This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CF7CCA8EEA711F0AFD21693DAE4EC9C.roa
File:                     8CF7CCA8EEA711F0AFD21693DAE4EC9C.roa (raw, json)
Hash identifier:          5wy6myKV0ynA9T1vvilvSXsIHnYLgpmCQgregS8IPuA=
Subject key identifier:   23:6E:98:09:CA:81:68:B1:C1:1C:8F:AF:48:88:38:8C:23:C6:1C:FD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019625
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CF7CCA8EEA711F0AFD21693DAE4EC9C.roa
Signing time:             Sun 11 Jan 2026 04:39:44 +0000
ROA not before:           Sun 11 Jan 2026 04:39:40 +0000
ROA not after:            Sun 10 Jan 2027 04:39:40 +0000
asID:                     328608
IP address blocks:        45.205.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103973 (0x19625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 11 04:39:40 2026 GMT
            Not After : Jan 10 04:39:40 2027 GMT
        Subject: CN=69632990-cce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:07:72:fa:59:b3:36:58:0c:c9:83:35:60:
                    a5:2a:9e:b3:8b:83:29:af:ef:ce:ea:63:81:58:6a:
                    de:ba:d5:f3:a8:42:5e:e3:c2:57:5b:9d:00:8d:c3:
                    14:ba:62:20:08:c5:82:6d:9f:70:0f:b1:03:e8:18:
                    c1:9a:b2:7c:70:b2:3f:ec:86:f8:b3:7d:06:2a:b5:
                    43:17:ed:b8:4f:56:1d:3c:3e:82:78:e2:27:22:d1:
                    7d:a3:62:45:3a:1f:7d:49:a9:d8:77:0f:49:19:4c:
                    c8:23:b1:6e:3c:76:49:f4:2a:23:a3:3b:44:67:55:
                    8b:a1:e3:26:cc:c5:75:7c:8f:1b:6d:d2:e3:78:29:
                    72:dd:b4:79:cd:c3:b7:54:de:c0:04:6c:84:03:6f:
                    68:e8:fd:ed:af:44:78:8d:c9:22:b7:ca:88:f2:87:
                    0b:cb:70:d6:b6:df:fc:02:83:a7:2a:9b:78:9d:c1:
                    10:40:1e:6e:72:ac:4c:51:aa:71:75:90:65:47:c6:
                    a2:a5:60:35:4a:95:1f:72:f2:a1:02:7c:d8:a7:03:
                    d4:4f:16:44:3b:7a:cf:92:7a:3c:c5:47:e0:a6:2d:
                    45:63:0e:98:49:c8:af:a3:fd:47:2d:dd:9c:90:b7:
                    13:51:88:ad:c7:2d:b3:ec:d0:d5:f4:cb:d7:a0:ee:
                    5e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6E:98:09:CA:81:68:B1:C1:1C:8F:AF:48:88:38:8C:23:C6:1C:FD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CF7CCA8EEA711F0AFD21693DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:5f:93:25:c5:83:1c:83:62:4e:64:29:4e:be:53:39:0b:
         87:5d:6f:f4:d6:ef:3b:b2:52:4f:a7:81:b6:0f:fb:a7:06:fd:
         69:1b:54:0b:b2:f9:21:a0:35:25:bc:f9:70:97:ad:79:7f:8a:
         69:7c:24:74:a5:5d:41:d6:70:33:67:7d:d8:6a:99:81:f5:ce:
         f0:40:e3:7d:84:52:38:58:07:98:1c:0b:94:63:68:19:d4:3e:
         6c:97:28:8e:55:cd:67:4d:68:fb:78:32:41:fd:58:7c:d2:e6:
         1c:b0:27:7c:80:3d:87:77:60:5c:8b:2b:12:90:99:db:d7:20:
         5d:e7:b5:39:59:47:d1:f5:43:ec:4a:a9:49:a2:a8:bc:5f:f1:
         cd:bb:c4:e9:0b:c1:ae:eb:56:d8:70:de:f2:5e:40:0e:42:27:
         9d:cd:81:8f:79:d9:58:55:92:14:d4:da:52:dd:d9:a4:96:f2:
         8c:79:58:10:7f:fa:f5:9f:6c:58:5f:bd:d3:2b:9d:d9:4c:44:
         bb:55:fd:d9:ef:df:b5:1a:9e:6d:27:ac:12:2a:25:a2:2c:60:
         6c:a7:a3:1c:f6:56:70:60:11:95:5f:c5:82:0f:c7:83:d7:e5:
         46:ef:d8:d5:63:f1:e2:57:b2:d6:7d:70:f0:f9:9b:f6:4c:ef:
         8c:ec:6c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:54 2026 by rpki-client