This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B103C08E63011F08521EAF1DAE4EC9C.roa
File:                     6B103C08E63011F08521EAF1DAE4EC9C.roa (raw, json)
Hash identifier:          jle6z33HhHxV/0XtaoqJoT9MUUtBRlV/QuO5e5IUFpo=
Subject key identifier:   AC:A4:5F:57:D2:D2:BC:48:E8:3C:20:20:06:BB:AF:78:6F:C7:CE:85
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019356
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B103C08E63011F08521EAF1DAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 10:06:48 +0000
ROA not before:           Wed 31 Dec 2025 10:06:43 +0000
ROA not after:            Thu 15 Jan 2026 10:06:43 +0000
asID:                     21859
IP address blocks:        156.239.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103254 (0x19356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 31 10:06:43 2025 GMT
            Not After : Jan 15 10:06:43 2026 GMT
        Subject: CN=6954f5b8-023a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:61:db:4a:9d:14:95:9a:8b:ac:84:a2:6d:
                    59:01:b2:2e:b8:3d:0e:5b:bd:ba:14:a2:69:71:c2:
                    e3:82:50:27:ef:74:24:d2:10:01:38:00:41:90:b9:
                    4e:7f:06:7d:f9:18:eb:d8:0b:fb:35:ec:0e:91:ef:
                    f9:ef:17:d4:11:23:84:3b:b9:af:61:94:87:46:06:
                    34:da:fd:fe:12:c2:52:83:58:b2:c2:de:cb:04:66:
                    d0:9c:c5:73:76:19:82:1a:f6:36:e9:45:bc:04:22:
                    78:62:e1:0a:12:20:90:64:51:98:57:23:9b:61:71:
                    74:31:7e:bc:92:54:34:56:e3:ac:00:27:c8:22:73:
                    89:cf:f1:48:b8:f9:1d:ec:e6:e5:05:7e:20:05:61:
                    5a:bb:c4:7a:b2:df:77:5c:de:82:27:d9:bc:3b:6a:
                    77:4a:97:a6:d3:d5:22:00:5d:e0:8e:04:23:ee:b2:
                    06:b2:73:8f:25:56:eb:c0:14:7f:4c:ae:0f:6a:89:
                    9d:80:85:25:ed:9b:74:b5:f7:7e:01:5d:b2:85:27:
                    cd:3f:26:d1:5e:9b:cc:12:49:82:8a:15:af:af:33:
                    fa:11:a3:3e:86:d1:4d:76:ba:11:a3:cf:20:a2:ab:
                    ec:9b:ed:0f:ef:ad:c2:df:4d:1a:61:a0:29:18:38:
                    14:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A4:5F:57:D2:D2:BC:48:E8:3C:20:20:06:BB:AF:78:6F:C7:CE:85
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B103C08E63011F08521EAF1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:01:7f:0b:1d:db:67:63:bd:c8:66:e9:02:14:9a:55:fc:b0:
         86:0f:6a:23:d7:99:08:66:7e:58:fc:38:87:91:3e:96:4b:0c:
         1c:ea:ea:b9:67:ac:c4:da:46:71:aa:45:ed:61:d0:f6:5c:10:
         2c:67:05:ad:16:ef:20:0d:06:2b:38:3e:69:6a:46:3b:65:57:
         64:2e:6b:cb:5d:84:77:aa:dd:6c:ec:6a:71:e2:7b:4b:ad:9f:
         af:f4:7b:b3:cf:e2:85:d8:3d:8f:4c:04:00:c3:4c:fc:3d:33:
         2a:55:37:ca:5c:2b:cf:0f:c3:63:75:f8:0c:58:3c:6a:9d:05:
         2d:08:25:c8:7a:64:dc:3f:63:fb:5f:d3:fa:0e:60:2e:4a:c1:
         e4:57:fb:51:68:60:04:7f:8b:a7:5e:07:f3:b6:ac:c2:9d:e1:
         c0:0e:2d:a8:44:ea:e0:11:1c:44:79:8d:26:04:43:33:01:d6:
         09:db:c0:61:6e:2b:76:25:19:f3:2c:b9:51:3c:11:e2:2b:45:
         32:66:98:8e:ee:28:3a:9a:66:7a:62:1b:59:57:ce:79:12:da:
         e1:55:a0:74:d0:f4:15:15:e6:de:0e:0c:c2:46:ad:06:62:de:
         90:45:6d:7d:3f:fd:2d:ab:9d:8e:e0:47:37:4f:71:4a:34:9b:
         fa:76:0d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:25:04 2026 by rpki-client