This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DD2F8D0FA9011F0A89B92ADDAE4EC9C.roa
File:                     6DD2F8D0FA9011F0A89B92ADDAE4EC9C.roa (raw, json)
Hash identifier:          m4F22WrISowwkoqXkD4pDnFBFmY5FHeeciSAB+uLjHg=
Subject key identifier:   24:2A:14:81:E1:D1:B1:A9:E2:9A:72:5E:06:B0:21:4F:A6:AA:00:86
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0199EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DD2F8D0FA9011F0A89B92ADDAE4EC9C.roa
Signing time:             Mon 26 Jan 2026 08:24:28 +0000
ROA not before:           Mon 26 Jan 2026 08:24:22 +0000
ROA not after:            Thu 05 Mar 2026 08:24:22 +0000
asID:                     401434
IP address blocks:        45.207.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Feb 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104940 (0x199ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 26 08:24:22 2026 GMT
            Not After : Mar  5 08:24:22 2026 GMT
        Subject: CN=697724bb-e77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:ed:ef:a0:90:2f:e5:72:a2:4a:b4:0c:28:
                    e8:85:ad:a0:d0:24:38:ac:2c:96:ab:8f:be:a9:86:
                    80:83:63:a2:7b:64:d9:40:6a:59:cc:4c:9f:ac:f3:
                    d3:dd:71:d4:8f:ad:32:f3:3a:93:24:65:3d:3b:3f:
                    46:36:66:f0:92:1a:f2:87:9d:69:c8:5b:eb:af:eb:
                    79:e7:df:66:42:96:fa:87:4c:54:ae:76:1e:39:c2:
                    61:5a:2c:ea:90:a9:ae:ad:a2:84:8d:80:f3:cd:b4:
                    dc:f3:7d:44:79:07:79:8c:39:a1:6a:5b:e5:cf:93:
                    c8:f6:83:0b:28:ef:e5:47:20:c8:c8:7d:ab:d9:54:
                    21:f2:52:d3:59:8f:ae:e5:66:67:fd:73:2b:dd:00:
                    86:88:bd:bb:f5:bd:d6:6e:a3:0d:f6:35:b0:87:12:
                    c4:b3:4d:d0:7e:c6:82:06:1e:9b:8a:a7:0b:b0:55:
                    44:1f:0a:0c:82:00:9a:e7:a5:ea:c0:e0:3c:0c:ae:
                    f7:45:da:d5:a4:5d:61:b9:cc:5c:9e:79:93:23:fb:
                    a6:64:c2:25:d0:b0:7a:68:9e:42:51:51:1c:5c:66:
                    1e:95:34:cc:44:5c:e6:eb:3e:64:e0:3b:77:e0:0d:
                    94:2f:4e:3c:8c:45:e4:23:22:33:02:36:21:39:9a:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2A:14:81:E1:D1:B1:A9:E2:9A:72:5E:06:B0:21:4F:A6:AA:00:86
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DD2F8D0FA9011F0A89B92ADDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:8e:db:d5:e9:d0:27:f9:47:80:60:77:f0:29:0d:b0:41:f7:
         b9:d2:da:a6:2c:7c:50:29:9d:e3:16:79:15:67:0d:93:96:23:
         3c:92:78:be:f1:d6:34:b3:f4:54:9b:6e:92:e3:e0:b7:30:ce:
         3f:2b:e6:d0:95:37:5a:89:34:b4:9c:55:05:a2:d3:f7:db:11:
         32:27:2d:10:ab:3b:91:df:0f:ef:3d:e6:ce:5c:1c:8a:5d:ed:
         a9:69:7d:55:9c:67:b4:bf:84:ed:f4:48:04:2a:e3:e3:4d:67:
         df:2a:27:15:d5:e2:4d:ca:96:88:a5:ed:85:bb:e2:06:03:a0:
         f7:8d:27:05:95:84:4c:68:ad:dc:6c:e6:49:e0:08:75:0f:72:
         9e:2f:ce:14:40:4a:5d:5a:da:37:a9:83:9f:a6:ed:7a:2c:92:
         50:c3:6e:84:4e:d3:f2:f9:17:64:ae:10:05:86:ba:c3:27:44:
         66:94:50:d1:31:9c:f6:5c:72:04:3b:06:4d:f4:fc:5c:15:11:
         fe:df:d7:82:d6:09:c1:16:c9:b0:70:06:0d:b7:84:33:4f:e1:
         e6:1b:2f:90:df:3a:21:71:ed:b8:db:3e:5d:1a:4c:93:af:f9:
         e0:bd:68:79:12:cc:f5:f5:ac:f0:21:ae:0e:b4:17:00:d5:ef:
         43:85:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 22:26:14 2026 by rpki-client