This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8612AF4EBEC11F08C21C9BADAE4EC9C.roa
File:                     C8612AF4EBEC11F08C21C9BADAE4EC9C.roa (raw, json)
Hash identifier:          OBj5y76DBrJcIRF1G4LjP4X0RCMs5SZmhg5bJjJRCXk=
Subject key identifier:   6F:E4:8F:7F:73:BA:62:15:04:2E:6A:DC:C5:C4:87:32:47:F3:A8:05
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01954B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8612AF4EBEC11F08C21C9BADAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 17:17:46 +0000
ROA not before:           Wed 07 Jan 2026 17:17:41 +0000
ROA not after:            Fri 23 Jan 2026 17:17:41 +0000
asID:                     139646
IP address blocks:        45.200.24.0/21 maxlen: 24
                          45.201.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103755 (0x1954b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  7 17:17:41 2026 GMT
            Not After : Jan 23 17:17:41 2026 GMT
        Subject: CN=695e953a-29db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:15:c2:72:2e:b5:83:ee:86:e2:23:74:da:
                    45:85:93:94:db:de:12:e5:c5:6d:6e:57:cb:02:34:
                    23:8c:00:6f:34:b5:1f:55:7f:32:99:2f:90:c3:19:
                    d8:3a:32:3e:ec:b0:a5:fb:5a:2e:e3:4d:77:46:2a:
                    08:5a:70:09:a3:3f:72:bf:93:39:49:ed:b2:ca:97:
                    67:d3:1a:4c:57:49:84:c3:fa:2e:0c:b8:8a:ce:90:
                    f3:2c:73:a0:66:f8:f8:de:13:ef:95:9d:6e:db:0d:
                    6b:b7:a7:fe:4c:53:c1:1a:d7:ac:1d:7c:8c:e8:67:
                    ac:ef:5b:ad:62:05:a8:70:0b:80:42:fb:8e:2e:99:
                    80:0c:3f:79:c1:7f:ed:29:52:ec:6c:56:5d:2b:e8:
                    32:db:f1:f3:9f:75:7c:00:46:c6:fe:d0:a9:1f:27:
                    8e:89:e9:fc:61:06:c0:68:79:fa:41:9b:43:a4:f1:
                    44:04:e0:1e:90:b6:f7:cf:ac:0e:54:11:42:a6:a6:
                    de:25:92:fa:17:e4:1d:c4:ad:2c:00:9d:9e:5e:13:
                    b4:e0:00:3f:b3:d4:59:8e:36:4f:8b:d7:26:bf:aa:
                    a1:1a:00:a5:ea:24:52:ab:72:06:20:63:b8:b4:ec:
                    aa:9f:05:f7:7c:44:63:37:de:78:1c:c1:8b:aa:ce:
                    e4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E4:8F:7F:73:BA:62:15:04:2E:6A:DC:C5:C4:87:32:47:F3:A8:05
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8612AF4EBEC11F08C21C9BADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.24.0/21
                  45.201.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:b2:66:75:d4:fc:4c:89:ee:c9:14:48:66:43:bd:d6:75:cc:
         fc:18:b9:4f:5e:0d:7c:47:e3:bc:e4:d7:dd:1b:97:11:c5:08:
         a1:dd:fa:01:d8:02:52:f6:6d:0b:2e:33:f6:e4:51:51:b1:ec:
         f8:49:b3:58:b8:82:03:47:37:50:f2:84:34:37:df:ce:70:98:
         79:41:0f:42:b8:76:97:2b:c5:e0:a8:84:12:7e:85:57:61:53:
         84:e6:89:8d:c4:dd:09:03:99:40:d0:4a:b7:02:17:9b:60:81:
         6e:5b:6c:05:cb:b8:c3:69:2c:f8:dc:0a:72:a3:11:9b:21:00:
         ab:26:87:c4:68:02:a3:8f:72:25:42:b1:64:a0:2b:ae:55:fe:
         d8:43:34:a0:fa:41:d9:82:ea:a5:c5:ed:8f:fc:60:4c:56:cc:
         96:32:f4:73:dc:e3:7a:ce:dd:f8:87:31:cc:76:a8:7e:89:89:
         52:83:0c:a7:b2:c5:0e:93:6f:00:d6:dc:e3:f9:7e:71:6c:69:
         e7:c8:54:1f:70:88:2d:ea:4c:d1:77:a5:7a:ab:8b:07:c2:44:
         c1:aa:fb:9f:b0:9a:eb:f8:23:3c:ba:4d:14:f2:48:34:f6:60:
         0c:3e:e6:8f:00:de:0f:b1:7c:db:8c:82:04:f6:3d:2e:5e:5d:
         45:01:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:41 2026 by rpki-client