This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B7D5C6E04B211F19B77FCF4DAE4EC9C.roa
File:                     3B7D5C6E04B211F19B77FCF4DAE4EC9C.roa (raw, json)
Hash identifier:          B2ixn4I3tCvaPPXfSip7C/plAgYKzgFYvOqbiy8Hspg=
Subject key identifier:   34:37:DB:32:FE:23:3B:BA:4E:B8:63:BA:62:36:9A:15:32:A2:72:1A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019C48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B7D5C6E04B211F19B77FCF4DAE4EC9C.roa
Signing time:             Sun 08 Feb 2026 05:51:38 +0000
ROA not before:           Sun 08 Feb 2026 05:51:33 +0000
ROA not after:            Thu 08 Feb 2029 05:51:33 +0000
asID:                     17561
IP address blocks:        45.195.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Feb 2026 10:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105544 (0x19c48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb  8 05:51:33 2026 GMT
            Not After : Feb  8 05:51:33 2029 GMT
        Subject: CN=6988246a-22d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:68:6c:18:1e:e5:b4:07:79:ab:fd:7e:31:b1:
                    5b:14:9f:9a:20:3a:e4:a9:ea:2c:8e:a2:42:d8:ef:
                    e0:dd:1b:ea:29:27:9e:8f:38:25:2e:94:8e:a6:75:
                    bf:c9:60:df:93:ff:a5:6c:80:e4:df:fd:c8:9b:3a:
                    9f:72:8d:bb:f2:6f:e0:f6:d8:13:44:c8:87:81:b7:
                    41:f9:e6:8f:6a:4c:fa:da:ec:ca:e7:6d:ff:8e:41:
                    c4:b7:47:9b:fb:f0:eb:76:3a:60:84:2a:cd:53:e2:
                    4b:58:db:4f:93:c2:29:fe:37:da:24:2b:bd:2e:14:
                    62:f0:2b:20:f2:b5:22:11:ce:ee:a8:91:7f:fe:02:
                    62:de:26:be:7e:70:a0:e3:4e:dc:fb:0e:e1:43:70:
                    7d:a0:ad:89:b4:78:a1:2d:71:fc:a5:5b:06:86:3f:
                    7d:5c:00:86:fc:8f:f1:61:42:a1:13:cf:99:ef:48:
                    81:c8:f9:76:60:cd:e9:fb:38:d2:64:eb:4d:82:1d:
                    cb:37:c1:15:30:86:1e:3c:e9:3d:17:37:73:09:0c:
                    dd:f8:c5:91:28:8b:86:30:aa:0a:f1:8f:ea:70:52:
                    50:38:0d:26:d4:2c:ea:64:20:e3:db:2b:c6:b9:30:
                    39:32:f4:61:43:8a:00:13:1b:74:9e:5c:bc:69:ff:
                    5b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:37:DB:32:FE:23:3B:BA:4E:B8:63:BA:62:36:9A:15:32:A2:72:1A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B7D5C6E04B211F19B77FCF4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ec:37:25:b6:5f:57:aa:6a:f6:df:bf:b5:71:08:ca:e8:cf:
         f7:16:1c:7b:de:34:b8:ba:e0:7b:c9:04:03:17:dd:ba:00:67:
         f1:b0:af:54:40:72:81:82:05:1f:26:21:d6:11:92:27:23:31:
         92:c4:92:5a:ff:e4:9a:4c:95:40:cc:4c:6a:ab:6a:3f:11:bf:
         a3:1b:10:6b:36:09:1f:ab:5c:1d:ea:f7:79:7f:15:ee:51:00:
         de:55:8c:aa:9c:c6:ea:20:c6:4d:d4:8f:ca:e1:d6:97:ac:75:
         c1:b7:b4:1f:64:2f:06:64:61:f8:6a:c8:6c:bc:b0:e2:31:f6:
         e3:d4:86:31:4d:ff:b0:d1:e9:db:73:29:8c:bb:cc:32:ee:fc:
         5a:da:27:04:78:2d:e1:71:08:1b:43:38:b4:cb:b8:05:46:6e:
         e1:03:75:e7:95:4d:1a:9a:37:bf:4c:08:f6:3e:8b:bb:3f:f6:
         8f:1a:80:a3:17:1c:3b:55:c7:aa:4e:ab:f0:b4:af:04:c0:b4:
         0e:40:55:60:9e:ee:03:08:9c:f9:0e:bf:89:f6:c4:45:d5:e6:
         dd:d2:93:59:cc:85:d4:d2:6e:65:ab:ab:33:a7:2a:52:14:15:
         46:9e:24:9b:02:41:58:fc:0c:4c:5d:55:4b:aa:06:bf:76:92:
         2f:0e:c4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:47:25 2026 by rpki-client