This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1088D13AEE9D11F08D4DB8C8DAE4EC9C.roa
File:                     1088D13AEE9D11F08D4DB8C8DAE4EC9C.roa (raw, json)
Hash identifier:          mbn7DjwPB7xntKflTpu9hXidfQWnBLv5EdMnVbnWe+k=
Subject key identifier:   04:60:19:94:F6:F1:01:DF:2B:2D:B1:16:06:71:E5:17:3E:FC:4D:77
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01960F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1088D13AEE9D11F08D4DB8C8DAE4EC9C.roa
Signing time:             Sun 11 Jan 2026 03:24:41 +0000
ROA not before:           Sun 11 Jan 2026 03:24:36 +0000
ROA not after:            Tue 17 Feb 2026 03:24:36 +0000
asID:                     399195
IP address blocks:        45.200.192.0/18 maxlen: 24
                          45.200.192.0/19 maxlen: 24
                          45.200.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103951 (0x1960f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 11 03:24:36 2026 GMT
            Not After : Feb 17 03:24:36 2026 GMT
        Subject: CN=696317f8-8324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:95:d6:1c:ab:b3:94:9c:d7:cd:d8:c7:0f:
                    bf:b8:a4:ed:1b:a5:ae:18:40:c4:54:bf:fd:13:ec:
                    67:7b:f9:57:e5:3b:c6:ac:16:23:b2:66:24:ae:7d:
                    df:ba:4f:28:e4:a8:33:a8:46:d1:67:8a:28:46:b7:
                    f4:35:ba:f3:19:31:ef:d3:4e:33:2c:5f:eb:10:f3:
                    94:2e:b8:97:b6:4f:db:bc:2c:3b:35:92:3e:10:05:
                    14:04:28:e3:62:27:40:5f:52:81:0e:0b:58:6a:21:
                    cf:01:bf:c4:fb:e1:67:e7:93:e9:81:64:a5:66:1f:
                    a3:be:44:34:f0:2f:fb:b7:e2:9e:af:fd:8e:3c:39:
                    49:c0:52:ad:b8:a3:17:4d:1c:20:56:6c:36:01:b4:
                    a6:72:7a:b8:f0:02:35:d4:25:53:79:86:ba:5b:32:
                    29:4c:bd:8b:57:ab:a4:d3:82:3e:fc:a2:c4:ca:07:
                    77:99:ff:09:17:31:5b:03:82:76:02:69:a1:81:8d:
                    40:ec:81:2d:c1:59:79:82:d0:2b:51:95:c9:55:d0:
                    3f:75:68:a4:02:3f:7a:d6:8f:88:e4:bd:13:00:07:
                    17:8a:b1:45:79:da:0d:2e:83:53:64:5b:82:ac:40:
                    20:f1:b8:63:ba:ff:17:df:13:71:69:1c:55:cc:57:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:60:19:94:F6:F1:01:DF:2B:2D:B1:16:06:71:E5:17:3E:FC:4D:77
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1088D13AEE9D11F08D4DB8C8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:eb:30:d3:ff:31:65:de:58:b1:79:bc:b1:6c:b8:92:10:57:
         50:37:78:72:99:8b:89:65:a9:7d:70:cb:44:28:48:55:c2:19:
         1d:13:54:0d:1f:c0:e6:3f:48:a1:ad:b7:92:cb:36:a8:39:f8:
         06:89:76:e6:37:77:ce:f6:58:ed:5d:37:06:b0:5d:46:74:7c:
         91:10:bf:17:89:04:d3:c4:49:23:c0:77:5b:cf:6f:65:97:e9:
         38:70:58:a3:08:32:80:19:15:9b:02:fe:69:06:92:37:c6:d7:
         ea:4d:ff:87:4c:0f:c5:4d:59:6b:e2:dd:98:53:18:ea:f3:f7:
         52:d6:09:9d:d6:30:34:30:bd:27:32:12:ad:af:b5:db:87:a2:
         04:b0:b0:3c:a9:fd:f0:cc:3c:98:a8:1e:c7:e3:70:20:31:9f:
         9a:00:1e:ad:d8:d2:04:31:17:2b:11:18:f9:32:92:20:8b:ed:
         a8:f2:23:fa:8b:02:f3:3e:04:4b:5a:d7:1c:ad:b5:0d:d8:58:
         33:b4:a2:71:96:bb:f3:5e:3e:e9:79:a9:e1:3d:4a:2e:c6:67:
         37:fe:a1:a9:2c:ab:e1:6a:48:d0:b8:a7:57:a2:46:e8:5d:09:
         e6:89:9f:e8:ba:4f:17:3e:67:8c:a9:21:fc:a7:b9:f8:26:57:
         f1:a0:a2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:14 2026 by rpki-client