This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A26A366EACE11F0A44CB5E1DAE4EC9C.roa
File:                     6A26A366EACE11F0A44CB5E1DAE4EC9C.roa (raw, json)
Hash identifier:          h9PROE9jQ2lIn6yQpbaZFfIssF+FYuwQkmdGnzPeZQA=
Subject key identifier:   DE:8F:AB:0B:65:B7:F9:72:00:6D:3E:07:C0:D0:E0:09:55:68:64:03
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019484
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A26A366EACE11F0A44CB5E1DAE4EC9C.roa
Signing time:             Tue 06 Jan 2026 07:07:52 +0000
ROA not before:           Tue 06 Jan 2026 07:07:47 +0000
ROA not after:            Sun 18 Jan 2026 07:07:47 +0000
asID:                     274065
IP address blocks:        156.238.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 Jan 2026 07:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103556 (0x19484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  6 07:07:47 2026 GMT
            Not After : Jan 18 07:07:47 2026 GMT
        Subject: CN=695cb4c8-5c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:76:f4:74:ec:79:45:6b:4e:44:c0:13:48:
                    4d:9c:1a:cb:b7:02:21:5c:a3:e8:d7:a7:df:4c:ca:
                    25:af:0b:4c:2e:02:23:64:d4:38:68:05:2e:5d:de:
                    39:2e:1c:57:98:ec:35:fc:a5:7a:2c:4d:03:7e:42:
                    8d:7c:27:6d:c7:29:39:ad:4c:6c:91:c9:3e:5c:87:
                    d0:28:83:89:1a:55:30:24:cd:5c:d6:9a:76:0a:82:
                    6b:01:30:06:1a:a2:5e:f7:90:b0:80:39:04:4f:8b:
                    8a:f1:0c:df:58:fd:d9:f3:cd:25:29:c8:23:75:a6:
                    43:84:28:af:d2:1f:bb:ab:a3:cf:ff:77:69:0c:74:
                    35:d8:e8:9e:db:e2:36:51:0c:6c:0c:6f:6b:6e:d8:
                    ae:8e:b7:47:bc:f2:8d:cb:84:d4:c6:ca:20:61:11:
                    3c:20:00:74:ff:7b:b4:6d:6b:54:7e:ba:63:30:9f:
                    4a:f8:29:04:75:bb:0b:89:f6:28:8f:58:6a:38:65:
                    26:d0:46:10:2c:11:fe:74:77:4e:b9:82:70:a7:f6:
                    14:a7:f7:3c:b1:da:50:49:c9:00:bf:f5:4b:6e:35:
                    4e:95:3c:3a:3e:7e:b2:7e:87:21:bc:9b:96:df:0d:
                    c5:8e:c3:1b:97:75:8a:86:db:7b:cb:12:40:22:ef:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8F:AB:0B:65:B7:F9:72:00:6D:3E:07:C0:D0:E0:09:55:68:64:03
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A26A366EACE11F0A44CB5E1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:6e:da:d1:1e:18:ec:b0:aa:78:ee:12:15:16:db:48:04:e3:
         7a:24:50:ab:82:4a:ac:cd:36:f4:44:04:07:5e:2a:d8:bf:bb:
         78:4b:50:f9:4e:b8:35:52:b1:57:94:99:81:ee:60:21:54:8f:
         0e:0f:3f:a5:2a:1e:ce:2b:f0:51:b6:16:19:d4:23:b0:6b:e8:
         d0:ae:f8:2c:4f:e7:62:4a:9d:38:5a:c6:e2:70:de:6d:52:d4:
         50:1c:4e:ed:c1:1e:66:fc:f8:db:af:35:da:25:40:f2:98:1d:
         b1:87:ba:cb:3f:45:3d:90:fd:0c:dc:6f:be:ec:ce:a3:5d:b1:
         c5:44:e4:46:a2:07:71:1d:5c:98:f9:98:62:6b:6e:40:81:ce:
         ee:a4:18:e3:8d:54:50:fb:93:eb:f1:37:ed:45:5c:f0:a8:f3:
         40:45:2f:cb:1c:a9:83:40:09:a9:1d:48:58:80:53:a5:a1:7b:
         e6:00:14:e3:9c:94:ef:5d:a5:6d:86:e7:a4:66:bc:00:7d:e8:
         66:21:b7:79:bb:f7:c6:e5:63:b8:83:2b:1d:ff:2e:89:a8:de:
         6d:62:29:6f:72:21:9d:72:a9:3d:58:fb:dd:f5:e8:49:69:eb:
         79:54:a7:73:b6:1e:3e:4f:a2:b8:47:a6:c5:ba:8b:8e:89:19:
         36:05:43:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:31 2026 by rpki-client