7:01:a7:29:06:5d:10:9d:06:b4:
         70:50:78:de:20:85:16:0a:67:ac:f5:ff:8b:8f:2d:ff:5a:55:
         8d:92:49:35:d7:43:03:a7:e5:1a:42:f1:7f:f9:b5:bd:55:83:
         3a:4a:9d:a1:55:63:56:a3:3a:a6:3f:7d:b3:3b:ad:d8:2a:0d:
         de:64:c4:6f:72:30:79:5d:c5:ce:c0:77:b7:e2:66:fc:96:8e:
         5e:b6:f4:1e:d2:3b:3e:4b:ad:2e:00:ac:e6:e1:49:05:f4:fc:
         5a:38:56:65:bf:e5:d9:e5:3e:bf:78:9c:da:19:09:21:39:80:
         6c:1a:a1:2d:0c:af:c6:40:78:45:17:c7:95:bc:34:ee:d4:ef:
         b0:bc:33:56:17:60:33:ff:dd:6b:7a:0e:c3:b9:6a:38:c7:b9:
         90:a7:e6:b2:77:05:74:1c:31:26:bf:25:01:db:d3:50:ca:25:
         41:47:9a:57:25:f8:c5:8d:8a:f0:ea:fd:72:3c:13:d5:cc:b8:
         a3:ff:e7:dd:a4:16:d0:a1:4c:4b:1a:55:2b:c7:cf:7b:a8:56:
         32:e8:c0:7f:b4:a5:51:ba:9f:31:99:a0:ec:46:6b:38:52:6c:
         cd:14:25:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 06:05:04 2026 by rpki-client