This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1542FEAE96211F091D95CA3DAE4EC9C.roa
File:                     C1542FEAE96211F091D95CA3DAE4EC9C.roa (raw, json)
Hash identifier:          uhdJVZ8dsLgRjSkcGmHhbhkLhy2WTnyxlr4RGCzXJjU=
Subject key identifier:   DA:F5:C5:1B:F9:09:01:B4:71:32:65:8D:85:00:33:5D:4E:F4:BD:B7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019425
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1542FEAE96211F091D95CA3DAE4EC9C.roa
Signing time:             Sun 04 Jan 2026 11:44:41 +0000
ROA not before:           Sun 04 Jan 2026 11:44:36 +0000
ROA not after:            Mon 09 Feb 2026 11:44:36 +0000
asID:                     215391
IP address blocks:        45.192.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103461 (0x19425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  4 11:44:36 2026 GMT
            Not After : Feb  9 11:44:36 2026 GMT
        Subject: CN=695a52a9-1125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:77:15:79:ec:cc:61:9e:7c:d5:9d:0a:2a:
                    b4:36:b7:8a:31:5d:bb:a4:92:2f:bd:de:05:90:31:
                    e0:25:99:47:b0:1a:1a:c9:72:ba:00:a3:08:49:d3:
                    00:7e:2e:a9:7b:a0:e4:2e:8b:23:98:70:cc:c9:95:
                    29:19:51:0b:3a:03:df:1e:29:2e:e0:b0:c8:3b:9e:
                    32:eb:55:01:09:5f:9a:ed:b8:c6:1b:fc:17:e4:0d:
                    7b:f0:92:20:aa:ff:1c:8f:60:61:1f:25:d0:bd:11:
                    a3:58:5e:e8:d2:96:9d:15:3a:c2:87:d1:da:11:a3:
                    58:83:83:44:5f:4a:4f:65:d9:16:2a:92:9d:fd:c7:
                    2a:84:41:3a:be:55:d9:51:75:8b:9c:ad:e4:90:9b:
                    ab:e5:93:2b:b3:39:ff:27:4b:34:f6:f9:59:5c:54:
                    31:ed:24:dc:fe:42:61:ce:fc:7f:60:5c:85:22:df:
                    6a:90:1e:99:ea:75:9d:4a:e8:ce:cd:61:9e:85:50:
                    f8:2a:4d:e0:8f:ca:58:6a:0b:b0:b4:e3:8d:6a:fd:
                    53:a5:3d:95:eb:a4:46:a9:6e:8e:54:7d:74:af:af:
                    45:4d:ee:58:59:be:c4:49:07:e9:03:b0:7b:58:0a:
                    00:fe:c6:71:bc:ff:2c:d7:c9:eb:3c:fd:09:d3:fb:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F5:C5:1B:F9:09:01:B4:71:32:65:8D:85:00:33:5D:4E:F4:BD:B7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1542FEAE96211F091D95CA3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:92:7d:e6:ff:4a:6c:38:09:93:04:56:e0:80:ed:85:3f:79:
         39:7a:a1:8f:b0:fa:e8:76:83:7a:b2:33:f2:f3:fe:4a:ed:8c:
         b6:67:9b:6f:76:05:7b:a9:bc:65:0a:2b:00:e2:5a:99:5c:03:
         c1:f1:56:b7:08:57:d0:52:bf:cb:04:bb:f8:f0:96:80:3d:42:
         e6:8d:2a:4f:ef:cb:d9:42:b9:8d:c5:f5:73:7c:ff:ca:2e:3a:
         3a:f9:ef:3c:66:17:50:9a:8f:4d:d5:cc:39:0c:eb:27:9d:bb:
         e8:3a:8a:40:5b:0e:a1:6c:3f:80:91:96:42:d3:06:03:21:b4:
         16:d2:fc:ec:17:e4:af:35:5e:46:93:f3:47:ab:ab:37:80:a6:
         0b:d9:d2:ad:7f:fb:85:75:a7:18:37:24:ce:b3:eb:4b:1d:b9:
         5f:24:2e:1d:9c:5e:4d:c2:a0:f2:78:c0:6c:98:d5:2b:b9:11:
         76:1f:35:b0:f2:42:c0:6c:76:ca:fb:73:40:0d:c6:34:ca:8a:
         f3:de:81:92:9a:8f:6b:95:6f:8d:54:80:9f:c3:2d:c2:d1:2a:
         c1:88:52:53:b2:12:81:6f:63:69:e6:da:1d:91:56:da:e2:9c:
         3d:49:82:73:a6:fa:d1:8f:61:97:eb:df:c1:5b:90:d9:3c:8d:
         75:0d:81:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:06 2026 by rpki-client