This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/266147A6DCB611F0AEA661B7DAE4EC9C.roa
File:                     266147A6DCB611F0AEA661B7DAE4EC9C.roa (raw, json)
Hash identifier:          UX3OGLs89mfZGnqA49wxemqRDKsyPKPRpBGX42InyQU=
Subject key identifier:   26:19:10:87:44:63:39:B0:29:71:42:1E:2F:C2:A3:AC:64:28:9B:D0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019006
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/266147A6DCB611F0AEA661B7DAE4EC9C.roa
Signing time:             Fri 19 Dec 2025 08:38:56 +0000
ROA not before:           Fri 19 Dec 2025 08:38:49 +0000
ROA not after:            Fri 02 Jan 2026 08:38:49 +0000
asID:                     4134
IP address blocks:        156.242.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102406 (0x19006)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 19 08:38:49 2025 GMT
            Not After : Jan  2 08:38:49 2026 GMT
        Subject: CN=69450f20-7ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:85:62:3d:23:b8:00:b3:df:fa:ab:32:d2:fb:
                    fc:8d:f6:14:61:bd:b5:42:09:a1:97:2f:35:16:bd:
                    6c:bc:80:a4:8e:ab:ae:1a:27:e1:9e:39:0d:74:d2:
                    d3:5b:b7:a4:c9:28:47:06:f6:99:bc:58:18:d1:cf:
                    46:de:05:96:56:b0:8f:a0:96:42:1b:b6:c1:66:7b:
                    9a:94:f9:58:fa:f7:9d:59:36:f4:94:69:4e:e0:39:
                    6e:2f:9a:ec:ae:d8:ac:36:9c:58:e5:ff:2b:b0:8a:
                    c7:e1:30:a7:84:8a:ed:e5:f1:50:d6:b8:c5:63:2e:
                    d6:5a:58:87:7b:9a:53:8f:87:7a:c6:1f:46:ce:db:
                    cc:b1:da:a1:e1:c5:dd:70:a1:39:18:91:57:b1:60:
                    3c:09:2d:fa:36:89:9d:62:45:1e:35:05:78:06:8e:
                    b1:97:ca:7a:eb:b2:72:cc:04:19:81:d0:96:8f:4b:
                    8e:e3:b7:23:41:ab:14:91:12:fc:d1:49:42:23:e7:
                    26:bf:c5:8b:18:e8:40:1e:93:f2:99:d6:8e:a4:46:
                    83:65:27:b7:5c:d9:cc:3d:94:0c:f4:39:26:bd:97:
                    cc:bd:f6:4b:07:26:fe:fc:0e:c3:d4:0b:98:96:9f:
                    28:5a:39:97:20:c1:e1:a4:fc:ed:1d:1f:d3:a5:1e:
                    e5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:19:10:87:44:63:39:B0:29:71:42:1E:2F:C2:A3:AC:64:28:9B:D0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/266147A6DCB611F0AEA661B7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.242.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:9b:3c:70:b4:36:e1:cd:ef:e4:9b:35:47:c5:eb:a0:b7:7f:
         6a:77:4d:83:ed:3b:61:03:62:53:08:1f:4e:a0:c7:c3:b5:bd:
         cc:03:6a:8f:f6:37:cf:ea:41:c3:82:9c:5f:aa:15:24:27:97:
         5f:2c:64:39:a1:c8:31:84:e2:69:1f:a8:36:e7:b2:53:62:33:
         bb:bd:ee:f7:9f:c6:7f:d8:92:20:07:ac:20:c1:b2:42:03:8b:
         94:83:12:2b:4f:bf:24:29:cf:26:99:76:aa:da:4c:f3:da:cc:
         b0:a0:13:ac:9f:32:ae:30:5b:2a:2e:5d:86:af:9f:10:c7:7d:
         5e:4f:d5:d4:20:ba:31:95:8f:3f:0b:2a:af:4a:d1:e1:0c:a7:
         94:46:b1:69:ce:83:91:8e:4c:64:c3:e1:3c:c7:91:92:0d:e2:
         cc:3d:09:85:7a:cc:91:f9:aa:96:c3:e3:5f:ca:2c:f4:1f:9b:
         39:41:00:72:91:4e:d7:3f:75:b1:83:ab:86:9d:75:3e:5e:11:
         4f:80:d8:47:89:6e:2b:26:b7:3e:82:ec:5f:0f:18:29:f6:fc:
         4c:ca:a6:26:20:5f:ca:1e:22:6e:96:75:28:c8:81:e5:26:8a:
         e7:eb:a2:ab:d4:6c:06:89:7a:92:71:ee:23:0f:d3:4f:a9:95:
         be:56:27:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:08 2025 by rpki-client