This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/627787BAFC3B11F0884819EBDAE4EC9C.roa
File:                     627787BAFC3B11F0884819EBDAE4EC9C.roa (raw, json)
Hash identifier:          v5fhkmydCNkpp0ZMhGgs45iLyLVr6yVsrQpRRYRzzOQ=
Subject key identifier:   3A:5D:AB:25:6A:39:60:18:85:79:34:0F:E3:7C:5C:64:8B:E9:69:D6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019A67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/627787BAFC3B11F0884819EBDAE4EC9C.roa
Signing time:             Wed 28 Jan 2026 11:20:44 +0000
ROA not before:           Wed 28 Jan 2026 11:20:37 +0000
ROA not after:            Sat 07 Mar 2026 11:20:37 +0000
asID:                     64013
IP address blocks:        156.234.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 12 Feb 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105063 (0x19a67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 28 11:20:37 2026 GMT
            Not After : Mar  7 11:20:37 2026 GMT
        Subject: CN=6979f10c-1db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:45:da:fb:9e:a9:26:9d:3f:d1:ac:20:fc:40:
                    6c:ea:1f:37:12:c6:0a:6f:06:d3:97:29:4b:3c:6c:
                    65:fe:7d:e4:ad:d6:6f:3a:2d:bf:6e:f2:0b:35:1f:
                    7a:6b:3e:36:a3:dd:75:bc:97:f8:e7:7c:83:14:81:
                    e1:9b:68:ef:aa:59:da:55:cc:c9:a0:8a:f0:a5:d3:
                    e7:16:b9:ed:9d:08:1f:a2:de:41:49:e6:19:c7:58:
                    a6:a1:c8:3b:9b:2d:2c:7a:7d:2b:72:88:96:ad:9c:
                    8c:a5:e2:c1:a3:84:c0:82:af:71:20:5e:cd:0d:2c:
                    49:5b:97:78:ed:c4:14:d4:f1:a7:a9:79:b7:76:53:
                    56:db:38:d9:a1:a0:dd:df:5b:41:5c:a9:f0:dd:ee:
                    63:fe:9f:bb:d8:56:46:75:06:87:bb:d6:29:27:b7:
                    28:83:6b:59:8c:0d:ff:b3:6d:59:71:85:b7:18:68:
                    e5:7c:c9:5a:e2:c8:dc:a5:15:f1:27:3a:1e:8f:d0:
                    a9:b1:38:45:6e:57:b4:a2:30:08:70:af:59:0c:ec:
                    30:74:1a:17:77:f8:4a:c3:5d:61:18:44:80:a4:96:
                    ef:60:a3:6d:70:a6:b4:91:e4:6c:dc:9d:76:79:12:
                    6b:6d:2d:9d:ae:c3:fd:b3:5c:72:a3:cd:df:fd:5c:
                    60:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5D:AB:25:6A:39:60:18:85:79:34:0F:E3:7C:5C:64:8B:E9:69:D6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/627787BAFC3B11F0884819EBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:d0:dc:2a:82:1a:42:86:0f:a6:0d:d3:36:b5:6e:3c:53:4b:
         33:89:19:51:e3:9d:73:54:1c:c7:22:70:32:0c:5d:1b:a0:b6:
         06:fe:dc:79:67:5a:a9:53:ea:42:63:22:3e:38:2d:67:a9:d7:
         c9:65:f3:ab:41:5a:d5:18:97:53:ae:2b:df:22:85:e4:42:ef:
         70:21:56:3f:5d:90:4c:fd:44:81:41:b9:81:94:18:39:d0:e9:
         e6:4e:49:5a:01:c0:36:2e:55:76:3e:c5:1e:e9:e2:ea:d8:c2:
         c9:84:d2:20:05:cf:c8:d8:49:3a:01:19:9b:cf:0b:a4:93:8f:
         75:c0:8c:12:6f:62:90:7d:01:bb:4c:12:1f:cb:25:92:e1:47:
         6c:ed:33:c8:0d:62:63:ab:a4:3e:0f:65:fa:b1:99:6d:96:b6:
         c8:5e:90:42:2d:82:6f:ed:01:55:0e:48:90:25:46:54:f4:41:
         29:53:5c:fa:e3:91:2f:0d:46:60:42:69:8e:02:68:63:38:a9:
         44:24:82:fd:a1:38:89:32:f9:ff:a1:dc:b1:ae:7d:26:71:06:
         f7:83:19:e2:33:99:76:c3:7a:a0:9d:19:24:97:3e:a3:72:bd:
         78:fd:60:df:89:2a:e0:27:4f:c3:b4:2f:61:4a:6c:a0:98:7d:
         e3:c9:34:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 11:57:37 2026 by rpki-client