This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/514F96A8E63811F0BA7507A4DAE4EC9C.roa
File:                     514F96A8E63811F0BA7507A4DAE4EC9C.roa (raw, json)
Hash identifier:          ax9WC6/e6fZ+zR/UJkpHFDReg5oSbI0ILb6u709w2Gs=
Subject key identifier:   4E:76:09:1F:79:C5:56:CD:CE:8B:58:98:89:A3:23:75:B5:45:43:D9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01936E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/514F96A8E63811F0BA7507A4DAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 11:03:21 +0000
ROA not before:           Wed 31 Dec 2025 11:03:16 +0000
ROA not after:            Wed 04 Feb 2026 11:03:16 +0000
asID:                     138195
IP address blocks:        156.234.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103278 (0x1936e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 31 11:03:16 2025 GMT
            Not After : Feb  4 11:03:16 2026 GMT
        Subject: CN=695502f9-6d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1e:64:0c:00:f2:a0:94:8e:45:aa:2d:8f:2f:
                    b1:cd:7a:d0:e7:42:dd:bf:04:99:1c:5f:22:96:0e:
                    a8:f3:d8:56:4e:c3:63:1d:8c:f1:27:3a:6d:18:2f:
                    c5:d7:b7:09:fd:ff:3d:77:b5:7f:0f:94:4b:fd:45:
                    83:e7:40:9b:82:36:4e:1e:43:1e:cd:cf:6c:c4:31:
                    b3:f5:37:65:10:27:d6:ec:38:43:c2:5a:06:b4:49:
                    bf:4c:08:12:60:e4:c4:3a:ae:be:ab:83:a7:1e:08:
                    08:8a:e3:0f:ed:04:ff:1e:b1:60:58:af:82:41:14:
                    2d:f8:6a:8e:25:68:18:8e:6d:92:cf:2b:af:a3:36:
                    38:e3:e7:f2:27:f4:ca:4d:b4:6c:2c:96:b6:57:b4:
                    0d:dd:f1:2c:e8:d6:5a:6e:49:bc:ee:dc:aa:e1:ad:
                    4a:ef:18:10:73:80:10:99:13:53:a7:f2:95:81:49:
                    cf:fb:75:0b:e5:ac:dc:bf:44:ef:f4:fb:77:c9:1f:
                    3a:9a:e4:f9:0f:28:ab:69:d9:d0:d5:a2:43:c8:a0:
                    76:ec:f9:9d:d7:d4:fa:8e:d0:e8:da:57:06:6c:b2:
                    9c:42:70:19:66:57:67:d0:bf:ab:da:44:83:72:a1:
                    49:e6:d1:35:5b:99:e6:00:94:33:d4:e3:a9:5d:d8:
                    33:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:76:09:1F:79:C5:56:CD:CE:8B:58:98:89:A3:23:75:B5:45:43:D9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/514F96A8E63811F0BA7507A4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         97:cd:e3:94:04:14:55:0b:10:1c:15:b7:4c:22:60:c9:90:51:
         d1:a1:e8:d3:3b:47:da:63:c3:d3:33:e6:fa:ec:a9:e7:a8:af:
         87:c6:bf:e3:7c:d7:88:76:52:ba:33:da:8d:33:8b:0b:cc:87:
         73:9f:ac:66:c3:06:d0:e3:9a:81:92:ff:f2:b0:e7:a6:5a:7b:
         2c:38:7c:db:9a:e2:2f:59:5a:ff:7e:c9:e2:ca:42:bd:ce:84:
         da:02:b6:60:49:68:92:08:f1:ed:56:16:be:f3:74:3f:e8:c1:
         6f:cd:99:8e:03:89:2e:44:0a:6c:84:f1:16:0e:59:45:f8:da:
         5d:d1:69:13:5e:83:3a:b6:d6:5a:54:08:79:53:0d:14:ad:b8:
         aa:7f:41:13:1e:a0:d0:fd:eb:a2:d0:2b:7f:d8:7e:6f:a5:6d:
         bf:c5:d0:94:b3:7f:70:77:5d:e2:8e:02:fc:86:0a:45:a2:e1:
         38:9d:59:b3:9c:dd:ee:cc:f2:de:bf:fb:fa:07:25:f0:18:ad:
         72:cf:7f:14:eb:65:fe:90:bd:35:f8:91:33:9c:7f:54:84:ed:
         4b:99:f1:2c:22:f6:f8:b6:92:5d:1c:3c:29:0a:4a:1e:2d:da:
         e2:62:ec:02:8e:9a:e9:ca:e5:0d:0f:b5:50:0e:48:93:ff:82:
         50:6d:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:19 2026 by rpki-client