This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F01A2C22ED5311F09E5B80E3DAE4EC9C.roa
File:                     F01A2C22ED5311F09E5B80E3DAE4EC9C.roa (raw, json)
Hash identifier:          DD3yJrwRTh5XxWLvBkzIl/bVIRg9G5plgLT/6WhVhhg=
Subject key identifier:   D3:0E:E0:F9:BB:86:EE:9B:CF:1D:D1:A1:4A:45:FE:0C:97:0D:5D:86
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0195D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F01A2C22ED5311F09E5B80E3DAE4EC9C.roa
Signing time:             Fri 09 Jan 2026 12:08:42 +0000
ROA not before:           Fri 09 Jan 2026 12:08:37 +0000
ROA not after:            Sun 18 Jan 2026 12:08:37 +0000
asID:                     214143
IP address blocks:        156.231.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 Jan 2026 12:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103896 (0x195d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  9 12:08:37 2026 GMT
            Not After : Jan 18 12:08:37 2026 GMT
        Subject: CN=6960efca-fbe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bb:63:b3:9a:6c:ea:50:83:1a:1a:52:91:18:
                    1e:05:d7:1b:11:ae:13:1b:cb:99:5c:92:08:1c:6f:
                    cf:93:9d:46:55:b7:89:b5:c7:b4:83:5a:f0:0f:58:
                    31:2d:2c:52:79:59:13:12:dc:47:6b:79:c0:4c:a7:
                    01:d9:6c:84:43:20:a5:58:b5:0a:50:7c:7e:84:08:
                    a6:af:c8:a2:59:2b:9e:f0:69:93:5f:9b:b8:74:27:
                    76:8b:eb:52:27:12:b2:dc:19:61:e4:b8:61:b1:38:
                    85:f4:c9:0c:92:dd:f4:fd:42:50:c6:79:e5:da:ee:
                    e8:61:39:71:16:db:72:8a:fe:cd:20:67:e0:b7:ef:
                    db:4d:8a:ea:5a:d0:29:4b:6d:a0:5c:c8:d4:2e:c7:
                    f9:68:3a:eb:d5:55:ac:1e:0b:fc:29:c5:97:a6:57:
                    8c:ac:d8:64:f8:e7:ea:af:dc:9d:c0:fe:9b:3d:01:
                    ed:22:51:32:51:20:59:2a:c4:93:85:99:25:5b:dc:
                    20:aa:20:40:be:d7:f5:73:a0:45:ab:dc:91:59:47:
                    73:72:11:93:f5:65:28:b1:7c:ea:94:78:11:71:61:
                    7a:d3:96:61:31:18:74:09:01:4b:86:c1:3c:e7:98:
                    ae:e2:27:4f:76:b3:f9:81:4c:b0:49:09:7b:28:47:
                    ed:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0E:E0:F9:BB:86:EE:9B:CF:1D:D1:A1:4A:45:FE:0C:97:0D:5D:86
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F01A2C22ED5311F09E5B80E3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:d0:99:55:45:89:3d:1c:a0:e8:ac:6d:46:41:57:33:a7:
         95:0c:1e:3c:91:3d:c8:6d:46:f5:0c:20:04:e7:c2:83:90:1b:
         cf:bf:04:3d:25:f4:9e:5e:fa:34:11:56:f9:b8:0e:29:e8:57:
         c4:97:5e:05:6c:65:86:60:ee:28:2b:22:41:2b:a4:b2:8b:f7:
         11:d2:6c:58:41:2b:ce:36:a1:48:c9:9b:4d:15:1e:d4:b3:fb:
         ba:46:54:78:2f:9b:22:e7:ba:4b:8b:fa:d8:64:a3:ce:fa:f6:
         a2:d1:1a:bc:70:94:a8:c4:c0:ed:79:ae:1a:e4:5a:6a:78:8e:
         50:b0:f7:5e:da:e6:84:e2:b5:a2:67:48:a3:a9:a3:2a:d6:55:
         4a:25:11:6a:59:b0:4c:43:99:42:16:ed:45:24:fb:b8:75:0d:
         b3:96:90:ae:2e:10:4b:75:1d:19:1f:0a:93:9b:5a:3a:ef:da:
         f9:3a:02:31:e3:cc:7e:c8:43:32:c0:8b:b0:57:20:28:20:b0:
         f8:be:58:cb:f7:e3:aa:5b:33:b6:44:4d:6b:a0:28:2d:6a:e9:
         cd:ce:29:60:82:26:e9:95:c5:38:0d:ad:bd:64:e7:7d:6d:92:
         06:16:bf:6b:8d:db:4a:eb:63:75:5f:21:f5:4b:f5:fb:19:54:
         cb:24:00:4d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZXYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTA5MTIwODM3WhcNMjYwMTE4MTIwODM3WjAYMRYw
FAYDVQQDEw02OTYwZWZjYS1mYmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0rtjs5ps6lCDGhpSkRgeBdcbEa4TG8uZXJIIHG/Pk51GVbeJtce0g1rw
D1gxLSxSeVkTEtxHa3nATKcB2WyEQyClWLUKUHx+hAimr8iiWSue8GmTX5u4dCd2
i+tSJxKy3Blh5LhhsTiF9MkMkt30/UJQxnnl2u7oYTlxFttyiv7NIGfgt+/bTYrq
WtApS22gXMjULsf5aDrr1VWsHgv8KcWXpleMrNhk+Ofqr9ydwP6bPQHtIlEyUSBZ
KsSThZklW9wgqiBAvtf1c6BFq9yRWUdzchGT9WUosXzqlHgRcWF605ZhMRh0CQFL
hsE855iu4idPdrP5gUywSQl7KEftCQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNMO
4Pm7hu6bzx3RoUpF/gyXDV2GMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMDFBMkMyMkVENTMxMUYwOUU1QjgwRTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOdsMA0GCSqGSIb3DQEBCwUA
A4IBAQB+PtCZVUWJPRyg6KxtRkFXM6eVDB48kT3IbUb1DCAE58KDkBvPvwQ9JfSe
Xvo0EVb5uA4p6FfEl14FbGWGYO4oKyJBK6Syi/cR0mxYQSvONqFIyZtNFR7Us/u6
RlR4L5si57pLi/rYZKPO+vai0Rq8cJSoxMDtea4a5FpqeI5QsPde2uaE4rWiZ0ij
qaMq1lVKJRFqWbBMQ5lCFu1FJPu4dQ2zlpCuLhBLdR0ZHwqTm1o679r5OgIx48x+
yEMywIuwVyAoILD4vljL9+OqWzO2RE1roCgtaunNzilggibplcU4Da29ZOd9bZIG
Fr9rjdtK62N1XyH1S/X7GVTLJABN
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:14 2026 by rpki-client