This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D4A5CD2F20B11F09ABE4FE7DAE4EC9C.roa
File:                     7D4A5CD2F20B11F09ABE4FE7DAE4EC9C.roa (raw, json)
Hash identifier:          dK+ozvH232C2fb8hPUdb4SBPxI3eOL69/TzH2Z5vr1Y=
Subject key identifier:   0B:5A:6C:FF:AB:38:E3:61:85:28:96:14:9B:7B:F8:B7:8E:EB:95:17
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01970E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D4A5CD2F20B11F09ABE4FE7DAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 12:12:41 +0000
ROA not before:           Thu 15 Jan 2026 12:12:37 +0000
ROA not after:            Thu 22 Jan 2026 12:12:37 +0000
asID:                     152705
IP address blocks:        156.239.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104206 (0x1970e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 15 12:12:37 2026 GMT
            Not After : Jan 22 12:12:37 2026 GMT
        Subject: CN=6968d9b9-f8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:8e:1d:83:ca:ce:aa:0c:e6:48:46:62:81:
                    1c:1a:df:f6:6d:e3:34:3d:4f:e2:a3:c9:52:39:93:
                    aa:51:d5:86:36:16:31:fd:b2:4f:0c:f5:c0:83:78:
                    12:34:27:d3:37:b6:1d:b7:83:e5:8e:49:93:48:25:
                    3c:eb:d4:14:db:a6:d4:b9:e4:d3:05:1b:2b:ac:7e:
                    9d:f8:92:26:21:32:df:79:2a:b8:f2:8c:da:df:03:
                    4c:9d:8a:5c:e8:fa:5e:66:a3:11:5a:53:33:ab:68:
                    b8:3c:c0:a1:05:3a:94:da:07:a5:89:5e:df:3e:6e:
                    80:c6:13:10:cf:dc:42:a4:f7:be:58:be:78:58:38:
                    36:aa:6b:bd:ae:d8:ab:9f:51:ab:e8:aa:03:24:32:
                    80:3a:2d:6b:13:db:0a:f4:34:f3:ed:ab:7d:c6:e9:
                    85:33:b5:72:e3:d5:78:b7:b9:a7:19:a4:89:9d:35:
                    e1:7d:33:c4:64:47:ee:0b:f7:f7:e3:38:d5:86:03:
                    35:61:3d:05:34:d5:f0:2c:04:30:4c:79:5c:da:cd:
                    8c:50:e8:76:f7:05:e9:2c:75:54:d6:54:bb:27:f5:
                    51:51:6b:4e:bc:8b:66:87:3e:0a:a4:57:f5:c4:7a:
                    7f:b2:9d:e1:43:88:83:85:48:3c:60:82:96:10:12:
                    32:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5A:6C:FF:AB:38:E3:61:85:28:96:14:9B:7B:F8:B7:8E:EB:95:17
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D4A5CD2F20B11F09ABE4FE7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:b5:59:79:3c:83:70:c3:a2:f3:dc:b5:e8:5c:1a:b6:11:29:
         da:07:81:88:ec:a9:a4:6b:b8:0e:78:aa:01:08:e3:18:fb:85:
         14:32:69:d3:c9:55:ef:a3:91:5a:11:25:ac:4b:25:1d:ce:b7:
         a9:b1:56:d7:85:5d:b3:92:6f:18:e6:36:c0:28:08:66:91:be:
         2f:6a:e4:85:61:fd:37:f6:5b:a3:b2:e1:b9:f2:1f:d5:07:46:
         10:f4:bc:73:1f:e1:b0:d9:a2:06:45:2f:45:e2:d3:fa:91:0c:
         77:b4:09:fe:0d:d0:4b:e7:7e:e1:a5:65:d2:73:f6:42:7d:91:
         2d:43:f5:41:3c:8e:a3:d2:68:83:63:d5:98:c7:e9:5a:27:ad:
         b7:27:17:5e:e3:eb:02:0d:14:d8:85:9f:9f:ca:ee:5e:a4:54:
         44:92:23:a9:6d:62:e9:7a:2a:94:8e:09:9f:9f:ff:88:34:21:
         24:d8:86:64:91:14:cc:b4:7e:7c:e4:0d:b1:19:7d:79:1f:83:
         cd:e9:b2:4b:14:32:a0:8d:c7:81:0b:9a:66:52:a2:f3:86:ad:
         d7:f9:e5:8b:f8:64:9a:ca:a6:c8:d6:1f:d5:86:76:d0:62:0a:
         03:5d:fb:0e:50:0c:2d:1f:c1:28:d9:39:79:5b:d8:c2:bc:0e:
         83:bf:3a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:44 2026 by rpki-client