This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/845DA81AE97011F08A78BCF3DAE4EC9C.roa
File:                     845DA81AE97011F08A78BCF3DAE4EC9C.roa (raw, json)
Hash identifier:          3vvN7eR7OV6Ploka5cfouf7aHc58OOkf1r6QudxHC+U=
Subject key identifier:   86:51:1A:2B:E0:A8:7B:95:79:50:2D:2D:F3:40:9D:FF:E7:F0:C6:BF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01943B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/845DA81AE97011F08A78BCF3DAE4EC9C.roa
Signing time:             Sun 04 Jan 2026 13:23:12 +0000
ROA not before:           Sun 04 Jan 2026 13:23:07 +0000
ROA not after:            Tue 10 Feb 2026 13:23:07 +0000
asID:                     141159
IP address blocks:        156.233.224.0/24 maxlen: 24
                          156.233.225.0/24 maxlen: 24
                          156.233.230.0/24 maxlen: 24
                          156.233.231.0/24 maxlen: 24
                          156.233.236.0/22 maxlen: 24
                          156.233.236.0/24 maxlen: 24
                          156.233.237.0/24 maxlen: 24
                          156.233.238.0/24 maxlen: 24
                          156.233.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103483 (0x1943b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  4 13:23:07 2026 GMT
            Not After : Feb 10 13:23:07 2026 GMT
        Subject: CN=695a69c0-0dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:d7:1c:9d:12:b4:df:ef:e2:23:99:14:0f:
                    91:85:58:45:77:86:7a:c8:12:b3:db:38:dc:a0:d2:
                    4e:3c:65:70:cb:88:56:ca:35:e2:a7:3c:55:2f:3c:
                    84:e9:3b:7e:85:8c:27:85:58:c7:27:4d:d1:8c:73:
                    b7:83:e6:97:aa:bc:f6:c8:73:0a:ed:70:0e:e0:ed:
                    b6:de:d1:2a:8f:fb:48:0b:61:f8:21:26:f0:be:ee:
                    3d:b3:a1:8e:98:8d:95:34:3f:48:e8:e9:3f:21:19:
                    f2:dc:7b:31:1c:85:1a:dd:72:cd:48:02:7c:1a:ae:
                    a4:fa:d5:7a:e3:d5:ee:78:06:a9:bc:51:3f:d7:fa:
                    63:ba:61:d0:67:e5:50:a9:6e:b4:2d:58:64:03:ba:
                    6e:76:98:c9:3a:e9:da:ce:b6:3b:43:57:d8:68:54:
                    b8:98:e1:f0:05:f9:b8:dd:4f:c7:8d:b4:f9:bc:76:
                    07:04:2a:fa:87:bb:20:a8:56:ae:0f:4d:da:17:a1:
                    46:03:95:6e:75:cf:54:85:83:23:88:ff:de:01:e0:
                    35:e4:c0:0f:5d:29:50:9d:49:c8:6d:f5:8b:ba:84:
                    ac:bd:f5:67:ad:40:9f:24:06:56:dd:82:c7:39:51:
                    c8:5f:38:77:1a:fe:6f:9b:5b:93:4b:62:64:e1:92:
                    e4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:51:1A:2B:E0:A8:7B:95:79:50:2D:2D:F3:40:9D:FF:E7:F0:C6:BF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/845DA81AE97011F08A78BCF3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.224.0/23
                  156.233.230.0/23
                  156.233.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:05:be:f3:b4:06:4d:6b:be:e8:e8:5a:16:a4:aa:15:7e:a2:
         b9:6a:d7:59:4e:0d:2e:48:29:19:99:b4:99:d7:a0:8b:bb:05:
         71:37:71:51:25:2a:63:07:e5:9a:4e:22:5c:88:3f:1d:b7:02:
         b4:df:55:18:81:b7:02:48:72:10:4a:2f:eb:a7:90:3c:95:3a:
         bf:06:61:77:27:52:43:9a:6b:4f:5a:18:4c:e0:64:12:1a:83:
         8e:36:85:6a:00:5f:23:5a:21:ed:be:77:fa:12:60:1c:78:86:
         11:09:f9:47:81:30:46:2c:f9:e7:0d:57:df:ee:b8:e8:6f:c9:
         7b:e4:c9:bf:a8:43:c1:a8:b1:92:50:d9:00:86:ca:c1:13:65:
         7b:dc:17:59:16:cf:c2:51:04:f9:47:f2:fd:95:96:06:19:53:
         ee:37:57:c4:c5:e2:e7:c8:c7:41:05:92:a7:d5:f6:92:d9:be:
         e8:66:0d:5e:bc:a7:4c:81:7b:e3:54:d4:d4:7d:92:5a:e4:00:
         d0:0a:0f:03:5d:a2:56:94:c2:e7:0b:60:36:ff:2b:99:0f:a2:
         ad:73:2f:71:1d:a8:af:33:23:71:d2:f5:ca:b4:7e:3d:5b:fa:
         90:6a:ea:5c:5a:7f:0e:6a:bd:0b:30:d9:e6:cd:dd:18:29:c2:
         b1:68:37:65
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAZQ7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTA0MTMyMzA3WhcNMjYwMjEwMTMyMzA3WjAYMRYw
FAYDVQQDEw02OTVhNjljMC0wZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoUHXHJ0StN/v4iOZFA+RhVhFd4Z6yBKz2zjcoNJOPGVwy4hWyjXipzxV
LzyE6Tt+hYwnhVjHJ03RjHO3g+aXqrz2yHMK7XAO4O223tEqj/tIC2H4ISbwvu49
s6GOmI2VND9I6Ok/IRny3HsxHIUa3XLNSAJ8Gq6k+tV649XueAapvFE/1/pjumHQ
Z+VQqW60LVhkA7pudpjJOunazrY7Q1fYaFS4mOHwBfm43U/HjbT5vHYHBCr6h7sg
qFauD03aF6FGA5Vudc9UhYMjiP/eAeA15MAPXSlQnUnIbfWLuoSsvfVnrUCfJAZW
3YLHOVHIXzh3Gv5vm1uTS2Jk4ZLkrwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFIZR
GivgqHuVeVAtLfNAnf/n8Ma/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NDVEQTgxQUU5NzAxMUYwOEE3OEJDRjNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnOngAwQBnOnmAwQCnOnsMA0G
CSqGSIb3DQEBCwUAA4IBAQAlBb7ztAZNa77o6FoWpKoVfqK5atdZTg0uSCkZmbSZ
16CLuwVxN3FRJSpjB+WaTiJciD8dtwK031UYgbcCSHIQSi/rp5A8lTq/BmF3J1JD
mmtPWhhM4GQSGoOONoVqAF8jWiHtvnf6EmAceIYRCflHgTBGLPnnDVff7rjob8l7
5Mm/qEPBqLGSUNkAhsrBE2V73BdZFs/CUQT5R/L9lZYGGVPuN1fExeLnyMdBBZKn
1faS2b7oZg1evKdMgXvjVNTUfZJa5ADQCg8DXaJWlMLnC2A2/yuZD6Ktcy9xHaiv
MyNx0vXKtH49W/qQaupcWn8Oar0LMNnmzd0YKcKxaDdl
-----END CERTIFICATE-----
Generated at Thu Jan 8 11:56:49 2026 by rpki-client