This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9D51312F2BF11F0A0F7F69BDAE4EC9C.roa
File:                     C9D51312F2BF11F0A0F7F69BDAE4EC9C.roa (raw, json)
Hash identifier:          4qrglDLdic6jJTVeWzABmw0UgPntyg5llPZ0mZxRUOA=
Subject key identifier:   37:F5:D3:82:8F:AC:E6:6A:84:40:1B:50:CE:4F:00:EB:30:2D:53:1A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01973F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9D51312F2BF11F0A0F7F69BDAE4EC9C.roa
Signing time:             Fri 16 Jan 2026 09:43:20 +0000
ROA not before:           Fri 16 Jan 2026 09:43:14 +0000
ROA not after:            Sun 22 Feb 2026 09:43:14 +0000
asID:                     273250
IP address blocks:        156.252.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104255 (0x1973f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 16 09:43:14 2026 GMT
            Not After : Feb 22 09:43:14 2026 GMT
        Subject: CN=696a0837-d971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:eb:63:75:02:fc:e5:13:85:8b:a5:26:a3:
                    2f:6d:89:96:bc:e5:18:de:ba:f6:d3:5f:0b:55:ae:
                    30:de:01:df:73:d3:47:28:3e:e6:d5:d4:8b:3e:26:
                    f1:87:4e:27:79:0a:dd:36:52:35:fc:c8:bb:64:d8:
                    91:10:a6:24:aa:df:41:7e:c7:3d:65:4b:d2:9c:c1:
                    62:6b:63:d8:58:70:2f:9e:d2:fb:a2:37:9d:a3:ea:
                    4e:31:20:1c:a6:24:6f:67:a5:19:70:24:5f:e7:e7:
                    48:25:a3:38:5f:a4:d7:0d:7a:dc:cd:c3:f9:dd:e7:
                    6c:2a:81:c5:b4:29:54:36:40:fb:30:2d:23:1a:69:
                    73:a2:49:9d:91:fb:d7:3e:bc:c7:8b:20:dc:d8:2d:
                    79:d5:50:20:c1:5e:db:11:c1:91:60:a6:62:79:13:
                    28:5b:69:34:d2:a5:b3:38:42:da:89:e2:93:28:8d:
                    7c:33:9d:7b:7c:60:52:16:55:5c:18:f1:5d:5e:52:
                    81:89:88:53:1f:0e:39:10:f6:3a:de:95:b7:cf:05:
                    39:57:73:b0:0e:11:da:02:b0:d2:f3:80:d8:8b:89:
                    8a:75:2a:7b:07:e8:3a:cd:ff:9e:8c:a8:93:c9:98:
                    ca:cf:d3:29:54:9c:fb:00:68:e0:08:48:02:c1:8f:
                    41:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F5:D3:82:8F:AC:E6:6A:84:40:1B:50:CE:4F:00:EB:30:2D:53:1A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9D51312F2BF11F0A0F7F69BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:7b:17:b4:71:2c:b7:53:da:38:10:10:e0:89:d2:47:94:e9:
         64:97:f9:bd:fb:36:ad:8e:a9:52:91:a9:bf:ca:dd:28:95:c0:
         db:90:00:3c:87:ad:78:95:da:cf:c4:f8:a6:d2:6d:c5:e0:d9:
         40:c2:c4:b8:4d:98:ad:0e:15:98:03:bb:8a:0b:3b:3e:21:0d:
         f9:bb:ac:dc:82:c6:f7:50:1c:f5:16:6f:2a:72:ed:13:05:9d:
         2f:a1:de:82:30:d3:3d:9f:3c:67:56:3f:a9:0a:75:eb:c6:3d:
         9f:e5:20:f2:e3:f3:67:1a:6b:af:34:15:61:a1:1b:05:5b:05:
         e9:7b:ed:65:ce:69:70:3e:3b:4b:6d:33:d1:10:c3:2b:35:07:
         8c:72:23:6b:27:cf:8b:e8:d7:f7:c8:4e:6d:dc:2f:13:6c:94:
         be:d2:b8:15:33:47:eb:19:c4:bf:b2:48:8b:c6:f9:e4:61:64:
         31:be:20:34:7d:fe:08:64:a1:32:82:9f:14:e5:e8:8a:e7:a5:
         5a:fd:df:17:c3:d3:56:24:00:6b:da:5c:8f:84:30:4d:34:99:
         e6:63:f7:13:40:05:22:9e:a2:ac:8e:67:d9:34:62:3c:78:a7:
         ec:5d:57:66:b2:94:8b:a5:b2:44:df:d7:4c:13:b6:44:88:70:
         06:15:d2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:58 2026 by rpki-client