This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/550317DAEA0611F0BF167696DAE4EC9C.roa
File:                     550317DAEA0611F0BF167696DAE4EC9C.roa (raw, json)
Hash identifier:          jFFlcnABP7On58vpmUXkpBK2+7j1m5O2J9KpIVPEZlY=
Subject key identifier:   0E:8B:C2:04:D2:C8:E3:46:09:36:A9:F3:DE:69:A6:36:56:14:8B:24
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019463
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/550317DAEA0611F0BF167696DAE4EC9C.roa
Signing time:             Mon 05 Jan 2026 07:15:37 +0000
ROA not before:           Mon 05 Jan 2026 07:15:32 +0000
ROA not after:            Mon 23 Feb 2026 07:15:32 +0000
asID:                     214025
IP address blocks:        45.202.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103523 (0x19463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  5 07:15:32 2026 GMT
            Not After : Feb 23 07:15:32 2026 GMT
        Subject: CN=695b6519-6eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:c9:68:45:6c:e0:90:a1:76:3d:75:27:62:
                    3f:ce:cd:11:cb:b1:fc:19:2b:6f:07:34:90:22:15:
                    49:8c:a2:ac:f3:24:81:94:84:14:c5:64:b7:c4:27:
                    ee:10:1c:4a:49:66:65:09:33:b7:0c:50:4c:d7:5e:
                    a1:42:37:98:73:40:19:7d:34:7b:51:2c:a6:b4:b9:
                    1d:69:7d:ab:40:78:b2:5d:fe:11:33:10:b7:dd:5a:
                    4e:15:c2:53:bd:2f:0d:09:cc:6d:60:ff:f1:68:0c:
                    3b:33:60:26:d0:c0:65:5a:bd:6e:5e:f9:41:39:47:
                    f6:ca:da:57:31:02:02:59:76:59:24:e3:31:f7:29:
                    be:5c:71:9a:d8:36:c1:69:3f:c4:70:98:31:88:82:
                    fb:ff:80:10:27:bb:8d:2c:24:b7:d8:a7:70:9e:84:
                    23:e6:e8:fd:2d:3b:47:03:a5:d6:b6:e2:01:c3:34:
                    19:cc:16:01:42:f6:27:9d:74:c8:e1:73:40:2a:e3:
                    bb:43:5f:69:56:52:8e:81:42:87:15:4d:b6:4a:04:
                    52:dc:37:e4:68:82:be:53:49:7e:99:29:1c:40:5b:
                    b1:b6:03:0d:8e:ca:77:61:1d:c9:93:c5:7d:d3:10:
                    8b:ae:28:b7:7c:67:59:98:fc:ef:e4:f5:b2:9e:d9:
                    f3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8B:C2:04:D2:C8:E3:46:09:36:A9:F3:DE:69:A6:36:56:14:8B:24
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/550317DAEA0611F0BF167696DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:9f:1c:41:be:01:83:d1:c2:41:b1:fe:56:9e:b5:cb:21:
         6a:6b:11:d7:83:cc:ba:b5:76:e6:65:27:9f:46:ea:af:a2:b2:
         35:34:7d:87:7c:ea:04:6b:d2:4b:43:95:d3:26:43:40:df:e1:
         a1:37:0b:af:b0:83:6d:a4:79:00:70:93:23:2a:2a:25:09:25:
         6c:f4:04:56:14:23:ff:23:e9:fd:a9:cf:bb:b6:60:0c:22:7b:
         3a:0f:3a:56:4c:92:29:30:9d:d3:f0:da:ee:ac:78:3b:bd:33:
         d5:0b:36:ad:e7:84:d0:5b:59:ec:79:bc:20:17:ff:33:43:2e:
         ff:0b:28:10:5b:52:55:89:72:39:a5:b3:8d:16:b5:6f:83:84:
         d7:3b:23:ec:52:36:32:15:8c:c7:e2:83:b4:bc:92:6f:a4:98:
         8a:c1:fd:3e:90:c5:06:7f:e3:23:a8:fb:81:d5:f0:a0:cd:f9:
         42:4b:8a:d0:9d:84:18:b0:b9:b1:ef:6c:02:10:ff:de:75:ce:
         cb:f4:c9:6f:b2:e2:5b:b0:37:48:62:eb:5a:f1:a8:75:e9:7c:
         65:60:69:ba:c3:3f:dc:f9:8f:15:3b:80:d3:08:33:e5:6a:5a:
         ea:ba:4a:b6:62:d0:bb:7b:5e:3b:e0:0c:9d:81:61:ce:12:b7:
         61:3c:d1:e7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZRjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTA1MDcxNTMyWhcNMjYwMjIzMDcxNTMyWjAYMRYw
FAYDVQQDEw02OTViNjUxOS02ZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxELJaEVs4JChdj11J2I/zs0Ry7H8GStvBzSQIhVJjKKs8ySBlIQUxWS3
xCfuEBxKSWZlCTO3DFBM116hQjeYc0AZfTR7USymtLkdaX2rQHiyXf4RMxC33VpO
FcJTvS8NCcxtYP/xaAw7M2Am0MBlWr1uXvlBOUf2ytpXMQICWXZZJOMx9ym+XHGa
2DbBaT/EcJgxiIL7/4AQJ7uNLCS32KdwnoQj5uj9LTtHA6XWtuIBwzQZzBYBQvYn
nXTI4XNAKuO7Q19pVlKOgUKHFU22SgRS3DfkaIK+U0l+mSkcQFuxtgMNjsp3YR3J
k8V90xCLrii3fGdZmPzv5PWyntnz2wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA6L
wgTSyONGCTap895ppjZWFIskMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NTAzMTdEQUVBMDYxMUYwQkYxNjc2OTZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpsMA0GCSqGSIb3DQEBCwUA
A4IBAQAl3J8cQb4Bg9HCQbH+Vp61yyFqaxHXg8y6tXbmZSefRuqvorI1NH2HfOoE
a9JLQ5XTJkNA3+GhNwuvsINtpHkAcJMjKiolCSVs9ARWFCP/I+n9qc+7tmAMIns6
DzpWTJIpMJ3T8NrurHg7vTPVCzat54TQW1nsebwgF/8zQy7/CygQW1JViXI5pbON
FrVvg4TXOyPsUjYyFYzH4oO0vJJvpJiKwf0+kMUGf+MjqPuB1fCgzflCS4rQnYQY
sLmx72wCEP/edc7L9MlvsuJbsDdIYuta8ah16XxlYGm6wz/c+Y8VO4DTCDPlalrq
ukq2YtC7e1474AydgWHOErdhPNHn
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:26 2026 by rpki-client