This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/426EFDB4E24011F0A746B380DAE4EC9C.roa
File:                     426EFDB4E24011F0A746B380DAE4EC9C.roa (raw, json)
Hash identifier:          0ZFgMMYvx0uOf8qgCBoh4pAr8bxF6Ed+u2cByds+uZk=
Subject key identifier:   5B:0C:5A:86:8F:F4:A8:48:A5:DE:50:09:56:FF:37:95:D5:EF:94:DA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019241
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/426EFDB4E24011F0A746B380DAE4EC9C.roa
Signing time:             Fri 26 Dec 2025 09:50:07 +0000
ROA not before:           Fri 26 Dec 2025 09:50:02 +0000
ROA not after:            Fri 23 Jan 2026 09:50:02 +0000
asID:                     64013
IP address blocks:        156.247.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102977 (0x19241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 26 09:50:02 2025 GMT
            Not After : Jan 23 09:50:02 2026 GMT
        Subject: CN=694e5a4f-9d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:c4:72:75:90:4c:58:d8:a5:29:01:50:0a:
                    d7:1f:92:38:2f:6d:96:91:7d:dd:19:82:43:49:39:
                    5e:b2:55:09:b7:bf:92:c2:f1:74:c7:72:f5:3d:5a:
                    db:ea:c9:f8:dd:72:55:1e:16:f7:c0:7b:2d:40:e3:
                    65:f9:19:cd:d6:3c:3e:6d:aa:a8:e8:36:51:8a:64:
                    de:b0:73:74:c8:90:03:23:45:93:1e:ce:f8:26:a2:
                    23:99:d7:3f:11:82:50:ff:d4:a5:d1:8a:05:0c:b9:
                    c2:98:6b:03:14:b3:5a:a4:e7:6a:e5:26:a5:2d:d1:
                    54:25:1b:cf:f3:70:a3:02:90:16:94:08:24:bd:15:
                    7a:8a:89:0d:88:06:f2:05:7b:46:59:0b:dc:9a:b7:
                    1e:51:26:03:1b:3a:90:a4:8f:cf:aa:c0:1f:99:d1:
                    08:75:3a:01:6a:16:ba:e4:05:f4:35:81:53:d8:80:
                    39:c2:be:47:a5:8e:8a:09:f9:32:c4:a1:cb:31:f8:
                    69:79:25:65:64:a0:26:e3:9a:d3:27:e7:eb:db:be:
                    2f:69:ac:0e:cf:dc:dd:02:1f:ad:2d:89:0d:f0:07:
                    2d:50:60:88:8b:4b:bc:45:85:bf:24:52:39:d1:05:
                    dc:ed:fd:09:a0:cf:15:ff:b2:f7:19:c6:3b:3a:0f:
                    9b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0C:5A:86:8F:F4:A8:48:A5:DE:50:09:56:FF:37:95:D5:EF:94:DA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/426EFDB4E24011F0A746B380DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:78:b8:bf:87:76:4b:18:90:fb:6c:ca:a0:40:9a:81:07:a2:
         55:ab:40:e1:36:ac:ec:2f:51:93:ef:53:6a:eb:0f:b2:a3:b1:
         c7:97:cd:2b:03:4b:ac:95:90:31:33:35:60:d2:4e:83:4f:a3:
         2f:dd:f8:f0:b1:bf:d7:d5:44:fc:f0:60:be:c1:48:f1:5e:e1:
         a4:df:ae:38:f6:07:bc:a6:92:ea:8b:1f:36:b1:bc:ae:54:e1:
         c7:0b:d9:01:9d:93:8f:ea:a1:8e:13:e0:f6:ec:96:6a:6d:d4:
         ec:0a:6b:c8:af:28:af:26:ac:2c:9f:42:d6:87:5e:d0:80:ec:
         ef:d7:cf:2d:8f:22:dd:cc:15:13:f6:e5:d4:9d:db:c3:5d:b2:
         0c:0e:ab:ca:6c:e1:17:8f:d1:3a:02:bd:2a:f0:04:34:08:76:
         ea:9a:eb:d7:d0:5a:99:d7:c4:7a:05:56:f7:ff:a4:86:84:3f:
         a6:e2:fc:8b:35:bb:a4:62:2a:1f:9b:77:39:3c:df:b6:46:ff:
         39:c8:9a:e2:f7:c7:5f:01:5c:bd:15:08:59:71:97:1b:ac:06:
         53:c0:c5:74:06:af:0f:da:2a:ee:8f:ed:75:eb:c6:dd:52:6c:
         3d:11:e3:32:40:c7:fc:33:c6:c6:eb:99:6a:db:bc:5e:80:e3:
         c6:00:78:37
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZJBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjI2MDk1MDAyWhcNMjYwMTIzMDk1MDAyWjAYMRYw
FAYDVQQDEw02OTRlNWE0Zi05ZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArmnEcnWQTFjYpSkBUArXH5I4L22WkX3dGYJDSTleslUJt7+SwvF0x3L1
PVrb6sn43XJVHhb3wHstQONl+RnN1jw+baqo6DZRimTesHN0yJADI0WTHs74JqIj
mdc/EYJQ/9Sl0YoFDLnCmGsDFLNapOdq5SalLdFUJRvP83CjApAWlAgkvRV6iokN
iAbyBXtGWQvcmrceUSYDGzqQpI/PqsAfmdEIdToBaha65AX0NYFT2IA5wr5HpY6K
CfkyxKHLMfhpeSVlZKAm45rTJ+fr274vaawOz9zdAh+tLYkN8ActUGCIi0u8RYW/
JFI50QXc7f0JoM8V/7L3GcY7Og+bbwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFsM
WoaP9KhIpd5QCVb/N5XV75TaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MjZFRkRCNEUyNDAxMUYwQTc0NkIzODBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnPcgMA0GCSqGSIb3DQEBCwUA
A4IBAQA5eLi/h3ZLGJD7bMqgQJqBB6JVq0DhNqzsL1GT71Nq6w+yo7HHl80rA0us
lZAxMzVg0k6DT6Mv3fjwsb/X1UT88GC+wUjxXuGk36449ge8ppLqix82sbyuVOHH
C9kBnZOP6qGOE+D27JZqbdTsCmvIryivJqwsn0LWh17QgOzv188tjyLdzBUT9uXU
ndvDXbIMDqvKbOEXj9E6Ar0q8AQ0CHbqmuvX0FqZ18R6BVb3/6SGhD+m4vyLNbuk
Yiofm3c5PN+2Rv85yJri98dfAVy9FQhZcZcbrAZTwMV0Bq8P2iruj+1168bdUmw9
EeMyQMf8M8bG65lq27xegOPGAHg3
-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:30 2025 by rpki-client