This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C32DEBECF5DF11F0B3FCB5CEDAE4EC9C.roa
File:                     C32DEBECF5DF11F0B3FCB5CEDAE4EC9C.roa (raw, json)
Hash identifier:          G/UdbQuuM8z5clEdXKzo7k4FC6e4u/aIyKb07DVrOnM=
Subject key identifier:   2F:4C:39:3A:EA:DF:87:F8:78:5C:05:96:C1:11:BA:8A:FE:D7:56:8C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0197C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C32DEBECF5DF11F0B3FCB5CEDAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 09:09:45 +0000
ROA not before:           Tue 20 Jan 2026 09:09:40 +0000
ROA not after:            Thu 19 Feb 2026 09:09:40 +0000
asID:                     136501
IP address blocks:        45.207.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104388 (0x197c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 20 09:09:40 2026 GMT
            Not After : Feb 19 09:09:40 2026 GMT
        Subject: CN=696f4659-c983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5c:dc:c4:f5:33:7b:ab:e0:91:dd:04:1e:2b:
                    93:7c:6a:70:44:e9:d2:8f:52:97:63:56:19:e2:0a:
                    93:f0:1e:d0:ad:39:aa:28:d4:04:46:00:77:5f:80:
                    a4:3f:cb:eb:bb:3c:c2:c1:a5:59:c4:40:03:64:6a:
                    55:09:f1:3e:67:8b:eb:13:1e:ce:b3:fd:70:63:9b:
                    76:3d:ea:9f:59:4b:ef:ac:13:1d:0f:09:f8:ec:c0:
                    5e:8d:54:60:92:e8:70:0a:e5:ce:19:28:d1:61:be:
                    75:a3:90:96:74:45:df:03:04:72:59:b8:da:ae:51:
                    5f:d0:d9:4b:75:6a:cb:9b:93:57:59:25:36:3b:b0:
                    23:92:9c:4f:9b:07:4a:67:65:42:e5:4a:42:3c:95:
                    8d:01:62:33:f4:02:ec:17:83:58:5a:66:7e:5c:1a:
                    d3:6a:65:34:4d:a1:1f:f2:04:87:94:38:b7:26:12:
                    47:18:49:e5:03:fa:85:d6:fc:44:53:85:e6:a4:30:
                    f5:1f:8c:ed:51:7e:2a:34:95:45:fa:f6:e5:30:ed:
                    be:0b:3b:81:b5:0a:c9:48:8c:64:a6:d5:57:15:b0:
                    48:92:a1:0d:f0:bd:e6:72:07:46:8b:8b:ac:3d:2d:
                    33:13:c7:6f:c9:b5:aa:b7:da:87:52:84:47:83:63:
                    64:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4C:39:3A:EA:DF:87:F8:78:5C:05:96:C1:11:BA:8A:FE:D7:56:8C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C32DEBECF5DF11F0B3FCB5CEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:0b:59:ea:fc:7a:7e:6a:ec:99:92:a0:23:f3:95:e4:8d:56:
         da:4a:4d:4c:b6:c9:97:0f:d6:1c:cc:e3:dc:cf:3a:ba:a2:bf:
         8b:b3:e3:ed:ec:4a:c6:53:0f:88:c9:0c:85:bb:37:93:08:93:
         63:64:40:b5:9f:c3:55:60:e2:43:4f:65:37:ef:5a:24:79:0a:
         7d:18:49:ae:15:3e:8a:cf:72:f7:9f:2c:5e:f6:4c:30:3f:89:
         96:f9:0a:32:61:d6:88:fe:d2:bf:1b:25:5a:18:6b:e9:34:37:
         bc:e1:dc:a3:71:55:1f:14:11:b3:7d:86:f3:f4:32:7e:30:5f:
         dd:78:c8:e8:02:91:c1:77:d7:c1:a3:1f:a2:46:55:f4:19:fc:
         70:0f:f4:38:71:e6:7b:bd:8b:79:0c:7c:2f:5a:70:d5:1c:33:
         1f:a1:ec:4c:bf:c0:69:a8:a8:bc:07:a6:50:af:5b:f4:11:c1:
         5c:18:c0:43:bd:1b:ef:7b:1f:b1:5e:e2:b3:e5:a4:be:53:19:
         7f:d9:6f:df:22:a7:2c:09:ca:26:d5:8b:0a:74:b4:87:f7:c5:
         98:f1:42:8c:48:11:47:c3:76:43:4a:59:b9:66:72:4e:81:26:
         4c:20:49:5a:02:33:05:8b:5d:88:bd:e4:0e:9e:58:09:db:35:
         e4:8b:f7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:37:29 2026 by rpki-client