This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0305790EC7411F0822A078ADAE4EC9C.roa
File:                     D0305790EC7411F0822A078ADAE4EC9C.roa (raw, json)
Hash identifier:          SKwOUpEdSpuXGskmCb5V5w9j46I8FC1dS+cXHUqblPs=
Subject key identifier:   98:9B:71:40:5A:66:BB:20:94:72:F2:A8:52:75:BE:E4:CD:0B:3F:82
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01958C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0305790EC7411F0822A078ADAE4EC9C.roa
Signing time:             Thu 08 Jan 2026 09:31:31 +0000
ROA not before:           Thu 08 Jan 2026 09:31:25 +0000
ROA not after:            Wed 28 Jan 2026 09:31:25 +0000
asID:                     40779
IP address blocks:        156.238.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103820 (0x1958c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  8 09:31:25 2026 GMT
            Not After : Jan 28 09:31:25 2026 GMT
        Subject: CN=695f7972-3275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2b:7d:20:5f:4e:2e:dd:08:9c:c4:b6:3d:95:
                    38:c8:8c:7a:b5:c5:3e:e1:7d:f6:cf:b9:ac:4b:78:
                    3c:f2:b5:a0:e0:0f:cd:a9:13:2f:92:4a:f1:cf:75:
                    d6:31:35:8a:21:8a:d0:ac:c8:fe:40:6b:b6:9a:4d:
                    da:bd:58:0e:e7:2d:e4:e5:a5:89:5c:46:79:a6:5f:
                    e1:07:a1:4c:d3:a5:37:27:29:bf:77:14:c5:ba:3d:
                    85:52:5d:04:e7:1c:47:2a:fd:4f:cf:97:ae:ec:9c:
                    30:72:9c:65:4e:52:d3:92:b7:ac:21:94:7e:73:60:
                    2e:60:45:f9:48:f2:45:d3:7b:b6:91:41:53:06:88:
                    c7:bc:de:2e:7c:3c:21:79:a9:4e:f0:67:dd:df:20:
                    ee:c1:cc:1a:db:7b:6e:cf:b6:79:17:eb:61:04:2c:
                    c5:34:b4:3a:9d:99:eb:d1:b5:5f:72:94:d4:d2:c9:
                    fa:4b:3e:e6:52:70:a5:46:32:55:98:b1:f8:a1:ba:
                    0f:ed:b0:81:39:31:0b:a4:88:f0:a1:f6:ea:4f:58:
                    75:9e:db:dd:51:05:86:38:e4:26:16:b7:60:f5:f9:
                    c0:66:91:0b:00:35:9a:49:18:26:f1:03:d3:a8:f3:
                    1d:cf:2a:8a:9b:02:77:3b:44:d3:6d:d9:a4:ec:0d:
                    13:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9B:71:40:5A:66:BB:20:94:72:F2:A8:52:75:BE:E4:CD:0B:3F:82
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0305790EC7411F0822A078ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:fd:b8:fa:c5:52:0e:84:6d:d2:94:51:ea:2e:b1:2d:cc:a9:
         61:0d:61:4d:c6:e8:db:10:55:90:f2:86:0f:38:89:ff:a8:bd:
         46:22:77:52:26:17:16:c3:ab:f5:af:29:1e:07:5f:36:eb:a4:
         2e:88:ce:1e:bb:d2:b3:41:10:af:bf:d6:60:5e:2f:37:07:98:
         90:bc:6e:bc:68:44:39:3d:fd:79:fe:8f:4d:3f:0a:5e:2b:9a:
         90:dc:f5:6d:4f:18:d1:2f:e0:ef:98:44:4a:88:02:be:55:db:
         bf:f3:ea:ab:14:a6:e5:d0:89:85:53:66:b4:1f:ba:6a:67:4f:
         b7:a0:a2:b2:77:24:b3:23:fc:24:61:50:8d:59:51:09:8a:99:
         ee:6d:44:b8:e4:70:47:99:cf:75:9d:67:12:02:39:f6:df:24:
         29:be:ae:64:9f:7d:28:00:c3:08:6a:a9:ee:38:0f:2b:51:98:
         8d:b2:03:7a:cc:07:5e:71:37:48:4f:55:10:8e:cb:b6:33:59:
         0a:ce:6a:8a:45:26:f5:0f:be:2a:c5:07:b8:04:ca:b4:9e:7a:
         31:52:7d:62:38:3c:19:cf:30:54:8a:69:e7:69:af:25:9b:82:
         8f:19:46:66:91:cc:ae:55:91:6e:07:b3:bb:7f:84:70:16:15:
         95:a0:5e:f8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZWMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTA4MDkzMTI1WhcNMjYwMTI4MDkzMTI1WjAYMRYw
FAYDVQQDEw02OTVmNzk3Mi0zMjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6yt9IF9OLt0InMS2PZU4yIx6tcU+4X32z7msS3g88rWg4A/NqRMvkkrx
z3XWMTWKIYrQrMj+QGu2mk3avVgO5y3k5aWJXEZ5pl/hB6FM06U3Jym/dxTFuj2F
Ul0E5xxHKv1Pz5eu7JwwcpxlTlLTkresIZR+c2AuYEX5SPJF03u2kUFTBojHvN4u
fDwhealO8Gfd3yDuwcwa23tuz7Z5F+thBCzFNLQ6nZnr0bVfcpTU0sn6Sz7mUnCl
RjJVmLH4oboP7bCBOTELpIjwofbqT1h1ntvdUQWGOOQmFrdg9fnAZpELADWaSRgm
8QPTqPMdzyqKmwJ3O0TTbdmk7A0TpwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJib
cUBaZrsglHLyqFJ1vuTNCz+CMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMDMwNTc5MEVDNzQxMUYwODIyQTA3OEFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO7gMA0GCSqGSIb3DQEBCwUA
A4IBAQBI/bj6xVIOhG3SlFHqLrEtzKlhDWFNxujbEFWQ8oYPOIn/qL1GIndSJhcW
w6v1rykeB18266QuiM4eu9KzQRCvv9ZgXi83B5iQvG68aEQ5Pf15/o9NPwpeK5qQ
3PVtTxjRL+DvmERKiAK+Vdu/8+qrFKbl0ImFU2a0H7pqZ0+3oKKydySzI/wkYVCN
WVEJipnubUS45HBHmc91nWcSAjn23yQpvq5kn30oAMMIaqnuOA8rUZiNsgN6zAde
cTdIT1UQjsu2M1kKzmqKRSb1D74qxQe4BMq0nnoxUn1iODwZzzBUimnnaa8lm4KP
GUZmkcyuVZFuB7O7f4RwFhWVoF74
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:13 2026 by rpki-client