This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9259B51CED0811F0BFF15D90DAE4EC9C.roa
File:                     9259B51CED0811F0BFF15D90DAE4EC9C.roa (raw, json)
Hash identifier:          j2skh0Rf7YGV+Ur0Q7Rk0I6EOVOsUrIAg+FZNlPW/hQ=
Subject key identifier:   37:D4:9B:05:47:3B:53:8F:B0:4E:39:FC:51:33:0A:0C:14:8E:27:06
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0195A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9259B51CED0811F0BFF15D90DAE4EC9C.roa
Signing time:             Fri 09 Jan 2026 03:09:12 +0000
ROA not before:           Fri 09 Jan 2026 03:09:07 +0000
ROA not after:            Fri 30 Jan 2026 03:09:07 +0000
asID:                     135300
IP address blocks:        45.192.136.0/22 maxlen: 24
                          45.192.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103841 (0x195a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  9 03:09:07 2026 GMT
            Not After : Jan 30 03:09:07 2026 GMT
        Subject: CN=69607158-299e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:23:2a:db:28:90:bb:a9:37:fd:36:93:3a:
                    aa:fb:05:e5:b5:93:d5:1f:37:a9:1c:77:2b:bf:6f:
                    51:d8:b5:34:4e:ec:3e:03:c7:19:55:e9:9c:8f:eb:
                    ed:45:17:23:ef:66:f0:e4:ea:0f:6a:08:4d:2a:d3:
                    4e:47:2f:c7:3f:41:4f:41:4e:65:83:3f:01:e8:de:
                    39:5c:37:66:38:cc:46:47:ad:7a:11:75:1e:67:89:
                    db:0b:67:cb:50:8b:47:48:00:d2:87:4d:6b:19:a8:
                    a2:e4:23:b5:42:a6:27:a5:58:4e:72:7c:71:f3:00:
                    50:13:77:70:5e:1b:05:b9:78:64:5c:b4:b8:13:c2:
                    7e:82:ae:60:3b:29:7e:29:d6:b0:62:b3:37:85:99:
                    c2:ab:c1:ee:e9:f7:06:88:9b:1a:20:9d:12:44:7e:
                    83:20:6c:25:dd:48:80:4f:70:d3:00:be:5f:4b:e3:
                    11:88:98:53:36:bc:f5:7c:c9:77:08:f6:ae:4d:c3:
                    a4:61:35:34:55:2f:23:ce:3f:37:44:87:97:c3:44:
                    a5:73:35:cf:98:9e:7c:ae:ce:e2:2d:a4:83:96:c0:
                    df:3d:b8:15:da:ff:f8:23:a3:c4:f6:9d:4d:84:1c:
                    ee:c8:c3:b4:b4:ef:4f:b0:17:f1:36:69:9d:6c:bd:
                    48:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D4:9B:05:47:3B:53:8F:B0:4E:39:FC:51:33:0A:0C:14:8E:27:06
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9259B51CED0811F0BFF15D90DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:80:cb:f5:74:19:81:42:36:d5:e5:c7:be:99:25:41:92:f3:
         39:60:f1:db:68:98:22:53:f2:33:f4:ac:6f:be:54:7c:dc:7a:
         d9:2c:87:9c:04:d7:31:8a:7d:5f:e8:9c:fd:c1:57:d3:1c:d8:
         bb:a5:c1:40:57:5d:d2:26:6b:49:55:e1:2c:85:2c:3b:1d:90:
         bc:69:98:29:61:aa:ce:f0:dd:f0:75:ce:af:7f:ab:0e:f5:2f:
         2d:eb:fe:e9:4d:52:ba:ef:ec:9b:b2:2a:3e:ba:15:f1:2d:6b:
         93:6d:f3:68:e5:19:e9:e5:ce:53:80:d8:0f:70:5a:a1:35:b5:
         cf:82:cd:94:04:5d:55:6c:85:2a:6e:b1:a5:f5:f9:ca:71:a3:
         ab:f4:44:87:ee:38:0c:ec:c9:b5:2a:72:18:3e:98:fd:48:0e:
         94:9d:9f:a6:ce:ae:5f:0c:58:ce:0c:d9:70:26:56:b7:a7:10:
         f3:49:e1:3e:a3:ce:9d:47:92:4a:dd:9e:fb:b7:7f:47:86:71:
         54:02:67:e3:15:b1:59:a3:0f:7c:0c:d8:d8:34:a5:bf:ef:07:
         d4:4b:00:07:4a:e8:0d:14:4a:df:03:5c:8a:01:74:b4:51:ac:
         a4:dd:0c:02:52:99:4f:25:e8:37:69:19:15:d2:39:0e:52:c5:
         cb:f8:2b:30
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZWhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTA5MDMwOTA3WhcNMjYwMTMwMDMwOTA3WjAYMRYw
FAYDVQQDEw02OTYwNzE1OC0yOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm+8jKtsokLupN/02kzqq+wXltZPVHzepHHcrv29R2LU0Tuw+A8cZVemc
j+vtRRcj72bw5OoPaghNKtNORy/HP0FPQU5lgz8B6N45XDdmOMxGR616EXUeZ4nb
C2fLUItHSADSh01rGaii5CO1QqYnpVhOcnxx8wBQE3dwXhsFuXhkXLS4E8J+gq5g
Oyl+KdawYrM3hZnCq8Hu6fcGiJsaIJ0SRH6DIGwl3UiAT3DTAL5fS+MRiJhTNrz1
fMl3CPauTcOkYTU0VS8jzj83RIeXw0SlczXPmJ58rs7iLaSDlsDfPbgV2v/4I6PE
9p1NhBzuyMO0tO9PsBfxNmmdbL1IVQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDfU
mwVHO1OPsE45/FEzCgwUjicGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MjU5QjUxQ0VEMDgxMUYwQkZGMTVEOTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcCIMA0GCSqGSIb3DQEBCwUA
A4IBAQCOgMv1dBmBQjbV5ce+mSVBkvM5YPHbaJgiU/Iz9KxvvlR83HrZLIecBNcx
in1f6Jz9wVfTHNi7pcFAV13SJmtJVeEshSw7HZC8aZgpYarO8N3wdc6vf6sO9S8t
6/7pTVK67+ybsio+uhXxLWuTbfNo5Rnp5c5TgNgPcFqhNbXPgs2UBF1VbIUqbrGl
9fnKcaOr9ESH7jgM7Mm1KnIYPpj9SA6UnZ+mzq5fDFjODNlwJla3pxDzSeE+o86d
R5JK3Z77t39HhnFUAmfjFbFZow98DNjYNKW/7wfUSwAHSugNFErfA1yKAXS0Uayk
3QwCUplPJeg3aRkV0jkOUsXL+Csw
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:51 2026 by rpki-client