This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/434E61E4EF8711F0B373D1F2DAE4EC9C.roa
File:                     434E61E4EF8711F0B373D1F2DAE4EC9C.roa (raw, json)
Hash identifier:          ITN8utd1yi/Atv5HNkcJYfPVBZrfEk3FDtPyT1c+bi0=
Subject key identifier:   D7:5E:28:D5:56:F4:75:2B:A7:80:7D:0F:F4:0D:35:AA:EA:74:D3:9E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019636
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/434E61E4EF8711F0B373D1F2DAE4EC9C.roa
Signing time:             Mon 12 Jan 2026 07:21:08 +0000
ROA not before:           Mon 12 Jan 2026 07:21:03 +0000
ROA not after:            Sun 05 Apr 2026 07:21:03 +0000
asID:                     149440
IP address blocks:        45.194.27.0/24 maxlen: 24
                          45.195.69.0/24 maxlen: 24
                          45.195.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103990 (0x19636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 12 07:21:03 2026 GMT
            Not After : Apr  5 07:21:03 2026 GMT
        Subject: CN=6964a0e4-0fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:a5:ec:6c:c0:4f:59:1d:12:67:e8:41:03:
                    7f:d6:b4:53:d5:33:ed:cd:90:33:d7:6f:53:39:f4:
                    77:fb:e7:0c:4d:55:69:04:ea:c3:eb:16:a5:f2:b7:
                    81:d0:cb:44:26:f8:b8:49:73:f2:68:5d:0d:02:f9:
                    52:4d:1b:52:ad:5b:22:16:bd:0e:7f:39:d7:98:f3:
                    31:b4:9d:d4:23:74:2f:63:84:f3:a5:5f:de:f4:ab:
                    0a:7b:c5:ba:b6:d9:a7:6e:18:33:63:8c:cc:53:92:
                    94:f6:5d:b2:2d:80:6f:6c:04:59:06:91:07:cd:b2:
                    38:9f:3c:ad:a3:bc:36:b2:33:e4:68:a9:ed:e8:5a:
                    a7:d8:b8:23:a3:3e:df:ba:4e:06:4b:82:2a:09:1a:
                    8a:05:27:9b:26:a3:11:0c:ad:7b:f9:98:ea:65:89:
                    5b:1c:84:01:75:6e:34:c4:84:07:31:f9:03:63:7f:
                    c5:0f:ce:d7:34:b0:3d:78:69:36:54:bc:c9:8e:b5:
                    85:0c:5b:8a:e1:df:c2:33:d6:07:67:9d:18:9a:bf:
                    58:7f:e3:c0:73:90:37:fd:25:81:7d:2b:05:d0:b1:
                    c0:ad:4f:ef:fa:7a:a9:bd:af:7d:eb:42:f1:1e:fe:
                    7f:ea:78:58:13:11:5f:0c:3f:90:37:88:54:32:09:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5E:28:D5:56:F4:75:2B:A7:80:7D:0F:F4:0D:35:AA:EA:74:D3:9E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/434E61E4EF8711F0B373D1F2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.27.0/24
                  45.195.69.0/24
                  45.195.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:e3:95:e9:7e:4a:3c:a0:95:3e:28:7c:39:77:2e:d1:22:05:
         24:7c:f1:c9:59:1f:0a:34:80:13:23:78:7c:ce:3d:f5:dd:c7:
         0b:4f:b0:02:8d:24:2c:5d:09:75:94:9c:b7:56:c9:42:e1:85:
         6f:4b:12:63:10:e9:0f:e2:99:95:eb:e2:37:84:f6:d4:3b:0b:
         bd:6b:fd:b7:4a:e3:75:7f:54:9d:3a:15:42:8c:be:41:b2:b0:
         a2:56:7b:4e:2a:59:ad:27:ac:d3:c9:45:30:6e:5a:89:9c:90:
         96:48:1d:ac:a6:bb:90:eb:40:7d:e0:b4:6e:55:f4:98:fa:e5:
         2a:d3:c3:af:2a:94:e6:6c:2e:7d:94:09:0a:e0:c5:40:cb:a1:
         09:d3:3f:ac:90:56:8a:c7:a9:31:d9:03:ac:c2:a4:8c:e7:63:
         c5:9b:cd:c5:a0:21:2b:45:78:fa:96:b3:e2:b1:07:29:f0:41:
         6b:7f:95:d7:e2:d9:ca:d2:79:ad:e4:72:9b:17:2e:24:95:fd:
         fa:4e:93:f8:67:4f:b6:16:9f:31:14:10:18:22:86:d3:af:a2:
         a1:b2:bb:fc:70:4c:60:78:44:ef:2c:bf:a7:45:34:41:75:c2:
         85:0a:49:e8:6f:42:a4:a6:72:0e:cc:ae:dd:bb:c6:a2:a1:d8:
         d2:58:75:04
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAZY2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTEyMDcyMTAzWhcNMjYwNDA1MDcyMTAzWjAYMRYw
FAYDVQQDEw02OTY0YTBlNC0wZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsQyl7GzAT1kdEmfoQQN/1rRT1TPtzZAz129TOfR3++cMTVVpBOrD6xal
8reB0MtEJvi4SXPyaF0NAvlSTRtSrVsiFr0OfznXmPMxtJ3UI3QvY4TzpV/e9KsK
e8W6ttmnbhgzY4zMU5KU9l2yLYBvbARZBpEHzbI4nzyto7w2sjPkaKnt6Fqn2Lgj
oz7fuk4GS4IqCRqKBSebJqMRDK17+ZjqZYlbHIQBdW40xIQHMfkDY3/FD87XNLA9
eGk2VLzJjrWFDFuK4d/CM9YHZ50Ymr9Yf+PAc5A3/SWBfSsF0LHArU/v+nqpva99
60LxHv5/6nhYExFfDD+QN4hUMgnbJwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFNde
KNVW9HUrp4B9D/QNNarqdNOeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MzRFNjFFNEVGODcxMUYwQjM3M0QxRjJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALcIbAwQALcNFAwQALcNMMA0G
CSqGSIb3DQEBCwUAA4IBAQCS45Xpfko8oJU+KHw5dy7RIgUkfPHJWR8KNIATI3h8
zj313ccLT7ACjSQsXQl1lJy3VslC4YVvSxJjEOkP4pmV6+I3hPbUOwu9a/23SuN1
f1SdOhVCjL5BsrCiVntOKlmtJ6zTyUUwblqJnJCWSB2spruQ60B94LRuVfSY+uUq
08OvKpTmbC59lAkK4MVAy6EJ0z+skFaKx6kx2QOswqSM52PFm83FoCErRXj6lrPi
sQcp8EFrf5XX4tnK0nmt5HKbFy4klf36TpP4Z0+2Fp8xFBAYIobTr6Khsrv8cExg
eETvLL+nRTRBdcKFCknob0KkpnIOzK7du8aiodjSWHUE
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:16 2026 by rpki-client