This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9261C144F12711F0ADD063F0DAE4EC9C.roa
File:                     9261C144F12711F0ADD063F0DAE4EC9C.roa (raw, json)
Hash identifier:          IDNG3d+wyC+xU813kOI6sirybkzb4RUZ9E4S4vo/GnI=
Subject key identifier:   17:59:C4:92:F1:E9:DB:26:0B:2C:E6:C1:87:CC:00:3A:EF:84:57:B2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0196D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9261C144F12711F0ADD063F0DAE4EC9C.roa
Signing time:             Wed 14 Jan 2026 09:01:11 +0000
ROA not before:           Wed 14 Jan 2026 09:01:07 +0000
ROA not after:            Wed 25 Feb 2026 09:01:07 +0000
asID:                     61112
IP address blocks:        156.231.139.0/24 maxlen: 24
                          156.246.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104151 (0x196d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 14 09:01:07 2026 GMT
            Not After : Feb 25 09:01:07 2026 GMT
        Subject: CN=69675b57-24b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:1a:65:e9:68:01:89:04:29:98:a5:c7:4a:
                    f2:d3:4c:a5:29:83:42:1e:2c:9b:50:ee:4b:5a:1f:
                    b1:f5:e2:5d:dc:f6:52:17:a3:38:54:0f:13:b8:55:
                    cb:6e:bb:a8:12:04:ef:da:e7:16:f6:6b:c4:72:56:
                    61:e4:d4:2e:d2:e7:59:0e:ff:61:1b:33:70:2f:78:
                    f9:8e:4c:e2:8b:69:96:dd:dc:46:d6:88:84:48:83:
                    a8:a4:a3:a8:96:36:65:d3:b8:4f:78:30:9c:bc:6f:
                    4b:3b:29:7f:97:28:00:77:ed:ac:36:fb:9f:8c:d0:
                    6f:74:35:41:22:d4:ad:02:24:4d:fe:05:1e:3d:4a:
                    d0:7a:f7:5a:36:41:87:20:3c:91:76:50:41:ad:98:
                    16:bf:5c:01:98:e6:e8:8a:4c:6e:8b:aa:36:55:01:
                    b4:7a:3c:01:15:d8:1a:66:c8:23:f7:9e:47:43:32:
                    6a:d1:68:4b:d1:8d:fe:c4:b7:2f:1e:da:aa:41:27:
                    13:1b:31:ad:5a:b7:76:85:b7:1d:4d:49:02:87:d0:
                    7b:8a:fb:26:c9:f3:69:2c:e1:77:3a:8c:4f:c0:14:
                    45:c4:12:89:c4:cb:6c:5c:75:75:e7:ff:ab:31:1f:
                    df:ac:0d:2a:e5:a2:13:78:cd:db:2e:26:8b:07:51:
                    59:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:59:C4:92:F1:E9:DB:26:0B:2C:E6:C1:87:CC:00:3A:EF:84:57:B2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9261C144F12711F0ADD063F0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.139.0/24
                  156.246.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:6e:11:a5:b3:eb:83:81:90:9a:41:9a:97:46:df:eb:a8:4d:
         f4:0b:79:71:8e:2e:ff:2e:f2:6a:a2:64:ff:84:9c:27:cc:d7:
         43:63:71:81:6d:fe:cf:92:e8:59:b7:4e:fc:19:bb:32:0e:f8:
         8d:5a:0c:4e:8a:a1:3e:01:2a:07:36:70:e5:6d:80:2d:e7:76:
         a6:a9:f8:b9:87:51:67:34:94:3e:09:59:95:9c:61:80:78:54:
         dd:98:7b:c7:73:2e:08:da:46:39:fe:88:3e:00:b1:0b:ed:46:
         8c:24:53:42:79:60:9b:12:0c:61:ac:9b:19:8b:37:34:28:98:
         23:10:bc:5f:a2:a4:98:82:fe:d1:b0:03:96:65:05:20:89:c6:
         e2:c0:75:58:33:89:af:76:48:ab:ae:89:49:fb:4b:e8:34:52:
         33:23:dd:94:b6:b0:ea:e3:f1:c7:82:ab:98:82:ec:06:d5:a5:
         05:20:b2:29:d2:34:e3:a7:fa:06:26:76:2f:99:22:03:97:91:
         7e:4c:6e:e1:cc:9c:7b:56:39:ee:94:c6:20:13:d6:4c:28:ab:
         1c:4b:5a:e3:a7:3a:67:f7:6c:da:a4:b9:ed:18:14:2d:f5:56:
         64:3e:5e:c4:ac:50:da:9d:dc:3a:a8:13:1b:8c:94:f7:d0:d9:
         de:15:27:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:11 2026 by rpki-client