This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C6FC78CF69511F0BDCF81AEDAE4EC9C.roa
File:                     2C6FC78CF69511F0BDCF81AEDAE4EC9C.roa (raw, json)
Hash identifier:          GHFWF5PRhw5PeuWdGZGAW0o6dqioU3Mc0vwV4pJKjt4=
Subject key identifier:   7A:31:53:A8:A5:78:02:76:AE:D3:1D:6B:13:9A:81:FE:D9:EA:5A:B8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0197FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C6FC78CF69511F0BDCF81AEDAE4EC9C.roa
Signing time:             Wed 21 Jan 2026 06:48:21 +0000
ROA not before:           Wed 21 Jan 2026 06:48:16 +0000
ROA not after:            Tue 17 Feb 2026 06:48:16 +0000
asID:                     11404
IP address blocks:        45.204.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 24 Jan 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104444 (0x197fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 21 06:48:16 2026 GMT
            Not After : Feb 17 06:48:16 2026 GMT
        Subject: CN=697076b5-edbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:89:88:a7:01:11:6b:63:3a:0b:68:8e:b7:
                    e0:91:c7:ff:f5:e8:3e:09:1d:ca:77:a4:5b:c3:c2:
                    79:52:96:3e:e7:a5:d0:16:21:d4:0c:b9:c1:49:12:
                    db:71:b1:42:9f:a9:4a:fb:db:7c:eb:68:64:8a:e4:
                    4f:cf:11:f8:5a:50:13:78:6f:c9:7e:56:0d:ad:91:
                    fc:e6:18:97:2e:79:6d:76:2e:08:c8:0f:c3:d7:9c:
                    e8:5e:44:c9:56:f3:21:9d:d0:a8:a7:14:80:9f:eb:
                    c3:0d:77:6b:65:39:da:37:da:9a:a2:a7:fc:a0:0d:
                    ee:92:9d:ec:d9:5e:0f:47:e8:99:d9:d3:ae:18:ef:
                    10:88:bb:65:9c:ad:dd:30:c0:66:07:74:5a:4c:41:
                    33:6a:63:99:09:33:d6:c5:87:34:48:ff:86:a0:63:
                    28:03:fa:70:a8:15:45:ef:a1:5f:80:2b:41:99:c1:
                    4f:06:fb:28:d2:7c:b4:43:5b:3c:99:72:9d:f0:b8:
                    65:bb:d2:bd:33:1c:95:99:9e:b1:11:53:71:9d:40:
                    ed:b9:dc:39:ab:94:06:49:cf:c9:bb:f1:bf:68:0d:
                    26:a7:06:2c:88:a3:d8:17:71:5a:2b:27:d1:fc:1e:
                    f7:43:e9:65:cd:11:d7:d5:6c:18:36:72:29:35:11:
                    c5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:31:53:A8:A5:78:02:76:AE:D3:1D:6B:13:9A:81:FE:D9:EA:5A:B8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C6FC78CF69511F0BDCF81AEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:9c:97:d0:1e:dd:f9:4c:b0:b5:a5:2d:19:ce:94:2f:89:71:
         b8:f8:5d:0d:a9:c7:02:2a:fd:e5:ca:68:f8:c6:dc:40:62:13:
         c9:85:31:31:44:63:4a:f0:3e:84:52:46:42:89:b6:c7:1d:90:
         77:68:8f:d9:d3:30:46:3b:46:cd:7f:b0:00:21:3b:e3:3c:8b:
         25:42:36:7e:c2:91:73:36:1c:1e:e2:bb:0c:04:70:e1:c4:62:
         f9:21:23:03:09:6b:8e:03:06:cd:77:d0:70:56:aa:82:a7:ba:
         f5:49:48:10:ba:b0:da:d1:26:a3:43:de:89:cf:81:65:8a:dd:
         85:5f:d5:76:d2:33:e8:1e:dc:60:c6:8a:85:69:90:53:84:d0:
         3c:3f:ca:22:dd:98:89:89:39:8a:cd:c4:c7:99:44:4a:37:62:
         aa:e1:18:9e:6d:ed:2a:a3:ed:df:6a:90:87:3e:a8:15:b2:8f:
         f0:01:7c:18:b5:a8:54:d5:02:7a:3d:0b:8e:35:54:d8:9e:11:
         18:a4:ed:f5:75:94:c6:a4:90:2b:a4:ec:28:4e:0d:28:87:68:
         15:ac:b9:a4:1a:79:a7:6f:ac:b9:80:a2:c5:6d:7f:f5:c9:2b:
         7a:5a:e1:c8:c2:a9:1c:0e:f9:64:6e:91:69:4d:eb:cf:fb:85:
         1c:ac:29:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 07:30:08 2026 by rpki-client