This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E53BC8EEBE911F08F9D35A6DAE4EC9C.roa
File:                     4E53BC8EEBE911F08F9D35A6DAE4EC9C.roa (raw, json)
Hash identifier:          XkMZVhs8oTu+rpit9FT1o+Rhfzsfk8ci0UmtLzra84o=
Subject key identifier:   88:F0:C4:70:75:5F:AF:E2:13:FF:52:0F:C3:13:F5:A6:65:A1:72:B4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019549
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E53BC8EEBE911F08F9D35A6DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 16:52:53 +0000
ROA not before:           Wed 07 Jan 2026 16:52:48 +0000
ROA not after:            Fri 23 Jan 2026 16:52:48 +0000
asID:                     139646
IP address blocks:        45.201.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103753 (0x19549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  7 16:52:48 2026 GMT
            Not After : Jan 23 16:52:48 2026 GMT
        Subject: CN=695e8f64-bf0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:de:e2:05:d0:e2:fc:b4:37:2e:4d:0d:da:
                    04:92:c7:57:61:6e:91:7f:22:25:93:cb:09:43:78:
                    1b:d5:85:4c:90:5c:0d:75:dd:80:96:76:24:5f:3b:
                    54:77:1c:f2:52:53:52:60:02:08:c0:c1:d9:0b:ed:
                    04:8f:f6:7a:c8:a8:1b:de:6d:94:d6:aa:73:87:e8:
                    d2:29:32:89:59:0d:1f:d9:82:8a:a0:a7:d6:32:e5:
                    db:4e:3d:48:74:30:43:a2:4d:a6:72:d1:d5:7f:c7:
                    a6:e7:cc:19:4f:49:6d:d7:f9:10:3c:f3:b2:91:74:
                    a8:fe:ad:92:2b:2d:71:6e:58:33:10:75:b9:c2:54:
                    9e:b8:c1:1c:c9:69:44:05:9c:4c:23:9e:bb:ee:04:
                    6c:6e:ea:7b:96:75:82:b9:bb:8e:7d:1b:63:8b:e7:
                    68:51:a6:4b:66:6a:a3:58:53:30:a2:e4:01:8a:c5:
                    c1:f6:3b:17:38:1a:84:e6:1a:16:ed:fb:cd:72:81:
                    fb:e3:6c:8b:3c:e7:dd:f3:3e:e6:d5:97:d1:ba:9b:
                    40:2a:57:db:ef:ed:fe:61:9a:74:06:5b:04:c5:f6:
                    89:7c:3f:8f:32:e1:1c:ef:1e:fb:48:c7:4c:95:96:
                    96:6b:6e:76:f6:e3:62:28:e8:44:e5:6f:f7:6b:a2:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F0:C4:70:75:5F:AF:E2:13:FF:52:0F:C3:13:F5:A6:65:A1:72:B4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E53BC8EEBE911F08F9D35A6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:b6:23:3e:18:a6:d3:fa:e7:41:a0:ff:f4:16:61:09:33:d0:
         0f:03:fc:27:20:db:34:ba:be:02:ea:22:81:46:fd:82:8d:48:
         06:db:f7:8f:93:d5:f5:75:be:b4:e7:75:fa:10:6e:7f:e9:ce:
         ee:43:38:b2:1d:a9:fe:6a:91:c7:71:c3:b5:67:f3:ae:0b:4e:
         8a:8e:9d:0f:6d:96:6a:82:93:e4:1b:94:51:6f:c0:eb:cb:fd:
         fe:1d:e7:28:f3:77:fe:14:e1:fc:49:1b:46:08:d3:be:54:9a:
         75:33:4e:e9:33:fd:24:2a:c0:64:ec:84:9b:0b:86:ae:13:83:
         f6:23:70:92:04:08:7b:93:e9:13:f9:a1:1b:91:ba:5a:26:29:
         98:b2:b5:e7:a3:c3:81:f4:cf:5a:42:40:b0:26:08:59:bc:31:
         b8:9a:45:b2:18:b9:23:29:0f:d2:9f:2c:cb:ea:51:a8:cb:0c:
         f1:e2:95:87:aa:7f:ce:b8:4d:83:d4:57:57:72:0b:7a:e3:50:
         91:88:2c:03:96:48:e3:7f:9b:9e:39:34:a1:3e:6d:f6:9f:dd:
         d1:88:4b:35:24:dc:56:76:59:09:f2:fd:1b:31:f6:49:1c:47:
         23:39:1a:5c:13:6d:32:fb:66:52:66:68:6b:3a:c8:e3:a8:c1:
         62:87:51:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:10 2026 by rpki-client