This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/837ECE36F07A11F099448CC4DAE4EC9C.roa
File:                     837ECE36F07A11F099448CC4DAE4EC9C.roa (raw, json)
Hash identifier:          h4zv4RrPhQT+Mo3BcSopvW6C8QwVDXrx/i75RmnrMVw=
Subject key identifier:   F4:17:A7:51:4C:EA:22:3B:78:1A:F9:DB:BB:EA:3D:07:7C:2E:93:3D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01969E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/837ECE36F07A11F099448CC4DAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 12:22:23 +0000
ROA not before:           Tue 13 Jan 2026 12:22:17 +0000
ROA not after:            Wed 18 Feb 2026 12:22:17 +0000
asID:                     14315
IP address blocks:        45.196.104.0/24 maxlen: 24
                          45.202.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104094 (0x1969e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 13 12:22:17 2026 GMT
            Not After : Feb 18 12:22:17 2026 GMT
        Subject: CN=696638ff-f42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:c3:d1:78:0f:d2:1f:7f:80:1c:0d:e7:a0:
                    82:18:75:2a:59:42:4a:cb:08:ad:c4:55:df:2c:0f:
                    5b:5a:57:2f:05:03:ca:0f:c9:b4:70:fe:ae:e7:35:
                    d7:c4:07:d4:70:89:f8:02:fe:65:44:65:d2:cb:be:
                    91:94:29:80:7d:65:e8:0d:c2:39:5b:74:d6:85:62:
                    a4:8c:f0:16:6b:78:08:97:5a:b2:73:92:95:40:b9:
                    28:44:30:c4:6f:ce:4e:74:9f:c7:55:31:84:95:ab:
                    b3:39:9c:29:5d:c9:c4:f6:9f:cc:3f:92:75:b3:09:
                    ae:32:6c:f3:bc:44:40:a5:47:e5:64:18:11:3b:56:
                    21:d4:a9:0e:91:c4:c9:20:d4:cf:0f:a5:7b:b3:d7:
                    fa:67:65:9e:9b:4f:21:0f:5c:fb:f0:29:fe:ba:5c:
                    fc:f6:f6:51:59:e1:c9:70:5c:62:fa:67:e5:78:f4:
                    88:3e:fd:03:30:08:0c:63:3b:08:e3:ff:f3:4d:a7:
                    28:a0:b5:74:ce:b0:b6:ff:9f:ad:c4:e4:9c:ba:4f:
                    ee:5a:0b:28:93:1d:f8:82:0e:2f:dd:0d:a2:16:7f:
                    db:a6:50:dd:48:8b:ab:3f:cb:33:ca:9a:3f:b4:8e:
                    f6:52:46:6d:ba:58:42:e9:8d:1e:bb:ee:64:77:03:
                    39:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:17:A7:51:4C:EA:22:3B:78:1A:F9:DB:BB:EA:3D:07:7C:2E:93:3D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/837ECE36F07A11F099448CC4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.104.0/24
                  45.202.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:bb:a7:eb:68:62:9e:38:2e:d0:b7:9e:72:00:43:18:41:c9:
         2e:65:eb:f1:be:56:2e:17:d4:6d:30:54:3c:1c:06:df:eb:8d:
         a1:d1:bc:99:e8:c2:c1:a6:aa:03:b3:28:dd:ba:5e:ec:6b:bb:
         b2:e7:5c:7c:f9:ba:62:5a:2d:0e:fd:59:45:4e:e1:73:48:e4:
         85:bd:2c:ca:2c:4d:a6:39:64:6a:d2:57:4a:e1:b7:7e:26:fa:
         0c:5a:11:50:78:f4:77:09:8a:ff:8a:17:a6:c2:85:51:bb:81:
         49:1f:a6:b9:74:7b:36:83:b3:9a:c7:65:a7:a8:3f:2b:d7:b3:
         a9:4c:e4:d3:41:69:57:5e:a6:35:58:3c:ef:26:b7:39:3b:b4:
         71:b4:11:a4:13:45:37:c7:f6:d5:18:cb:ef:cc:e9:5f:86:eb:
         03:e1:3a:96:98:17:76:f6:34:47:c6:c9:c6:61:b7:99:5e:f2:
         bd:3a:e8:62:6e:f8:63:03:9b:d8:5d:9c:60:32:2c:ad:e7:e4:
         55:ff:d5:59:82:30:7b:a8:ef:50:a9:94:08:22:3b:59:2d:b6:
         81:b6:b2:8b:7d:8c:87:d3:38:5c:e2:18:93:e1:28:f1:ff:5f:
         1b:d7:40:31:f4:a0:db:70:23:b4:57:68:c4:11:a6:a9:2c:71:
         bd:6b:87:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:54 2026 by rpki-client