This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78EF93FEF2BB11F0A5652883DAE4EC9C.roa
File:                     78EF93FEF2BB11F0A5652883DAE4EC9C.roa (raw, json)
Hash identifier:          1dUtTxQUUiW3P2my59Xme28Zw4yGnrsn8+77Dk29yqM=
Subject key identifier:   92:3B:0F:C5:58:CE:60:BF:56:3C:1A:62:A7:C2:88:51:EE:A4:CF:C3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019737
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78EF93FEF2BB11F0A5652883DAE4EC9C.roa
Signing time:             Fri 16 Jan 2026 09:12:25 +0000
ROA not before:           Fri 16 Jan 2026 09:12:20 +0000
ROA not after:            Tue 27 Jan 2026 09:12:20 +0000
asID:                     4760
IP address blocks:        45.202.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104247 (0x19737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 16 09:12:20 2026 GMT
            Not After : Jan 27 09:12:20 2026 GMT
        Subject: CN=696a00f9-ce89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:e8:95:f6:fa:34:d8:07:be:dc:38:92:49:56:
                    f2:b4:d2:8e:86:eb:63:82:e5:11:ab:1a:5b:b3:a3:
                    ac:c1:5a:cf:85:cd:1c:04:1b:63:99:f1:ce:4f:36:
                    b1:66:7c:e1:00:17:45:c9:dd:3c:e1:65:ac:a6:4f:
                    33:14:a3:5b:cc:02:da:89:d9:94:5e:5a:51:79:91:
                    e3:be:f5:2d:0c:df:fd:75:0b:d8:3e:d8:18:6f:cb:
                    48:b1:1a:b3:68:f4:e9:db:03:8b:db:ef:2f:c3:1f:
                    d6:33:d3:9b:0d:cd:3f:50:e9:d1:18:c8:83:7d:30:
                    2b:07:f7:8f:fc:ba:82:dd:53:86:28:2e:29:a3:1b:
                    52:4d:73:ea:58:ce:2e:7d:7a:fc:9a:5e:0e:5a:52:
                    1b:72:c2:73:8f:35:dc:f8:db:02:09:26:45:99:16:
                    f8:20:a6:5a:55:0e:34:0a:9f:11:0b:de:78:93:59:
                    59:c7:30:79:dc:ce:69:90:9f:9e:4c:eb:19:2c:7b:
                    fb:b2:56:de:7f:10:6e:ab:8e:05:da:8d:61:b7:5d:
                    84:96:6b:e1:8f:6f:f7:b8:9b:9a:dd:a4:75:f8:51:
                    ad:b2:4b:b2:36:a6:f2:d5:31:bc:4a:2c:71:0b:31:
                    5d:70:6c:42:68:48:6b:22:4d:c2:18:ba:d7:29:90:
                    dc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3B:0F:C5:58:CE:60:BF:56:3C:1A:62:A7:C2:88:51:EE:A4:CF:C3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78EF93FEF2BB11F0A5652883DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:f5:58:8d:68:73:a7:c0:5e:de:87:7b:a5:b6:3c:c1:40:62:
         42:5f:21:a2:bd:70:66:e1:85:e1:66:6d:77:96:df:18:4a:e3:
         b6:92:0e:f2:a6:4e:35:bd:1a:eb:e5:53:14:1d:1a:26:20:30:
         f1:fc:ab:7e:02:94:bc:b5:6e:90:56:22:9b:47:f6:bf:c6:6a:
         5e:e8:4a:ae:2d:0b:eb:f6:11:e6:b2:73:4e:08:e7:42:7c:41:
         40:3a:4d:9d:af:51:bb:5e:d3:2d:1e:4a:0e:5e:1f:f8:17:02:
         87:54:05:4e:38:b1:80:80:28:62:da:75:3e:26:cc:11:fc:fc:
         bb:06:a6:06:5e:fe:67:91:6f:ba:1c:84:4e:c4:1f:56:c1:77:
         3a:8d:e0:8c:3c:7c:b6:16:13:6e:d3:1e:e2:11:c3:8c:8d:71:
         93:47:6d:32:00:97:7f:c2:4d:9f:d6:18:bc:80:cb:f9:a8:ef:
         a5:fb:20:ca:63:77:b3:82:7c:76:74:77:a7:c7:23:03:5a:30:
         68:5f:80:cf:61:bd:49:24:61:99:ec:0b:12:f7:a5:e6:cf:e4:
         69:da:c0:74:41:ef:fc:b4:b3:32:80:82:ee:f2:80:f4:b3:ec:
         bb:9c:c7:9b:a1:82:ed:96:06:b6:9f:77:09:4c:36:76:8c:4e:
         ca:d0:ac:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:07 2026 by rpki-client