This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B68B472EF2D111F0A948B889DAE4EC9C.roa
File:                     B68B472EF2D111F0A948B889DAE4EC9C.roa (raw, json)
Hash identifier:          2uzlRAAxa0UxxId+yL+EWstsrrD53GAfpA78EH07kkk=
Subject key identifier:   BF:8A:74:6D:1D:35:AB:63:F5:6E:A0:E1:7D:26:F6:BD:7B:77:EF:4E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019769
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B68B472EF2D111F0A948B889DAE4EC9C.roa
Signing time:             Fri 16 Jan 2026 11:51:38 +0000
ROA not before:           Fri 16 Jan 2026 11:51:33 +0000
ROA not after:            Sun 08 Feb 2026 11:51:33 +0000
asID:                     274065
IP address blocks:        156.238.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104297 (0x19769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 16 11:51:33 2026 GMT
            Not After : Feb  8 11:51:33 2026 GMT
        Subject: CN=696a2649-f3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3b:49:bf:3a:2a:19:81:f2:26:cf:1e:3a:3d:
                    4f:65:a2:b7:e6:3d:b2:f8:e4:3c:55:28:69:a2:2d:
                    de:fa:3b:fd:3f:71:ba:dc:bb:49:63:5b:18:d2:58:
                    fe:f5:db:0b:10:5b:37:41:43:2c:ca:12:99:e6:71:
                    33:37:ce:10:31:f6:3b:12:c1:de:40:eb:50:e8:23:
                    ba:72:b9:d5:1f:07:ed:d7:c2:98:ad:d3:90:94:a2:
                    9f:2b:86:9c:46:27:b1:63:c5:15:ae:aa:8b:67:d6:
                    e0:23:59:47:b8:6f:fe:87:4b:35:34:cc:94:e2:68:
                    3b:64:8e:b7:1c:30:72:54:ca:45:6c:32:ef:c8:bf:
                    00:dd:64:c9:3d:c7:93:6f:54:7e:78:46:b9:6c:70:
                    52:ea:4f:bd:dc:12:35:66:ce:7e:1b:ef:2f:c5:b6:
                    34:b2:e3:ed:0d:b4:83:ff:3b:44:d0:1a:5b:f6:e3:
                    ee:c7:0a:65:40:a5:09:00:39:76:3e:ef:f7:1a:47:
                    e4:49:89:5a:4b:b6:95:81:8b:28:6b:01:6d:fe:c5:
                    2f:50:81:55:63:c7:46:bc:41:16:4c:7d:21:07:21:
                    7e:ff:54:7e:58:13:ec:30:16:05:42:3d:ed:3c:2a:
                    4a:96:bf:ce:01:17:da:70:c7:3a:97:b6:9b:42:0a:
                    45:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8A:74:6D:1D:35:AB:63:F5:6E:A0:E1:7D:26:F6:BD:7B:77:EF:4E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B68B472EF2D111F0A948B889DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:48:38:44:1e:d6:97:cf:8c:b5:70:4f:40:8c:4a:0e:e3:50:
         95:c9:bf:60:4d:1d:55:7b:e0:fb:96:74:63:79:58:83:5d:52:
         04:7b:9e:9e:0e:b6:21:ba:9f:3e:61:34:b0:be:f9:bb:d9:ed:
         21:31:fe:9f:1c:26:9d:4d:e5:36:c9:da:a7:49:f8:91:68:a0:
         d4:28:e9:f7:d9:1c:32:e7:32:c9:71:c1:64:e6:b3:59:f8:ac:
         9f:2b:aa:5d:ea:2c:d9:77:92:3e:2f:d3:ab:fc:87:a1:1e:70:
         f0:9e:7c:82:36:3f:98:5d:96:69:f8:32:3e:c7:3e:27:07:e0:
         98:5b:7a:14:c8:51:8b:b0:1a:0f:51:96:b9:27:ad:5f:3c:04:
         3c:aa:6b:25:3c:e5:33:c0:6d:2b:61:17:fa:e0:d2:c2:d4:f0:
         37:d9:4f:8f:46:bc:4d:21:53:78:f2:93:16:35:e6:47:d1:19:
         ff:48:04:ce:56:61:34:42:1e:09:0d:01:e0:79:08:f6:77:ad:
         9f:b6:3a:1b:d8:35:08:0f:91:aa:04:69:60:a3:6b:f6:58:c1:
         10:a8:55:12:e5:0c:cd:b9:84:ff:53:22:11:bb:93:c9:1e:82:
         30:74:f1:a5:1a:d9:6f:48:f5:27:e1:16:82:92:03:f9:72:ba:
         a8:a1:d4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:11 2026 by rpki-client