This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A39D590EF9511F08DEBE7C8DAE4EC9C.roa
File:                     7A39D590EF9511F08DEBE7C8DAE4EC9C.roa (raw, json)
Hash identifier:          BTFBlSfEisUIwzQu7kL9F+eoUIBFLH/MHRYdDYeJoPE=
Subject key identifier:   C1:27:10:B5:94:60:4F:7E:B2:63:55:0A:F4:6C:2C:92:0F:9A:8F:02
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019640
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A39D590EF9511F08DEBE7C8DAE4EC9C.roa
Signing time:             Mon 12 Jan 2026 09:02:53 +0000
ROA not before:           Mon 12 Jan 2026 09:02:48 +0000
ROA not after:            Sun 05 Apr 2026 09:02:48 +0000
asID:                     149440
IP address blocks:        156.225.64.0/24 maxlen: 24
                          156.227.0.0/24 maxlen: 24
                          156.235.89.0/24 maxlen: 24
                          156.236.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104000 (0x19640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 12 09:02:48 2026 GMT
            Not After : Apr  5 09:02:48 2026 GMT
        Subject: CN=6964b8bd-19e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:05:7c:e0:5e:70:a2:b5:0a:ee:ed:54:7c:
                    a1:10:d7:51:ae:2c:16:42:ac:d0:25:5b:df:e3:c5:
                    27:58:73:4a:74:7f:cd:68:e3:a9:e4:a8:83:eb:00:
                    d8:8a:a4:5f:9e:b5:42:50:b0:1b:6e:e9:28:4a:e5:
                    f9:cd:29:50:31:61:0c:1d:e0:0f:e4:db:50:df:78:
                    19:17:b0:a2:57:38:2f:10:0a:bf:d2:73:9d:c3:00:
                    08:f5:06:5e:95:ac:1d:3c:26:b7:19:06:5a:6e:80:
                    2d:d9:ae:d1:e1:d3:07:b1:2c:06:77:d8:13:65:5d:
                    a9:7b:51:8b:36:39:20:10:eb:28:2e:1f:1d:41:ad:
                    50:59:50:9e:16:fd:47:84:02:c5:6c:f5:87:15:17:
                    a3:17:a5:3d:6d:cd:49:7b:49:82:33:61:b4:3a:7d:
                    55:e2:e4:ee:cf:81:82:c9:38:31:13:fc:38:22:40:
                    1e:f2:77:51:7f:db:30:5e:e6:32:7d:f1:cf:a1:e2:
                    eb:df:57:9b:f8:a7:ab:6e:fa:0a:8e:19:d6:9b:f5:
                    17:b0:df:ea:f9:01:e6:1b:23:2b:4c:23:f3:ba:e3:
                    4c:ae:7c:6f:eb:6c:16:1c:88:48:b1:53:d8:25:68:
                    4f:39:46:9d:eb:45:e1:74:cc:74:80:72:63:ed:7d:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:27:10:B5:94:60:4F:7E:B2:63:55:0A:F4:6C:2C:92:0F:9A:8F:02
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A39D590EF9511F08DEBE7C8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.64.0/24
                  156.227.0.0/24
                  156.235.89.0/24
                  156.236.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:1a:f8:c7:31:60:f7:5b:b1:d0:f9:7a:1e:9b:6c:48:42:f0:
         a8:66:46:c6:f0:cd:1c:48:73:e2:1c:eb:91:81:87:72:2d:e6:
         fe:87:9c:ab:57:d5:41:f5:70:b9:ce:9b:63:5a:d4:1a:5c:0d:
         f7:bd:b3:bf:06:83:e9:2a:84:0d:fc:aa:67:7d:e5:d5:7b:a4:
         3d:1d:7f:96:c7:b1:6e:56:8a:5d:6c:8f:51:ca:b6:7d:88:a0:
         9f:e8:46:c6:31:9c:67:3c:5f:c6:e4:74:01:d4:7c:9b:19:36:
         6b:de:ed:4a:a9:56:c9:30:26:29:de:ec:cb:a5:bd:13:0e:91:
         6f:7e:c8:2a:94:6d:19:60:b3:18:d8:0a:08:0a:cc:0f:59:02:
         fd:07:2f:9d:da:53:9a:05:aa:f0:53:2b:a8:52:ef:18:53:6d:
         43:12:bc:cb:39:74:73:c2:1f:df:de:e5:42:54:12:88:a5:33:
         16:46:02:92:85:1e:af:67:15:0b:97:f3:cd:c0:fd:3a:7a:cd:
         d5:13:90:fb:27:e3:29:a3:bf:07:e3:bf:14:7f:0c:4f:41:53:
         e5:fb:41:44:c4:c9:f6:2d:3f:3e:26:c6:6f:45:da:75:4c:02:
         4e:fc:07:ff:32:e1:13:b8:ad:0b:0c:63:00:05:b9:76:6d:03:
         e1:9f:1b:97
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAZZAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTEyMDkwMjQ4WhcNMjYwNDA1MDkwMjQ4WjAYMRYw
FAYDVQQDEw02OTY0YjhiZC0xOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAphwFfOBecKK1Cu7tVHyhENdRriwWQqzQJVvf48UnWHNKdH/NaOOp5KiD
6wDYiqRfnrVCULAbbukoSuX5zSlQMWEMHeAP5NtQ33gZF7CiVzgvEAq/0nOdwwAI
9QZelawdPCa3GQZaboAt2a7R4dMHsSwGd9gTZV2pe1GLNjkgEOsoLh8dQa1QWVCe
Fv1HhALFbPWHFRejF6U9bc1Je0mCM2G0On1V4uTuz4GCyTgxE/w4IkAe8ndRf9sw
XuYyffHPoeLr31eb+KerbvoKjhnWm/UXsN/q+QHmGyMrTCPzuuNMrnxv62wWHIhI
sVPYJWhPOUad60XhdMx0gHJj7X3ZhQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFMEn
ELWUYE9+smNVCvRsLJIPmo8CMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83QTM5RDU5MEVGOTUxMUYwOERFQkU3QzhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAnOFAAwQAnOMAAwQAnOtZAwQA
nOxMMA0GCSqGSIb3DQEBCwUAA4IBAQCGGvjHMWD3W7HQ+Xoem2xIQvCoZkbG8M0c
SHPiHOuRgYdyLeb+h5yrV9VB9XC5zptjWtQaXA33vbO/BoPpKoQN/KpnfeXVe6Q9
HX+Wx7FuVopdbI9RyrZ9iKCf6EbGMZxnPF/G5HQB1HybGTZr3u1KqVbJMCYp3uzL
pb0TDpFvfsgqlG0ZYLMY2AoICswPWQL9By+d2lOaBarwUyuoUu8YU21DErzLOXRz
wh/f3uVCVBKIpTMWRgKShR6vZxULl/PNwP06es3VE5D7J+Mpo78H478UfwxPQVPl
+0FExMn2LT8+JsZvRdp1TAJO/Af/MuETuK0LDGMABbl2bQPhnxuX
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:31 2026 by rpki-client