This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A6702DCF11D11F0975E5CB5DAE4EC9C.roa
File:                     9A6702DCF11D11F0975E5CB5DAE4EC9C.roa (raw, json)
Hash identifier:          ZhvRbzRrmRUuwxN6ReoXP2R0uups0pYgnywlxmaYp8A=
Subject key identifier:   78:01:FC:79:01:BD:6C:F3:A2:D7:D8:B2:08:A1:D0:FD:B7:82:8A:68
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0196BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A6702DCF11D11F0975E5CB5DAE4EC9C.roa
Signing time:             Wed 14 Jan 2026 07:49:50 +0000
ROA not before:           Wed 14 Jan 2026 07:49:45 +0000
ROA not after:            Sun 22 Feb 2026 07:49:45 +0000
asID:                     401696
IP address blocks:        45.205.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104123 (0x196bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 14 07:49:45 2026 GMT
            Not After : Feb 22 07:49:45 2026 GMT
        Subject: CN=69674a9e-cfc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:96:40:87:43:91:35:60:6d:a8:bd:a1:fd:
                    8b:4c:65:19:b2:91:cf:57:e8:2b:1a:f3:7a:e3:2e:
                    9b:21:7c:7c:63:04:af:f9:21:a2:82:81:fa:c7:b0:
                    19:3b:0c:d9:42:a2:5d:57:06:cb:57:28:5c:ba:54:
                    28:45:66:ed:a1:ef:50:84:95:5f:31:a9:58:d5:a2:
                    54:39:d1:d4:18:dc:64:c2:f6:2d:7f:19:72:30:c2:
                    e1:01:95:51:69:65:60:31:cb:d3:2c:1a:59:23:ea:
                    b2:5b:26:3a:a2:53:2a:8d:2c:9e:ce:32:6a:e7:0f:
                    46:04:5b:19:25:a5:bd:da:33:ef:92:36:04:9f:9f:
                    74:4f:42:50:b7:e8:fb:38:60:9b:49:39:1a:07:bf:
                    73:76:28:1d:0f:40:a6:92:01:d1:ce:b1:2f:df:6d:
                    d3:b2:0a:c7:ee:28:e3:81:ce:41:be:77:75:80:93:
                    18:15:7d:02:f7:7c:67:f7:43:0f:94:14:c9:1b:27:
                    55:94:5b:c7:7d:18:c1:05:a0:58:6b:75:ba:60:9c:
                    99:12:54:8f:37:24:82:ef:ba:7e:3d:06:17:0f:6a:
                    45:03:8d:4d:44:b4:82:cc:7c:fe:fe:be:f4:72:f3:
                    a9:28:2a:3f:c1:36:bf:62:16:4e:c5:45:04:cd:73:
                    37:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:01:FC:79:01:BD:6C:F3:A2:D7:D8:B2:08:A1:D0:FD:B7:82:8A:68
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A6702DCF11D11F0975E5CB5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:40:7a:8a:71:95:ed:b2:08:73:1b:02:c8:7d:6c:8b:14:c1:
         26:34:a0:23:fb:32:4d:06:ca:6f:1b:78:91:7a:7b:94:8e:70:
         72:73:54:e0:44:eb:c4:80:04:2c:5d:ff:4f:90:ea:85:f4:2f:
         99:35:03:4a:91:b9:94:c0:dd:87:0b:6a:cb:1a:ef:22:c8:3c:
         48:ad:00:69:6c:92:fe:3e:e3:98:e5:c7:df:45:d9:9a:5b:e7:
         1c:92:03:06:52:be:20:a9:71:48:b2:b9:68:7b:12:dc:29:61:
         ac:40:64:03:25:c8:88:cf:80:4a:d5:79:86:bc:cf:3e:00:db:
         b1:80:89:1d:66:8d:d7:d9:99:b8:12:e4:20:1f:3a:43:cc:e1:
         9f:23:f1:5a:4b:69:61:13:4e:04:1a:5c:13:6d:36:91:10:c4:
         26:12:99:7a:c7:fa:b5:c4:d1:b5:45:27:bd:e0:9a:c2:de:2b:
         0f:fa:22:b1:fa:ea:23:c6:6b:f4:9b:6f:17:22:a5:32:0f:87:
         02:fa:b4:cf:a8:46:91:7a:23:66:5c:8a:15:2d:b6:40:f2:f6:
         2c:b4:f8:b6:9d:9f:6e:20:57:da:0a:54:a1:5a:0b:2e:e6:20:
         ff:c7:19:ba:29:58:53:cc:e3:39:61:06:31:10:aa:47:96:71:
         f3:9f:3f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:56 2026 by rpki-client