This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC4EE5E0EE9311F09F9B258BDAE4EC9C.roa
File:                     BC4EE5E0EE9311F09F9B258BDAE4EC9C.roa (raw, json)
Hash identifier:          nRdc4Fs2knR0CYG4iJsvcWpecB4OP0SvdUysErxfg84=
Subject key identifier:   C4:D6:4C:85:A3:74:28:0C:92:B4:BA:5D:CE:79:32:C6:E1:96:0D:74
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0195F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC4EE5E0EE9311F09F9B258BDAE4EC9C.roa
Signing time:             Sun 11 Jan 2026 02:17:54 +0000
ROA not before:           Sun 11 Jan 2026 02:17:49 +0000
ROA not after:            Sun 17 Jan 2027 02:17:49 +0000
asID:                     213642
IP address blocks:        156.229.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103929 (0x195f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 11 02:17:49 2026 GMT
            Not After : Jan 17 02:17:49 2027 GMT
        Subject: CN=69630852-399b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:4a:0d:32:94:3e:be:7b:c7:4b:aa:07:3a:
                    17:b6:1e:17:14:4c:17:45:d4:47:85:d3:6a:60:49:
                    4a:2c:40:0c:77:05:5e:65:72:a8:b4:14:08:fd:07:
                    2e:6b:e5:a3:cc:e4:46:6e:6c:16:ed:8e:66:e8:80:
                    a3:9e:3a:93:2c:bf:10:e8:c2:77:3d:a0:d3:64:0a:
                    2e:29:c9:39:56:11:70:c5:72:54:62:dd:ad:03:60:
                    0a:05:1b:0a:ff:d5:18:56:09:50:0d:43:ea:f4:a5:
                    46:d3:4f:7c:da:31:c1:36:66:5c:28:83:3d:50:df:
                    4c:56:b9:73:54:5a:60:a2:73:8d:5a:a3:7a:41:30:
                    30:1e:e5:37:4e:49:3a:e1:4b:78:37:fa:bc:a9:7d:
                    33:ff:93:44:b4:9d:29:d0:a3:a9:99:60:9d:65:92:
                    69:87:be:19:39:e5:06:42:d5:8e:01:84:f3:17:55:
                    d7:ca:bc:72:16:3d:06:e6:cb:2f:c5:5a:7c:4a:81:
                    39:05:a0:05:20:d5:58:33:1b:da:71:ce:2c:89:9c:
                    37:92:ea:c0:c3:bc:48:21:66:ce:d0:50:5a:38:c7:
                    2b:91:5d:ce:df:75:cd:81:e7:b4:39:9d:55:ac:89:
                    d3:76:c4:a7:c2:b5:ea:1e:8c:8c:da:16:5e:27:e7:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D6:4C:85:A3:74:28:0C:92:B4:BA:5D:CE:79:32:C6:E1:96:0D:74
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC4EE5E0EE9311F09F9B258BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:14:7a:4f:5c:ff:82:48:2b:83:7b:7b:d0:3e:b5:11:5e:36:
         a7:e8:b6:f0:1a:2d:d7:8a:ff:7d:6f:48:1f:96:f0:0d:61:be:
         e5:7d:dd:3d:ec:20:fd:80:06:23:db:0c:96:26:2b:97:22:0a:
         bd:65:31:48:31:6f:6d:a2:3d:2c:fe:e2:d2:ee:25:84:7a:36:
         aa:2c:94:9f:0b:df:84:79:18:6c:8c:08:d1:fd:be:11:f5:4b:
         82:a6:60:67:f6:f9:ed:dc:d8:32:53:b4:20:71:d4:e1:20:80:
         11:08:94:ff:e9:45:4f:f5:d1:da:f5:21:32:4d:10:84:d2:18:
         c6:97:60:2d:a8:dc:e6:35:cf:8b:89:71:91:f9:1b:94:30:63:
         a1:03:ce:eb:ec:2e:ab:b1:5f:6f:9a:ff:f3:c2:82:85:71:c6:
         db:25:3a:c3:5c:57:16:38:49:c4:3b:fd:73:65:36:b2:6d:7f:
         45:69:1a:27:e0:76:2f:e6:3a:f8:c4:94:99:f5:ce:90:3a:e1:
         95:c3:51:07:35:58:a2:9e:44:df:50:93:f2:cc:26:c8:07:9c:
         7d:65:13:a6:a7:f2:29:e4:d4:81:a9:9c:b0:33:ae:97:ae:e0:
         68:b8:c2:10:78:8d:34:7b:e3:7e:d9:de:bc:54:79:3d:c8:a0:
         6f:4a:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:25 2026 by rpki-client