This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62C66F7CE6E911F0810EC9E3DAE4EC9C.roa
File:                     62C66F7CE6E911F0810EC9E3DAE4EC9C.roa (raw, json)
Hash identifier:          PTjFykGNL+NJKBKXY0iG3Yt5eJlpUs0bszE0i0YXTuA=
Subject key identifier:   B1:15:D0:02:B3:CD:2A:FB:D5:BA:87:4D:A4:9E:0E:F7:E6:BC:D0:67
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0193AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62C66F7CE6E911F0810EC9E3DAE4EC9C.roa
Signing time:             Thu 01 Jan 2026 08:10:51 +0000
ROA not before:           Thu 01 Jan 2026 08:10:46 +0000
ROA not after:            Thu 05 Feb 2026 08:10:46 +0000
asID:                     48031
IP address blocks:        156.236.22.0/24 maxlen: 24
                          156.236.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103338 (0x193aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  1 08:10:46 2026 GMT
            Not After : Feb  5 08:10:46 2026 GMT
        Subject: CN=69562c0b-8f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:50:6c:50:75:21:15:34:bc:1a:8a:b0:a5:8d:
                    5d:83:df:83:ec:ec:cc:21:fa:a1:a6:73:41:fa:98:
                    70:8a:e4:58:ff:39:28:93:5a:f7:dc:05:c1:10:9d:
                    a4:90:24:e2:6b:1f:56:ea:7e:2c:8b:b3:4f:17:e1:
                    fb:2f:a3:2c:b3:81:37:7c:a2:af:50:02:95:d3:6a:
                    9b:86:02:35:c3:d2:e2:c7:b3:ea:bd:cc:18:8f:c8:
                    e3:53:a4:29:9d:12:8b:7d:1a:bf:06:f4:e6:b3:77:
                    40:8f:b7:49:1d:a7:04:9e:4f:19:e6:1d:73:51:be:
                    10:cc:14:f7:ff:e6:3a:25:40:89:15:46:fe:17:26:
                    23:e2:38:4a:0d:c1:29:f4:cc:ba:1b:16:67:7d:09:
                    13:23:0a:61:f7:62:dd:62:6f:c7:78:aa:87:64:1d:
                    15:61:57:c1:73:f8:2a:6d:59:39:1d:0c:35:8d:11:
                    d8:b3:03:d9:54:93:03:68:6c:05:c4:1e:36:15:ab:
                    79:8b:51:6b:5b:42:98:14:f8:fd:cc:22:2f:7d:33:
                    02:2d:de:a2:7c:15:df:e8:15:4a:cc:fb:cb:44:bf:
                    91:5e:a0:be:c4:55:fb:26:ef:0f:06:34:63:18:c7:
                    4c:2e:de:e9:81:76:6a:98:5a:9b:c9:2f:45:50:d8:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:15:D0:02:B3:CD:2A:FB:D5:BA:87:4D:A4:9E:0E:F7:E6:BC:D0:67
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62C66F7CE6E911F0810EC9E3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:cf:08:3e:66:8d:ec:6f:84:b4:2a:1c:05:bc:76:c6:b9:2d:
         57:f4:c8:24:a4:b1:ca:22:40:2e:08:2a:91:86:ee:7c:ed:41:
         a0:6c:35:79:ff:8c:ec:9c:5a:8e:1a:a1:e8:39:50:bb:80:22:
         4c:d6:81:24:a3:64:5a:24:5e:f2:d8:a7:2f:64:e7:90:b2:8b:
         83:2c:66:b9:84:7b:b3:aa:ac:7b:56:ca:32:78:2d:a0:9b:4c:
         20:48:f9:89:cc:ce:40:26:c5:9c:99:de:c4:30:dc:bd:46:72:
         12:82:89:99:29:a6:a1:4d:8b:2e:f3:6e:ae:ab:e7:51:10:52:
         d7:c3:a7:9f:ac:25:0e:fb:51:7e:1a:cf:f6:03:bf:7f:36:7d:
         31:19:32:78:93:af:0e:3f:47:64:e9:f9:fc:68:3e:bf:69:1a:
         7a:94:93:1c:f4:67:99:2a:48:49:f7:17:94:19:4c:c8:74:14:
         e4:c5:1d:35:ea:79:b5:bf:08:22:7a:e4:65:2e:05:63:da:3d:
         44:a1:d1:d8:fd:b4:3e:58:44:6c:15:6d:cf:dd:29:38:af:5d:
         fd:e0:c5:c4:4b:65:1e:5e:86:78:31:11:f3:fb:58:cf:c8:95:
         a1:62:dd:da:f2:7b:47:b5:14:6f:98:fc:b3:a2:d3:1d:bf:a1:
         0e:df:8c:1d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZOqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTAxMDgxMDQ2WhcNMjYwMjA1MDgxMDQ2WjAYMRYw
FAYDVQQDEw02OTU2MmMwYi04ZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnlBsUHUhFTS8GoqwpY1dg9+D7OzMIfqhpnNB+phwiuRY/zkok1r33AXB
EJ2kkCTiax9W6n4si7NPF+H7L6Mss4E3fKKvUAKV02qbhgI1w9Lix7PqvcwYj8jj
U6QpnRKLfRq/BvTms3dAj7dJHacEnk8Z5h1zUb4QzBT3/+Y6JUCJFUb+FyYj4jhK
DcEp9My6GxZnfQkTIwph92LdYm/HeKqHZB0VYVfBc/gqbVk5HQw1jRHYswPZVJMD
aGwFxB42Fat5i1FrW0KYFPj9zCIvfTMCLd6ifBXf6BVKzPvLRL+RXqC+xFX7Ju8P
BjRjGMdMLt7pgXZqmFqbyS9FUNj/EwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLEV
0AKzzSr71bqHTaSeDvfmvNBnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MkM2NkY3Q0U2RTkxMUYwODEwRUM5RTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOwWMA0GCSqGSIb3DQEBCwUA
A4IBAQB5zwg+Zo3sb4S0KhwFvHbGuS1X9MgkpLHKIkAuCCqRhu587UGgbDV5/4zs
nFqOGqHoOVC7gCJM1oEko2RaJF7y2KcvZOeQsouDLGa5hHuzqqx7VsoyeC2gm0wg
SPmJzM5AJsWcmd7EMNy9RnISgomZKaahTYsu826uq+dREFLXw6efrCUO+1F+Gs/2
A79/Nn0xGTJ4k68OP0dk6fn8aD6/aRp6lJMc9GeZKkhJ9xeUGUzIdBTkxR016nm1
vwgieuRlLgVj2j1EodHY/bQ+WERsFW3P3Sk4r1394MXES2UeXoZ4MRHz+1jPyJWh
Yt3a8ntHtRRvmPyzotMdv6EO34wd
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:09 2026 by rpki-client