This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BFF74D6ED3511F09D4CB4ABDAE4EC9C.roa
File:                     3BFF74D6ED3511F09D4CB4ABDAE4EC9C.roa (raw, json)
Hash identifier:          41pDhjl01AlI5/LGK4GcamO7MVU+ZvCcXQDS5JKI/2E=
Subject key identifier:   01:C3:5D:A4:CE:9C:E2:6D:D3:BE:31:F2:35:C9:E2:38:44:20:50:94
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0195A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BFF74D6ED3511F09D4CB4ABDAE4EC9C.roa
Signing time:             Fri 09 Jan 2026 08:28:55 +0000
ROA not before:           Fri 09 Jan 2026 08:28:48 +0000
ROA not after:            Mon 16 Feb 2026 08:28:48 +0000
asID:                     51142
IP address blocks:        45.195.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103843 (0x195a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  9 08:28:48 2026 GMT
            Not After : Feb 16 08:28:48 2026 GMT
        Subject: CN=6960bc47-6adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ae:5a:48:90:0c:df:4c:f5:56:d8:51:1b:41:
                    12:09:97:f7:81:a1:e3:46:31:2e:93:61:43:cd:47:
                    c5:44:0e:60:71:56:6d:33:13:f3:b7:2d:2b:d7:1a:
                    19:13:11:0b:b8:20:0a:69:be:dd:93:6d:da:50:4d:
                    3e:4d:97:f7:96:97:2d:cb:2c:92:04:d3:da:c2:de:
                    e3:a0:48:c7:c8:06:bd:4c:8c:a2:80:05:bf:47:0a:
                    d8:ba:cc:50:30:5a:12:22:13:6d:5b:49:b8:71:8e:
                    04:2d:81:b1:1a:e7:3d:ac:a1:d4:b7:d7:30:50:63:
                    88:67:1c:16:3f:d4:b7:61:52:a0:34:69:b5:74:35:
                    1e:04:bb:f5:8e:c7:d5:3c:bd:85:8e:65:bb:94:93:
                    31:41:f1:b8:04:7a:7e:b0:ff:80:0d:48:59:fc:d8:
                    e6:07:32:59:f2:ce:14:41:0e:01:e3:7c:07:99:b6:
                    58:c9:eb:17:7a:11:84:e6:02:46:0e:8d:25:d9:2b:
                    75:30:5f:e0:91:a8:5c:d9:1c:66:ea:e8:b9:84:dc:
                    78:e7:75:59:e6:cc:14:d9:fb:4a:5b:0e:2b:59:9b:
                    b3:10:81:60:3a:45:de:96:7c:81:f8:cf:e2:7b:6e:
                    bb:5c:58:b8:49:bc:3d:b4:8f:ba:51:90:e6:74:96:
                    32:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C3:5D:A4:CE:9C:E2:6D:D3:BE:31:F2:35:C9:E2:38:44:20:50:94
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BFF74D6ED3511F09D4CB4ABDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:02:9c:1f:81:0a:a0:ce:57:be:10:7f:b4:cb:aa:9a:0a:11:
         7b:4c:1b:f9:ae:e2:f3:f1:bf:53:78:0c:b1:e9:b2:b2:d3:bd:
         50:2c:b2:65:51:f2:b6:75:40:be:93:d1:c6:b4:64:d9:5a:37:
         9f:c6:4b:ef:b1:19:7d:8d:f4:02:82:f3:8a:f2:38:c8:31:fa:
         e8:19:7d:a2:93:a1:95:9b:11:bc:29:3e:03:36:18:d4:d6:79:
         e6:37:63:37:bc:50:10:9b:b7:59:10:6a:d3:0b:3b:28:d6:8e:
         21:dc:98:d8:d0:2b:8e:34:23:79:c2:29:fd:fb:1e:a6:56:a1:
         68:74:0a:26:bf:fd:7a:66:2d:e8:b3:09:c9:86:50:0a:b2:b8:
         15:ce:58:b6:70:3f:f0:5f:58:b1:3f:8b:57:fa:b5:46:10:ae:
         5f:91:bd:a3:2c:b1:31:07:ff:31:9a:fe:61:65:a5:9f:a6:46:
         18:7f:c2:75:ce:91:56:e3:18:09:c2:fe:2a:2f:25:a4:45:25:
         ac:12:71:7c:a8:e6:ef:65:3f:dd:eb:6b:2b:94:77:d1:2f:0e:
         e4:02:1d:27:a6:6d:c5:70:3a:10:5a:f0:6c:9b:1b:52:b6:49:
         2c:2e:bf:ef:f5:7a:a4:e6:20:96:b2:a2:9b:0e:3b:cc:b4:54:
         5e:0f:8c:40
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZWjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTA5MDgyODQ4WhcNMjYwMjE2MDgyODQ4WjAYMRYw
FAYDVQQDEw02OTYwYmM0Ny02YWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7a5aSJAM30z1VthRG0ESCZf3gaHjRjEuk2FDzUfFRA5gcVZtMxPzty0r
1xoZExELuCAKab7dk23aUE0+TZf3lpctyyySBNPawt7joEjHyAa9TIyigAW/RwrY
usxQMFoSIhNtW0m4cY4ELYGxGuc9rKHUt9cwUGOIZxwWP9S3YVKgNGm1dDUeBLv1
jsfVPL2FjmW7lJMxQfG4BHp+sP+ADUhZ/NjmBzJZ8s4UQQ4B43wHmbZYyesXehGE
5gJGDo0l2St1MF/gkahc2Rxm6ui5hNx453VZ5swU2ftKWw4rWZuzEIFgOkXelnyB
+M/ie267XFi4Sbw9tI+6UZDmdJYyEQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAHD
XaTOnOJt074x8jXJ4jhEIFCUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQkZGNzRENkVEMzUxMUYwOUQ0Q0I0QUJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOLMA0GCSqGSIb3DQEBCwUA
A4IBAQCLApwfgQqgzle+EH+0y6qaChF7TBv5ruLz8b9TeAyx6bKy071QLLJlUfK2
dUC+k9HGtGTZWjefxkvvsRl9jfQCgvOK8jjIMfroGX2ik6GVmxG8KT4DNhjU1nnm
N2M3vFAQm7dZEGrTCzso1o4h3JjY0CuONCN5win9+x6mVqFodAomv/16Zi3oswnJ
hlAKsrgVzli2cD/wX1ixP4tX+rVGEK5fkb2jLLExB/8xmv5hZaWfpkYYf8J1zpFW
4xgJwv4qLyWkRSWsEnF8qObvZT/d62srlHfRLw7kAh0npm3FcDoQWvBsmxtStkks
Lr/v9Xqk5iCWsqKbDjvMtFReD4xA
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:26 2026 by rpki-client