This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7F7FB42EAFC11F0A8A08179DAE4EC9C.roa
File:                     C7F7FB42EAFC11F0A8A08179DAE4EC9C.roa (raw, json)
Hash identifier:          GV+YUyje5A+7YludL5KZfqLy1z0gs/ISmT7z7kMjqE8=
Subject key identifier:   3C:AB:EC:93:71:E1:3A:F9:9F:49:F7:AC:16:DD:D5:6E:56:FF:54:21
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0194A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7F7FB42EAFC11F0A8A08179DAE4EC9C.roa
Signing time:             Tue 06 Jan 2026 12:39:46 +0000
ROA not before:           Tue 06 Jan 2026 12:39:41 +0000
ROA not after:            Thu 12 Feb 2026 12:39:41 +0000
asID:                     48266
IP address blocks:        45.207.218.0/23 maxlen: 24
                          45.207.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103588 (0x194a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  6 12:39:41 2026 GMT
            Not After : Feb 12 12:39:41 2026 GMT
        Subject: CN=695d0292-35b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b4:ff:47:f6:86:74:35:00:25:5b:f3:f2:36:
                    21:37:f4:38:06:15:5c:f9:07:87:58:6f:cf:41:b4:
                    d2:d4:21:ca:fd:25:52:cb:80:2d:9c:f5:ad:2e:8c:
                    7a:f9:4b:65:65:50:bc:0e:18:6b:c6:9c:30:69:94:
                    8f:38:df:e9:ab:fa:e7:d0:4c:75:75:3f:9d:43:46:
                    23:53:20:4f:5e:4f:9a:45:9a:d4:8a:20:f9:c6:b4:
                    12:1c:9c:d5:86:cf:03:7a:ea:99:55:17:33:9d:bc:
                    c9:bb:d4:ed:ec:b3:35:15:fa:52:96:67:ef:d1:3e:
                    a5:eb:6a:68:52:d4:73:a5:db:3b:78:33:09:a5:a8:
                    b8:dd:d8:9d:19:8b:5a:8a:3e:92:ff:dd:32:9d:94:
                    99:51:cf:c3:53:1e:19:b0:f8:37:b4:b5:ff:c3:e5:
                    e8:27:61:cf:53:e9:65:8f:9f:a0:af:15:1a:0b:4f:
                    cb:db:51:e9:d6:f4:1b:19:fd:39:a6:11:d7:7b:ea:
                    94:00:27:5e:65:93:58:20:a1:5b:75:3d:a1:b9:66:
                    99:19:37:f5:2a:d4:93:41:85:f2:54:26:03:60:05:
                    81:ad:c9:e4:2c:55:cc:1b:4d:b6:a6:61:cd:9b:99:
                    d8:40:40:ab:fa:98:35:94:8c:8b:69:50:39:cb:51:
                    49:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AB:EC:93:71:E1:3A:F9:9F:49:F7:AC:16:DD:D5:6E:56:FF:54:21
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7F7FB42EAFC11F0A8A08179DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.218.0-45.207.223.255

    Signature Algorithm: sha256WithRSAEncryption
         84:32:d3:a0:c1:4c:c7:04:76:5e:cf:1e:ec:12:26:e5:82:16:
         a9:88:79:b9:25:56:9d:02:08:4a:45:ab:f4:cd:e7:67:59:ed:
         32:ce:be:96:c2:d3:e0:89:b5:fe:a7:8c:c8:d4:cb:b6:3e:4a:
         c8:25:c8:39:4d:5b:b7:6b:a4:c1:bc:d8:57:25:1a:b6:a2:b5:
         16:2f:77:bc:74:24:32:b6:b9:fa:a7:1c:d4:53:90:16:90:a3:
         51:b7:d5:f8:b3:e9:0d:d7:b1:25:d3:29:4b:5d:5f:a9:94:c2:
         a2:04:d7:08:4d:cf:a0:94:07:03:86:6a:b3:9c:09:d8:f5:3c:
         91:83:4a:40:be:be:44:92:35:ff:b2:72:ba:ac:7b:ce:1e:82:
         d2:76:8c:16:bd:20:d0:61:41:e6:b3:4b:62:4f:79:9b:98:9c:
         95:c1:51:f8:8a:1f:ee:66:dc:8d:65:e4:b4:7d:b2:c1:c9:4e:
         9e:9e:c8:69:0a:be:c1:74:f6:77:ea:f7:60:2d:ea:09:81:ed:
         00:4a:10:0b:46:f1:10:dc:df:e9:e1:01:e5:ce:36:70:14:e9:
         0b:3a:b6:5f:43:63:d4:36:8a:25:bd:d2:88:0f:68:b9:51:b2:
         9f:61:98:57:71:45:f6:8e:37:b9:db:4f:f6:0d:7b:c0:fe:f6:
         2d:2e:c8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:22 2026 by rpki-client