This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2918D8FAEBBC11F097E3FA95DAE4EC9C.roa
File:                     2918D8FAEBBC11F097E3FA95DAE4EC9C.roa (raw, json)
Hash identifier:          U7jxUsjoxSeNdK+mrwe5jsXNvE+8BbhTT0zPUA/hOuE=
Subject key identifier:   7D:DB:3E:83:90:C4:D2:3C:E4:A2:C5:96:E8:15:C3:5F:55:F7:D8:8D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019526
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2918D8FAEBBC11F097E3FA95DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 11:29:43 +0000
ROA not before:           Wed 07 Jan 2026 11:29:37 +0000
ROA not after:            Sun 15 Feb 2026 11:29:37 +0000
asID:                     152711
IP address blocks:        45.202.64.0/24 maxlen: 24
                          45.202.65.0/24 maxlen: 24
                          45.202.66.0/24 maxlen: 24
                          45.202.67.0/24 maxlen: 24
                          45.202.209.0/24 maxlen: 24
                          45.202.210.0/24 maxlen: 24
                          45.202.211.0/24 maxlen: 24
                          45.202.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103718 (0x19526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  7 11:29:37 2026 GMT
            Not After : Feb 15 11:29:37 2026 GMT
        Subject: CN=695e43a7-bc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:60:d3:5d:7b:8a:10:b2:6e:81:16:4e:6c:3b:
                    af:9e:94:5f:7b:86:94:f4:92:9c:4d:89:ee:d5:36:
                    eb:0b:a6:00:59:07:6a:ce:ae:e6:64:29:5e:41:0f:
                    56:a3:b1:d6:ca:7f:d9:f1:20:da:dc:1a:3c:d4:97:
                    69:98:e6:55:e4:93:94:de:7a:05:ea:1a:d3:ba:7d:
                    cd:73:51:5a:cc:70:49:d8:69:c6:2e:af:03:db:b5:
                    55:73:d5:b2:55:4d:46:de:bd:57:7c:61:3e:d2:55:
                    35:50:49:26:77:23:ed:b5:cc:b1:a3:42:a3:1b:76:
                    e9:02:6e:93:03:90:a5:14:dc:5d:03:74:1d:4e:76:
                    61:fb:ac:05:78:e1:fa:29:02:04:23:03:c5:cb:d9:
                    0d:3d:69:35:33:a1:43:a5:60:d0:a5:c8:72:8f:14:
                    f3:7e:af:98:48:6e:74:cf:1a:57:c9:80:16:13:b8:
                    57:19:ef:02:f0:da:9b:04:61:49:10:ff:ef:a1:1c:
                    8b:d8:47:40:6a:e6:c3:2e:37:4f:8c:64:e6:b1:27:
                    78:29:c0:8a:d5:52:45:ca:aa:34:46:4b:a4:26:e6:
                    f8:4d:56:8d:c1:00:9d:92:5e:fc:8d:24:27:32:2c:
                    f8:d6:c6:51:2c:5d:1c:e6:db:41:db:f1:9d:d2:46:
                    12:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DB:3E:83:90:C4:D2:3C:E4:A2:C5:96:E8:15:C3:5F:55:F7:D8:8D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2918D8FAEBBC11F097E3FA95DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.64.0/22
                  45.202.209.0-45.202.212.255

    Signature Algorithm: sha256WithRSAEncryption
         0d:a6:95:a1:d5:d9:1a:66:0b:f5:dd:a2:54:bb:8e:55:b5:e4:
         1c:18:09:8e:35:2f:0c:b4:b1:41:04:57:fb:76:c8:22:51:08:
         c0:3c:ae:76:be:7b:78:e0:f5:35:df:a7:67:cf:c9:6e:f8:ce:
         b6:0f:c9:22:5b:48:e5:e9:71:4e:04:a8:2f:90:ec:3c:a4:8d:
         f0:43:a9:02:09:db:42:8b:a2:38:4a:b8:c6:4e:4c:c3:93:80:
         40:a1:29:f6:15:03:9e:5f:a0:e3:e5:c5:27:15:7e:7c:9f:42:
         f4:b5:f2:70:57:3f:d0:18:34:02:65:b0:02:00:2a:da:3a:c2:
         97:e7:24:a7:8c:2e:db:7a:69:ba:1f:bb:4b:be:cd:e7:a2:a5:
         89:87:b3:5e:b4:05:ca:24:69:b4:d6:ee:32:35:91:cf:92:d8:
         f8:3b:b5:9b:39:99:0b:94:1a:60:39:19:4f:8e:67:b0:e0:a7:
         c2:c3:e8:0d:12:8e:4d:d4:74:4d:1d:7c:9f:e5:9e:09:3d:ba:
         04:ec:a1:99:44:b1:87:5e:63:76:28:23:e1:ee:01:59:bf:f9:
         a0:8d:25:5b:e5:ba:f7:c8:de:3c:b0:08:41:3f:49:09:7a:1d:
         b5:0d:a2:2f:4f:06:01:38:05:cb:39:04:38:39:af:25:12:4f:
         2f:20:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:25 2026 by rpki-client