This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B724C2A4EE9011F0813A99F3DAE4EC9C.roa
File:                     B724C2A4EE9011F0813A99F3DAE4EC9C.roa (raw, json)
Hash identifier:          sYiTVDHQpDrUY4bC3Ljzbo0l535pf6ZeT3lCiXigD1g=
Subject key identifier:   FA:78:E9:1C:6C:F9:D3:32:39:25:28:7D:8D:6B:F8:46:0C:88:28:2C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0195F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B724C2A4EE9011F0813A99F3DAE4EC9C.roa
Signing time:             Sun 11 Jan 2026 01:56:17 +0000
ROA not before:           Sun 11 Jan 2026 01:56:12 +0000
ROA not after:            Thu 29 Jan 2026 01:56:12 +0000
asID:                     202437
IP address blocks:        156.228.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103925 (0x195f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 11 01:56:12 2026 GMT
            Not After : Jan 29 01:56:12 2026 GMT
        Subject: CN=69630341-f373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:4b:4f:18:16:a8:3a:61:1a:94:cd:7a:86:
                    78:85:20:42:7d:9b:9a:db:ec:d6:a4:7d:cf:d0:5a:
                    97:c7:7b:eb:51:77:1d:c7:25:f5:f6:be:11:ea:a7:
                    6a:1f:be:20:ee:ec:26:27:5d:c1:76:43:51:35:5d:
                    bd:c3:c3:bc:1c:55:2a:1e:e9:54:08:c6:f2:ae:03:
                    e5:3b:04:39:f5:ce:91:62:99:d2:1a:63:61:e9:76:
                    39:cc:e8:13:cc:74:40:55:f8:f8:00:d5:53:8a:0e:
                    cf:be:73:c3:77:4b:52:85:06:c0:8d:45:a6:89:93:
                    96:11:79:55:e5:77:cc:6a:02:fd:8c:a1:ec:f8:fa:
                    76:5d:14:7b:cd:58:ed:a0:91:c1:55:98:6c:3e:c6:
                    a0:08:6e:99:06:66:0b:96:30:fb:f2:49:84:8c:76:
                    98:df:dd:40:72:0c:06:d2:44:34:02:09:31:96:17:
                    c1:a2:6d:0d:92:37:64:18:26:3f:71:d7:6e:0f:af:
                    8f:15:04:75:a9:53:e8:c3:b4:cb:e6:0c:22:76:d3:
                    42:f4:ef:2e:2f:18:5a:59:4b:31:0f:83:2a:08:7f:
                    84:15:70:d1:b5:5e:b4:0c:bb:ed:cb:7d:94:f8:4a:
                    97:ae:dc:3e:46:75:6e:f2:8c:1b:d2:cb:14:9a:ed:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:78:E9:1C:6C:F9:D3:32:39:25:28:7D:8D:6B:F8:46:0C:88:28:2C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B724C2A4EE9011F0813A99F3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:02:e0:5e:6f:94:71:ef:23:b8:0f:36:a2:0a:c3:59:fa:1a:
         9b:42:f6:91:16:b0:ad:bf:46:76:9e:ee:6b:a3:71:fd:3b:a8:
         ae:25:da:5a:3f:98:42:d1:c1:cc:3e:7c:f6:b5:d5:be:39:35:
         10:fa:c4:38:db:e3:5f:99:d6:68:5d:ce:ad:d9:e2:25:c8:23:
         6f:ce:48:5f:58:04:df:bb:b6:6d:09:90:82:f2:54:f4:0c:34:
         12:ae:4e:18:1f:96:df:82:d7:cd:3a:0d:92:01:e9:56:4d:70:
         a6:42:d4:c5:a7:76:4e:4d:e0:f2:fd:21:d5:58:37:70:bc:48:
         21:fe:c0:6c:64:8e:2f:b0:c1:2b:c6:7e:9e:45:4f:3b:f2:10:
         30:28:62:df:76:39:75:31:e1:35:a3:28:af:91:fc:d8:38:ae:
         49:4d:75:cc:8b:c5:5a:c6:af:55:38:35:d0:e7:5a:4c:aa:36:
         bd:8a:67:d8:17:09:03:bb:94:52:66:e3:d4:f3:5c:38:2a:b2:
         b1:50:52:f1:70:45:e5:ba:c9:0b:75:8c:18:88:49:d2:65:ca:
         a2:e5:74:f4:89:97:7a:e6:84:89:bb:54:e2:39:27:f9:8e:66:
         81:16:b3:29:c6:38:ca:17:72:2c:b8:b8:ce:8b:19:2c:83:bf:
         fe:2e:53:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:32 2026 by rpki-client