This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08FAB3B6EB0511F0A45461ACDAE4EC9C.roa
File:                     08FAB3B6EB0511F0A45461ACDAE4EC9C.roa (raw, json)
Hash identifier:          9C5uClvWeNN+1wIc2DYqeb01Yk6335dmG7/zS7Rpkx4=
Subject key identifier:   54:EA:4B:5B:87:0C:4A:37:7B:18:05:54:BF:93:3D:27:B5:3C:81:45
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0194B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08FAB3B6EB0511F0A45461ACDAE4EC9C.roa
Signing time:             Tue 06 Jan 2026 13:38:51 +0000
ROA not before:           Tue 06 Jan 2026 13:38:46 +0000
ROA not after:            Thu 12 Feb 2026 13:38:46 +0000
asID:                     395886
IP address blocks:        45.207.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103606 (0x194b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  6 13:38:46 2026 GMT
            Not After : Feb 12 13:38:46 2026 GMT
        Subject: CN=695d106b-3b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:31:44:37:8c:3b:2b:51:08:de:c8:fc:d8:
                    c4:05:cb:c8:41:78:8b:e1:41:32:05:55:9c:20:05:
                    2d:30:39:0c:10:55:f4:d1:92:d7:4a:f9:40:80:41:
                    18:33:af:d1:df:09:03:e3:dd:3d:25:39:93:e8:55:
                    de:da:5a:31:b7:92:5d:58:d9:f4:94:6a:2a:1e:6f:
                    50:3a:06:fa:ee:9b:e7:b2:1c:65:91:b0:44:83:2d:
                    e3:ca:1a:87:a0:43:c0:e5:cc:44:47:e6:ab:5e:1d:
                    2a:22:26:b3:1e:bd:26:d5:9a:9a:80:89:57:c3:e5:
                    e1:ae:e4:85:9b:46:3c:4c:82:6d:1b:49:45:67:9a:
                    c0:34:bf:02:94:10:94:e0:74:36:31:15:34:85:0f:
                    26:19:71:5c:62:92:e7:7e:65:59:6a:6b:68:2c:21:
                    4d:19:f4:09:81:57:1c:c1:94:79:11:76:c0:84:4e:
                    7f:19:72:18:33:d4:fe:e7:fe:0f:8e:32:f7:61:39:
                    74:61:1e:e0:23:73:35:a0:75:e0:89:46:68:e6:7b:
                    44:35:c2:81:c5:58:f6:bd:d3:d2:ee:c4:87:95:69:
                    53:d5:a0:ec:32:d5:4a:d4:33:a7:a1:39:96:e5:2f:
                    0f:25:7a:f1:28:6c:de:21:35:de:1d:39:36:04:ea:
                    a7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EA:4B:5B:87:0C:4A:37:7B:18:05:54:BF:93:3D:27:B5:3C:81:45
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08FAB3B6EB0511F0A45461ACDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:51:f8:e5:a6:b9:65:b2:2e:b0:e8:92:62:3e:8e:19:b3:03:
         af:96:a7:b3:1d:d3:2d:df:b0:96:c1:c1:44:23:1c:4c:3a:c1:
         f7:ba:c3:8d:1c:49:a2:b7:33:94:7b:e2:58:46:0d:c2:99:5d:
         81:59:eb:2a:d1:f2:a0:2b:80:4b:f6:f0:f7:d6:cc:51:7c:10:
         ff:45:39:05:91:65:d1:13:5b:89:5a:cd:c6:58:b0:d2:fc:7e:
         25:8f:b6:0e:e0:e6:94:a5:ee:d1:eb:77:3a:a6:11:bd:53:ad:
         1b:4b:46:45:2e:e6:0d:91:5c:93:e2:8c:37:f7:9a:3a:c7:12:
         ed:16:c8:7e:58:11:35:b9:58:8e:35:67:41:a1:af:38:5f:f0:
         5a:aa:a3:00:e0:ef:6e:57:a7:73:6f:26:ca:f9:04:c8:af:d8:
         81:77:b1:bf:7b:a4:42:70:81:9d:25:f9:37:0a:6d:f1:ee:4a:
         e0:75:d2:69:ea:35:64:7c:82:b3:2d:27:38:5a:7e:d2:ea:76:
         cb:6f:5d:1b:bb:08:fa:c8:21:8d:c6:82:8e:7f:95:a7:33:46:
         6c:30:cc:2d:dd:2e:ad:d1:20:c9:9c:bf:c4:2c:88:cc:1c:8c:
         97:fe:aa:e9:fe:1c:67:bd:3a:12:5b:12:7f:8d:3b:54:57:61:
         7b:a8:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:36 2026 by rpki-client