This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B7528CCF21811F0A06D53B3DAE4EC9C.roa
File:                     1B7528CCF21811F0A06D53B3DAE4EC9C.roa (raw, json)
Hash identifier:          kYTvJhv37AhWmP0e5jxlxjcvm1hedDxxg2QNoISo5LE=
Subject key identifier:   2D:2C:EB:54:5E:1D:81:F1:D6:58:3C:EF:C4:4B:54:4F:F1:90:B9:3B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019724
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B7528CCF21811F0A06D53B3DAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 13:43:01 +0000
ROA not before:           Thu 15 Jan 2026 13:42:56 +0000
ROA not after:            Sun 22 Feb 2026 13:42:56 +0000
asID:                     57043
IP address blocks:        45.197.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104228 (0x19724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 15 13:42:56 2026 GMT
            Not After : Feb 22 13:42:56 2026 GMT
        Subject: CN=6968eee4-14df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bd:1b:d7:6f:c3:1e:a3:0b:7a:57:9a:a7:23:
                    64:d8:25:91:8a:aa:0f:39:40:8d:4c:9a:13:0e:3f:
                    42:14:e2:79:98:3b:69:0b:b5:4f:b8:06:4d:22:52:
                    9e:f1:10:64:fe:05:70:3e:2e:31:e5:10:89:6f:38:
                    a8:50:9b:09:f1:57:24:8e:b3:df:96:35:c0:1f:80:
                    04:3e:14:c0:a3:4a:9a:54:7d:7b:b5:53:e7:7f:99:
                    c5:53:7d:cb:60:e1:bb:dd:34:5c:d5:f8:5b:e1:08:
                    bd:a1:e6:66:61:1c:f8:6e:cd:8b:35:f4:91:07:1f:
                    83:c2:bf:15:6f:29:70:a3:ec:51:f0:23:8d:ea:e5:
                    37:7e:b2:a1:fd:42:5f:c2:05:f7:cb:60:1d:9a:b7:
                    cf:d5:3a:82:55:a9:eb:15:1a:a7:61:ed:50:3d:26:
                    b1:5a:62:1e:38:08:3b:77:22:72:97:46:a2:4d:38:
                    6e:9c:98:8a:7a:df:20:90:36:df:83:30:bd:b3:e6:
                    0d:82:a3:5a:dd:3b:a6:ab:df:62:a7:37:0c:17:dd:
                    6e:11:f7:11:46:2f:9e:7f:b9:53:b5:03:28:ca:e7:
                    e6:7f:8e:33:25:e7:f7:ae:4f:d2:23:b9:2e:cc:ee:
                    d3:61:78:0e:e0:a3:2f:94:86:77:b7:76:81:86:a3:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2C:EB:54:5E:1D:81:F1:D6:58:3C:EF:C4:4B:54:4F:F1:90:B9:3B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B7528CCF21811F0A06D53B3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:fc:a7:37:bc:46:b4:86:ce:f5:8d:2b:fc:37:ff:aa:87:04:
         19:b9:fb:00:fb:c1:b9:4b:a5:1f:76:2c:37:49:d1:22:b6:0f:
         f7:e4:08:fa:28:f0:b1:27:a1:9b:fb:ee:fe:fa:1e:11:5e:cb:
         c7:e7:e4:ea:16:7f:3c:81:4a:4e:c5:c0:0b:1d:1b:56:6f:ec:
         af:ff:e9:f6:fe:2b:3e:16:10:e1:f2:9e:72:80:30:f3:60:d4:
         e3:19:a4:c2:13:e2:da:57:f1:dd:2f:2f:e6:01:47:06:93:2e:
         0a:b6:61:cb:0f:14:52:7d:d5:9c:fc:1a:ba:09:47:ca:c2:71:
         14:df:a0:3d:62:6a:59:78:25:8f:f1:e4:a5:94:a6:50:c5:1f:
         20:31:2b:8d:ac:e2:bb:bf:cf:53:4b:ed:d2:02:1b:8c:a6:bf:
         fa:88:a7:05:58:e3:0d:46:fd:59:9c:9a:8f:db:3b:cc:34:05:
         88:3d:85:df:ce:29:24:19:f1:5b:3c:37:bd:99:43:0e:ff:b5:
         24:33:89:a4:ad:7c:d6:6b:62:78:3c:ac:81:ec:3c:e2:07:99:
         6e:8f:8b:04:75:a0:e0:ca:c6:d0:15:5b:5a:52:7c:cc:39:a5:
         3d:79:0a:86:f0:db:bc:7d:54:d4:15:a9:5e:b0:9c:1c:f7:57:
         a5:90:9a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:32 2026 by rpki-client