This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27BC06B401A411F1881FAEADDAE4EC9C.roa
File:                     27BC06B401A411F1881FAEADDAE4EC9C.roa (raw, json)
Hash identifier:          cb0RTQ4TfiYq0N+ZYYE7SgKLSouiTQ7b6I11vfn9bbI=
Subject key identifier:   B8:D9:71:53:37:97:16:EA:80:6D:08:3F:AC:F3:ED:6F:BC:A2:5D:30
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019BCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27BC06B401A411F1881FAEADDAE4EC9C.roa
Signing time:             Wed 04 Feb 2026 08:33:18 +0000
ROA not before:           Wed 04 Feb 2026 08:32:58 +0000
ROA not after:            Thu 12 Mar 2026 08:32:58 +0000
asID:                     63139
IP address blocks:        45.197.103.0/24 maxlen: 24
                          45.197.104.0/24 maxlen: 24
                          45.197.105.0/24 maxlen: 24
                          45.197.106.0/24 maxlen: 24
                          45.197.107.0/24 maxlen: 24
                          45.197.108.0/24 maxlen: 24
                          45.197.109.0/24 maxlen: 24
                          45.197.110.0/24 maxlen: 24
                          45.197.111.0/24 maxlen: 24
                          45.197.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Feb 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105419 (0x19bcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb  4 08:32:58 2026 GMT
            Not After : Mar 12 08:32:58 2026 GMT
        Subject: CN=6983044e-3d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:49:7e:5c:c4:41:e8:a7:df:70:2e:1b:95:45:
                    7c:ba:39:97:68:b9:60:9a:0c:cb:80:ec:88:ef:f3:
                    87:a5:82:e7:0b:15:0d:dd:39:7a:c6:e2:52:09:53:
                    56:db:24:0c:e0:e2:00:d6:d3:02:95:3e:3e:3a:95:
                    9c:b2:23:0d:dc:69:3f:5a:dc:b3:30:e0:6a:58:a4:
                    da:96:1e:ce:a3:3a:78:26:19:52:ff:64:df:c9:e4:
                    0a:cb:9a:9a:66:95:32:fc:fb:17:fe:30:bd:ce:75:
                    0c:db:58:ce:f7:76:0a:c1:7f:fd:7c:d7:42:11:50:
                    e8:8a:d2:c6:61:6f:79:0b:25:fa:12:57:f3:13:4c:
                    e9:ef:8c:ef:a4:a8:f7:1a:4f:c9:4d:71:d1:b3:e1:
                    66:f1:fc:4e:03:fb:5b:0b:08:b2:7e:6d:19:31:4e:
                    d4:01:b8:da:d6:5f:dc:64:8d:bd:9f:9a:d9:66:48:
                    28:3a:90:5c:61:a2:72:8f:7a:b1:01:8d:cd:ba:6c:
                    64:e4:8f:3c:c4:22:c2:5f:2a:5f:02:93:07:91:c6:
                    d6:5f:86:e7:3e:b4:2b:5e:e5:3a:87:ea:21:14:9c:
                    13:30:fb:cf:9e:e6:13:67:e8:10:86:05:dc:b5:f0:
                    3b:c7:e5:d7:76:30:70:dc:c9:1e:07:cc:4b:0a:65:
                    1a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D9:71:53:37:97:16:EA:80:6D:08:3F:AC:F3:ED:6F:BC:A2:5D:30
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27BC06B401A411F1881FAEADDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.103.0-45.197.112.255

    Signature Algorithm: sha256WithRSAEncryption
         18:b5:d2:b8:f3:17:72:1b:03:dc:3c:9d:ed:bc:7c:0b:b1:17:
         d2:05:a6:6c:58:ab:e9:27:91:c2:8e:ff:9a:e4:e1:db:d8:72:
         63:37:aa:67:e3:0c:41:50:ac:a0:84:bd:00:0a:d0:28:01:e2:
         a6:2a:5d:da:3d:be:41:e6:a8:f8:7d:8a:66:d7:41:cd:1b:58:
         ab:25:81:0c:e8:a7:41:f6:ca:d6:77:34:4b:76:19:6e:55:3b:
         07:e9:02:f4:40:a7:1a:de:98:30:a1:e5:21:50:bb:6b:87:02:
         f3:4e:fe:78:6e:c6:8f:e2:aa:74:9f:c6:2d:9b:3f:28:4b:b0:
         16:10:99:94:89:80:e3:d1:9e:07:19:b1:d4:b4:16:bc:de:a6:
         92:28:32:60:10:96:7e:d1:84:80:df:47:38:ba:89:1e:62:f1:
         1d:b7:e4:db:60:a3:da:97:f7:7c:c5:48:55:06:8d:de:b7:c9:
         7d:e4:de:d0:ba:dd:14:f2:d5:3b:11:b5:0d:90:30:29:0e:e0:
         46:6a:91:d7:42:44:1a:26:e8:58:f8:da:51:a2:af:b4:5e:d0:
         e0:f9:65:e1:af:f9:93:bb:1d:5a:b9:16:db:6b:7f:8a:7b:6a:
         39:24:00:a8:20:82:30:a0:ea:20:b9:3d:50:f4:d2:f7:43:eb:
         83:f7:d8:d8
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAZvLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjA0MDgzMjU4WhcNMjYwMzEyMDgzMjU4WjAYMRYw
FAYDVQQDEw02OTgzMDQ0ZS0zZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3El+XMRB6KffcC4blUV8ujmXaLlgmgzLgOyI7/OHpYLnCxUN3Tl6xuJS
CVNW2yQM4OIA1tMClT4+OpWcsiMN3Gk/WtyzMOBqWKTalh7Oozp4JhlS/2TfyeQK
y5qaZpUy/PsX/jC9znUM21jO93YKwX/9fNdCEVDoitLGYW95CyX6ElfzE0zp74zv
pKj3Gk/JTXHRs+Fm8fxOA/tbCwiyfm0ZMU7UAbja1l/cZI29n5rZZkgoOpBcYaJy
j3qxAY3Numxk5I88xCLCXypfApMHkcbWX4bnPrQrXuU6h+ohFJwTMPvPnuYTZ+gQ
hgXctfA7x+XXdjBw3MkeB8xLCmUaSwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLjZ
cVM3lxbqgG0IP6zz7W+8ol0wMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yN0JDMDZCNDAxQTQxMUYxODgxRkFFQUREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtxWcDBAAtxXAwDQYJKoZI
hvcNAQELBQADggEBABi10rjzF3IbA9w8ne28fAuxF9IFpmxYq+knkcKO/5rk4dvY
cmM3qmfjDEFQrKCEvQAK0CgB4qYqXdo9vkHmqPh9imbXQc0bWKslgQzop0H2ytZ3
NEt2GW5VOwfpAvRApxremDCh5SFQu2uHAvNO/nhuxo/iqnSfxi2bPyhLsBYQmZSJ
gOPRngcZsdS0FrzeppIoMmAQln7RhIDfRzi6iR5i8R235Ntgo9qX93zFSFUGjd63
yX3k3tC63RTy1TsRtQ2QMCkO4EZqkddCRBom6Fj42lGir7Re0OD5ZeGv+ZO7HVq5
Fttrf4p7ajkkAKgggjCg6iC5PVD00vdD64P32Ng=
-----END CERTIFICATE-----
Generated at Mon Feb 9 07:44:48 2026 by rpki-client