This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A26EB5D4FCE811F0B1889B96DAE4EC9C.roa
File:                     A26EB5D4FCE811F0B1889B96DAE4EC9C.roa (raw, json)
Hash identifier:          uQS8O/xLg9dgwXVGXgHHA4aaYB/LXbJ0UYW5H6sFOiQ=
Subject key identifier:   DE:F3:0D:7B:33:EF:58:8E:82:BF:2A:32:8E:DB:01:2D:D3:0B:3B:5E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019A84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A26EB5D4FCE811F0B1889B96DAE4EC9C.roa
Signing time:             Thu 29 Jan 2026 08:00:54 +0000
ROA not before:           Thu 29 Jan 2026 08:00:49 +0000
ROA not after:            Sat 07 Mar 2026 08:00:49 +0000
asID:                     395886
IP address blocks:        156.238.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Feb 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105092 (0x19a84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 29 08:00:49 2026 GMT
            Not After : Mar  7 08:00:49 2026 GMT
        Subject: CN=697b13b6-391f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:48:ae:cc:33:cd:ba:b3:1a:3b:cc:d0:60:
                    ae:40:8b:99:a6:9d:7f:12:df:dd:e4:29:e0:84:a4:
                    39:72:8f:f7:68:15:fd:32:56:44:cc:62:07:24:7c:
                    78:cf:49:41:52:22:aa:34:2d:74:52:e6:d3:9e:3a:
                    c6:3b:2d:b6:64:ab:e6:6f:11:84:ad:3a:74:d5:f4:
                    8c:3c:1a:7a:82:20:ad:da:c6:8a:77:c6:8d:d2:97:
                    b5:2a:15:fb:cd:07:7c:07:c6:b2:c6:40:37:b0:51:
                    68:31:42:62:0e:6f:f5:4b:1a:52:cd:67:7d:4c:07:
                    fd:2f:3f:86:87:8a:2f:66:6a:b9:04:74:19:44:4e:
                    30:8c:66:5d:6a:5b:09:9b:7d:55:90:f9:71:24:22:
                    23:2e:f9:f0:f3:7d:61:f4:e7:f2:bd:3e:ca:60:6c:
                    a7:9c:56:5d:cd:2f:ea:e2:c4:38:57:ab:7b:08:f6:
                    49:0e:28:9f:30:ac:49:9d:1a:ce:4b:80:b3:38:9e:
                    91:05:0d:63:eb:58:77:de:3c:0d:71:7c:d4:e3:e7:
                    67:7d:c0:ea:87:fb:29:46:51:8a:64:87:6a:48:82:
                    1e:92:64:ce:a3:d9:43:49:f1:e2:bc:37:03:46:84:
                    d8:91:20:1a:c0:57:40:97:73:3e:bc:fd:69:1b:60:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F3:0D:7B:33:EF:58:8E:82:BF:2A:32:8E:DB:01:2D:D3:0B:3B:5E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A26EB5D4FCE811F0B1889B96DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:be:4c:68:d4:ee:12:a7:a6:68:d5:04:df:c9:16:47:d0:
         f5:09:33:02:df:bd:56:00:ae:cb:ee:9c:1c:4a:c2:ba:6b:82:
         15:c2:37:ac:8e:5c:70:52:e4:18:40:42:49:4d:1e:c3:a2:9f:
         32:c4:7a:ad:7c:00:5e:20:90:05:dd:31:41:0c:de:ab:c4:7e:
         19:1f:f6:66:44:fb:29:2c:0a:55:55:00:ce:56:ac:9d:7a:b0:
         2f:1d:6c:48:90:fa:14:51:53:68:a4:18:dd:d2:99:ea:82:4d:
         19:1f:63:4a:6a:01:79:2a:eb:64:71:83:a1:c1:45:43:0e:2d:
         fa:7b:d4:67:6a:ab:1b:04:f1:4d:7f:76:5b:cf:c6:72:8a:ed:
         c4:70:e8:d8:c8:9c:ca:27:e9:4f:d8:b1:19:f9:b2:ad:85:c2:
         bf:6d:82:ba:26:83:8f:34:a3:47:98:c0:2c:5d:d2:2f:c5:6e:
         58:8c:ea:0b:e8:b5:b2:0b:7a:b8:48:fd:fd:38:f0:93:10:14:
         12:f0:8e:1b:05:8f:65:11:28:09:cb:4f:53:f7:b3:7c:84:2c:
         c6:59:a7:f8:50:92:10:47:9b:d9:bb:cd:6b:d2:f8:3d:9a:6d:
         db:f7:43:16:9c:5c:4f:22:0b:09:6a:3b:29:54:3d:43:fe:f5:
         5b:2e:62:dd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZqEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTI5MDgwMDQ5WhcNMjYwMzA3MDgwMDQ5WjAYMRYw
FAYDVQQDEw02OTdiMTNiNi0zOTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArZ1IrswzzbqzGjvM0GCuQIuZpp1/Et/d5CnghKQ5co/3aBX9MlZEzGIH
JHx4z0lBUiKqNC10UubTnjrGOy22ZKvmbxGErTp01fSMPBp6giCt2saKd8aN0pe1
KhX7zQd8B8ayxkA3sFFoMUJiDm/1SxpSzWd9TAf9Lz+Gh4ovZmq5BHQZRE4wjGZd
alsJm31VkPlxJCIjLvnw831h9OfyvT7KYGynnFZdzS/q4sQ4V6t7CPZJDiifMKxJ
nRrOS4CzOJ6RBQ1j61h33jwNcXzU4+dnfcDqh/spRlGKZIdqSIIekmTOo9lDSfHi
vDcDRoTYkSAawFdAl3M+vP1pG2AMSQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN7z
DXsz71iOgr8qMo7bAS3TCzteMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMjZFQjVENEZDRTgxMUYwQjE4ODlCOTZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO7gMA0GCSqGSIb3DQEBCwUA
A4IBAQADP75MaNTuEqemaNUE38kWR9D1CTMC371WAK7L7pwcSsK6a4IVwjesjlxw
UuQYQEJJTR7Dop8yxHqtfABeIJAF3TFBDN6rxH4ZH/ZmRPspLApVVQDOVqyderAv
HWxIkPoUUVNopBjd0pnqgk0ZH2NKagF5KutkcYOhwUVDDi36e9RnaqsbBPFNf3Zb
z8Zyiu3EcOjYyJzKJ+lP2LEZ+bKthcK/bYK6JoOPNKNHmMAsXdIvxW5YjOoL6LWy
C3q4SP39OPCTEBQS8I4bBY9lESgJy09T97N8hCzGWaf4UJIQR5vZu81r0vg9mm3b
90MWnFxPIgsJajspVD1D/vVbLmLd
-----END CERTIFICATE-----
Generated at Sun Feb 8 04:51:15 2026 by rpki-client