This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/560EFFC4EF8111F09F3683D0DAE4EC9C.roa
File:                     560EFFC4EF8111F09F3683D0DAE4EC9C.roa (raw, json)
Hash identifier:          3qRay8E/jVTHogO93xOEhX4FoOuxn1d+AdI94daFXGM=
Subject key identifier:   BF:F2:77:80:CE:B1:A8:15:D7:FC:8F:F0:18:27:65:62:C8:5B:2F:FF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019630
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/560EFFC4EF8111F09F3683D0DAE4EC9C.roa
Signing time:             Mon 12 Jan 2026 06:38:42 +0000
ROA not before:           Mon 12 Jan 2026 06:38:38 +0000
ROA not after:            Wed 18 Feb 2026 06:38:38 +0000
asID:                     215925
IP address blocks:        45.194.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103984 (0x19630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 12 06:38:38 2026 GMT
            Not After : Feb 18 06:38:38 2026 GMT
        Subject: CN=696496f2-cdae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f6:cb:95:4f:4b:69:ad:b4:15:e0:b7:7b:d6:
                    28:74:d4:82:db:ee:7e:1d:c6:0b:8d:1e:04:39:c9:
                    ae:d4:92:29:64:01:da:29:d4:86:6b:66:91:1a:02:
                    4d:4b:93:97:6a:5c:42:76:33:7b:ee:26:4c:75:f9:
                    97:18:b0:7f:0e:5d:2c:c5:70:2b:2e:0e:5a:90:8e:
                    80:ae:0d:63:b6:28:69:2b:6d:bc:21:8e:45:7e:c5:
                    21:cf:24:fc:ab:0f:d2:d6:e4:81:85:79:f6:22:42:
                    0b:92:69:e4:8b:f3:b9:f9:f8:92:5e:d9:b2:e2:75:
                    bc:5a:35:59:8c:8d:62:5c:f2:e5:1e:52:38:af:fa:
                    90:77:59:fc:30:92:5d:17:41:55:50:26:d5:a3:d2:
                    e6:9b:22:d5:02:d8:da:02:f9:66:79:bd:e8:b1:82:
                    96:c7:e9:f2:eb:ba:8c:7e:9c:8f:cf:9b:60:ee:a9:
                    2f:bf:23:d8:0c:ff:2b:ff:cf:26:fe:90:eb:04:86:
                    2b:56:3e:d3:52:fa:19:6b:63:b5:e5:62:cf:a8:16:
                    64:de:c1:c4:aa:de:ae:d0:e8:30:e3:f0:f4:29:04:
                    c7:c2:19:ef:df:d6:ea:b6:6f:6f:1d:1a:ef:34:d1:
                    b0:3c:30:1f:82:79:b0:6e:34:9c:37:36:a5:4c:9d:
                    bb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F2:77:80:CE:B1:A8:15:D7:FC:8F:F0:18:27:65:62:C8:5B:2F:FF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/560EFFC4EF8111F09F3683D0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:12:40:ba:cd:9f:3b:e8:5b:a5:72:0d:87:ef:0b:f6:2f:fb:
         f0:49:c2:1a:12:53:ea:e1:60:9f:3b:d9:02:93:82:93:5f:47:
         ef:69:fd:02:23:11:9a:1c:a4:14:58:ed:d2:10:65:d4:95:4b:
         7d:2a:74:39:84:8e:d8:5a:8e:c1:05:ad:a1:5d:0e:5f:35:8c:
         04:cd:97:b0:62:1a:15:7e:dd:8b:e8:09:8c:85:1e:93:d5:f9:
         11:27:71:28:7e:14:4d:24:05:a8:89:39:8b:88:67:a3:4b:f3:
         24:31:95:49:14:12:6d:b2:dc:35:a3:0e:76:4a:6d:44:fc:4a:
         b5:bf:5e:66:ac:01:1e:20:1b:ba:01:4d:78:31:99:00:c5:15:
         fc:92:8b:64:9b:92:cf:93:56:b6:0c:c0:4b:82:97:05:02:64:
         aa:3d:f7:39:dd:6a:3d:4c:25:78:6d:67:2d:43:99:a3:9a:9a:
         4a:9b:b3:ae:f9:81:c3:d8:91:09:99:36:60:23:8f:16:6c:2c:
         fc:8f:f7:60:ea:00:68:10:ab:e8:2e:8b:19:00:a1:36:08:77:
         90:12:1e:80:cf:23:4f:26:bf:a7:af:96:44:f0:3f:b6:ea:cf:
         50:8d:b9:e2:73:97:08:43:7a:0d:1f:90:04:13:a1:3a:4e:18:
         ff:1e:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:16 2026 by rpki-client