This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A408AC68F05611F08F5FFBEBDAE4EC9C.roa
File:                     A408AC68F05611F08F5FFBEBDAE4EC9C.roa (raw, json)
Hash identifier:          5PHY9nFzT/PiR4UZ5UTOcJ49QZwHtsIkizje0BZH7ZI=
Subject key identifier:   D0:0B:0D:98:B1:7F:A8:0E:5A:39:64:F6:3C:09:E0:1F:71:D9:B3:64
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01966D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A408AC68F05611F08F5FFBEBDAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 08:05:36 +0000
ROA not before:           Tue 13 Jan 2026 08:05:26 +0000
ROA not after:            Tue 17 Feb 2026 08:05:26 +0000
asID:                     54801
IP address blocks:        45.194.85.0/24 maxlen: 24
                          45.195.60.0/24 maxlen: 24
                          45.195.192.0/24 maxlen: 24
                          45.195.196.0/24 maxlen: 24
                          45.195.197.0/24 maxlen: 24
                          45.197.1.0/24 maxlen: 24
                          45.197.2.0/24 maxlen: 24
                          45.197.4.0/24 maxlen: 24
                          45.197.5.0/24 maxlen: 24
                          45.199.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104045 (0x1966d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 13 08:05:26 2026 GMT
            Not After : Feb 17 08:05:26 2026 GMT
        Subject: CN=6965fcd0-94b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:14:6b:47:2e:39:7a:32:d0:3b:af:fa:fa:
                    8a:e9:82:3c:d8:7b:5e:99:0f:a5:c5:b9:f3:fb:83:
                    bb:58:32:a8:06:6e:d2:51:04:b8:45:93:75:30:b9:
                    d3:d0:2e:01:23:36:7d:5d:9a:d0:7d:13:9e:09:34:
                    53:d9:63:b8:f0:72:b6:18:78:51:0e:5b:25:75:22:
                    58:ad:88:1e:a7:d4:70:7a:90:28:87:9f:60:ab:bb:
                    d4:df:54:b8:08:95:0e:f4:ce:c4:74:20:d0:02:84:
                    df:d9:ee:fa:4f:16:5c:a9:2b:f3:ac:3f:62:9e:2c:
                    7c:4f:45:12:e5:e1:27:10:52:12:51:e9:6b:1e:9b:
                    3a:a7:ed:65:4b:96:bb:01:d8:c0:3b:7a:8e:bc:0f:
                    24:06:b0:63:43:34:d9:fb:07:77:9e:40:26:d8:b6:
                    7f:50:fe:3d:e0:93:45:f7:c8:57:79:30:a1:9b:8c:
                    e5:d5:3f:be:45:88:b0:0c:95:7f:3a:be:15:0c:b2:
                    0a:07:59:b0:62:e2:ea:d3:88:e8:9c:c3:f9:cd:4e:
                    34:83:eb:d9:aa:9d:ff:95:d3:a4:f0:b2:c1:fb:54:
                    75:69:31:b5:20:66:0f:4c:0d:c6:7f:d1:a9:b1:f0:
                    4a:e3:71:9a:bb:de:ad:8d:69:ec:2b:59:82:5d:aa:
                    24:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0B:0D:98:B1:7F:A8:0E:5A:39:64:F6:3C:09:E0:1F:71:D9:B3:64
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A408AC68F05611F08F5FFBEBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.85.0/24
                  45.195.60.0/24
                  45.195.192.0/24
                  45.195.196.0/23
                  45.197.1.0-45.197.2.255
                  45.197.4.0/23
                  45.199.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:c5:c6:f8:5f:1a:41:96:cc:82:b6:ae:33:c1:c7:01:8c:1a:
         37:f0:fc:6f:b4:76:be:b7:29:fb:8b:57:50:ba:ad:f2:61:6f:
         93:29:1f:42:aa:19:7b:88:e4:d0:6b:95:7e:d5:af:c0:fe:7e:
         71:f7:81:c6:36:c3:5d:99:3d:39:f7:a3:6d:54:35:6d:22:96:
         3d:9f:4b:44:89:8e:94:ef:e6:29:ff:0f:fc:e8:2f:4f:08:87:
         76:eb:1c:39:35:df:95:db:d8:ff:3e:86:59:ae:aa:f5:84:4a:
         5c:c0:af:09:44:73:b8:62:69:9e:22:df:6d:14:78:f9:07:d6:
         2d:05:44:f5:77:eb:21:88:0d:fa:c7:aa:c7:c5:9d:67:cd:2d:
         1e:62:84:2b:4b:b7:b6:a2:95:97:ae:e6:4b:59:9c:e5:a0:1a:
         0a:bb:e8:44:0c:f0:e7:15:35:85:ed:b0:1b:b7:2b:c7:1b:b7:
         2e:df:52:d0:0a:0c:a5:25:3b:a9:04:f5:b0:81:11:85:07:0a:
         8c:bd:c3:ec:e1:04:06:13:1d:86:d3:d3:a5:97:fe:59:62:4a:
         2b:9a:61:ca:a4:f2:fe:4e:64:31:0e:fe:f4:79:ec:2c:c7:ae:
         18:14:99:73:9b:d9:52:d2:1d:cb:d7:94:a3:4d:72:31:cf:09:
         97:54:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:13 2026 by rpki-client