This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55E4026AEC7511F08853228EDAE4EC9C.roa
File:                     55E4026AEC7511F08853228EDAE4EC9C.roa (raw, json)
Hash identifier:          gBK2TPQFBLKAMzeueNNbUSp0Saze9ryWRJT7KkBLAK8=
Subject key identifier:   E9:4D:B8:37:9C:F4:7C:E5:7F:9B:5D:B5:8B:8D:D0:A3:FE:66:7A:FE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019590
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55E4026AEC7511F08853228EDAE4EC9C.roa
Signing time:             Thu 08 Jan 2026 09:35:15 +0000
ROA not before:           Thu 08 Jan 2026 09:35:09 +0000
ROA not after:            Wed 28 Jan 2026 09:35:09 +0000
asID:                     142032
IP address blocks:        156.238.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103824 (0x19590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  8 09:35:09 2026 GMT
            Not After : Jan 28 09:35:09 2026 GMT
        Subject: CN=695f7a53-6f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:13:35:72:fa:15:b9:0f:ce:ce:dc:2d:95:ef:
                    c7:1b:e1:0c:6f:be:48:2c:c6:9c:37:e5:33:08:67:
                    49:8f:6f:f2:92:89:b1:3a:30:11:de:44:6a:fd:b7:
                    21:f2:1f:8b:fe:64:c3:9f:e2:33:00:d0:3b:cf:f9:
                    29:c1:dc:3f:94:a2:fb:72:2a:f7:c5:ae:ef:d6:47:
                    83:78:b4:f0:59:35:65:35:66:f2:1f:c7:df:a5:9b:
                    84:5b:73:ec:7f:33:98:9e:24:dc:87:19:4b:3e:9d:
                    67:3b:8f:ab:ff:5d:d1:f0:c9:2c:ed:8b:cb:2f:ba:
                    40:e8:5a:28:e5:ec:8b:a2:a8:2f:57:82:d4:d0:0d:
                    c3:9a:df:e2:e1:fd:ba:4f:7d:ea:b3:ed:29:be:3d:
                    f5:4c:18:12:c4:bb:4a:41:6e:c5:f6:93:bc:88:63:
                    5a:17:7d:54:81:84:43:59:ed:d3:5b:08:bb:4c:c0:
                    40:e7:fd:07:55:3b:74:d2:72:3e:07:fd:6e:fd:8e:
                    37:20:1c:a2:93:dc:5c:74:7f:cc:18:44:5c:32:2d:
                    09:9e:1c:c6:46:e8:89:73:8f:f3:84:48:6b:c4:5f:
                    2c:93:3d:88:ba:29:d5:f6:45:50:d9:81:cf:77:ec:
                    48:38:3c:b1:57:c7:dc:ce:61:99:f5:05:ee:af:63:
                    21:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4D:B8:37:9C:F4:7C:E5:7F:9B:5D:B5:8B:8D:D0:A3:FE:66:7A:FE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55E4026AEC7511F08853228EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:e0:e8:32:f3:c2:57:c9:ea:ef:7e:91:a8:59:b7:6b:f0:ac:
         8b:b5:6f:0e:78:37:09:8f:e0:88:89:fa:a1:ee:9a:29:ff:56:
         e2:11:3b:bb:d0:ad:14:e7:96:74:a5:a9:c9:84:dd:77:e9:57:
         be:eb:ef:bb:c5:51:e5:19:3b:77:4c:b9:f8:89:26:c1:14:b8:
         10:83:82:67:8f:5d:18:3b:77:73:bb:03:31:c5:f4:d2:b4:bf:
         cc:6d:ab:5a:94:a4:2b:1f:f2:d3:8d:7a:40:51:6b:c6:5d:87:
         ca:29:8d:c6:fe:8a:82:eb:75:5f:45:6e:82:1d:ba:89:21:3b:
         6b:0e:b8:2b:3e:ff:e9:e3:57:c0:d8:c8:0f:f7:38:92:ac:5d:
         9b:80:4b:ff:cc:e0:ef:66:3c:6e:22:0c:e8:6d:28:a1:08:13:
         cf:5e:3c:ca:50:ad:4c:d2:8f:a7:fe:3b:97:5a:0c:e0:5b:c1:
         87:ec:3c:7d:46:c4:f9:a1:5d:f4:9e:51:b7:6b:e8:a2:fc:cf:
         21:9c:04:1e:91:d5:2d:1f:0f:e2:e9:d4:9b:8c:7b:57:69:60:
         60:78:82:1b:f5:8f:0a:0e:65:de:ff:fe:e1:98:39:74:27:07:
         f8:14:75:8f:be:60:df:42:f7:b7:6c:23:cb:87:23:13:26:38:
         89:1f:06:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:23 2026 by rpki-client