This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B22B7EA8E96511F08DE118B4DAE4EC9C.roa
File:                     B22B7EA8E96511F08DE118B4DAE4EC9C.roa (raw, json)
Hash identifier:          XUNliptq20pvyObraoZfBSxuTAdxoLhArZKbQF5IWdA=
Subject key identifier:   22:C0:08:77:AD:D4:54:B4:9A:0C:0E:64:21:BD:ED:E1:82:25:44:82
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01942D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B22B7EA8E96511F08DE118B4DAE4EC9C.roa
Signing time:             Sun 04 Jan 2026 12:05:44 +0000
ROA not before:           Sun 04 Jan 2026 12:05:39 +0000
ROA not after:            Tue 10 Feb 2026 12:05:39 +0000
asID:                     40779
IP address blocks:        156.233.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103469 (0x1942d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  4 12:05:39 2026 GMT
            Not After : Feb 10 12:05:39 2026 GMT
        Subject: CN=695a5798-220f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:8d:90:5f:4c:2c:c3:98:dc:c6:56:d0:b3:
                    64:0f:71:d4:8e:e5:fb:b8:77:d6:c5:36:a8:49:06:
                    9f:8b:60:43:d1:74:e5:a1:84:b1:1d:a2:f6:56:8e:
                    68:31:23:53:2d:54:1b:6e:0b:e9:8b:7b:ba:85:9a:
                    7a:a1:fb:df:16:ba:49:00:d2:4b:d3:c4:d0:ab:69:
                    57:b1:80:84:98:79:88:20:1b:3f:fc:f8:a9:9f:9f:
                    ea:a6:2e:dd:5d:19:e5:e8:f8:78:ec:6c:de:78:75:
                    12:66:c6:4f:63:37:48:a0:fb:8b:d0:9c:cc:d3:7c:
                    50:be:15:9f:e7:33:90:cd:57:26:08:ef:b3:ca:a5:
                    fa:71:5b:5c:b4:5f:16:80:a3:79:72:ae:f3:5e:10:
                    1a:f3:bc:48:b7:73:ef:ab:ab:b6:57:6c:16:4c:a3:
                    f3:b6:36:69:0f:96:e1:65:f6:b9:27:26:9c:8b:ff:
                    a1:fa:75:47:9a:35:e7:80:62:47:cc:a4:1e:bb:7f:
                    c9:20:db:88:5b:3f:55:b4:20:4d:85:02:18:a8:67:
                    ae:ac:7f:55:fd:45:02:57:a6:3a:e6:55:6a:6e:68:
                    e8:37:71:e9:00:29:fc:08:7b:d6:2f:d8:97:5c:e9:
                    85:7c:7e:ba:df:f3:4b:23:4c:44:a2:b5:95:78:c0:
                    2b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C0:08:77:AD:D4:54:B4:9A:0C:0E:64:21:BD:ED:E1:82:25:44:82
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B22B7EA8E96511F08DE118B4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:11:c6:68:2c:f0:8b:f3:18:46:c9:e3:cd:16:a6:69:0c:f6:
         55:60:68:89:13:ae:81:9c:6a:1f:40:4d:cf:79:d3:e3:55:70:
         e3:05:c6:69:f1:f9:c0:ca:d7:e0:3f:05:17:e3:51:12:87:d8:
         4b:2e:02:a2:6a:49:66:38:89:e3:24:ff:68:11:2f:62:e9:a1:
         47:fc:73:b3:e4:b5:19:2c:ad:b5:48:44:89:2b:eb:75:3d:85:
         73:01:3c:a0:18:81:a9:0b:66:52:b8:e6:26:df:a6:24:29:f7:
         bc:7b:c7:7d:74:fb:db:42:f5:23:bc:38:81:52:90:0c:78:33:
         db:30:0a:50:e2:7b:94:96:3d:51:eb:e9:19:d0:fa:fc:14:ea:
         bc:92:3b:14:0d:71:b9:0b:57:46:71:70:55:24:f4:6e:97:2b:
         53:23:91:eb:1f:ad:74:2d:eb:e0:df:57:31:b6:37:d4:ff:10:
         bf:36:98:ea:6a:ed:41:cd:70:b8:15:36:0b:41:31:78:24:40:
         58:e5:ec:6e:d6:1c:42:af:78:7f:bd:83:a0:41:c2:b9:fd:55:
         91:09:f6:b2:eb:b4:b7:34:97:4b:4e:8a:d3:b2:e4:98:07:41:
         80:c7:d5:00:e3:13:c3:64:7f:46:e1:28:fb:d2:95:16:5b:76:
         25:3c:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:25 2026 by rpki-client