This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CABD1DF8EAF711F0AEEB49DBDAE4EC9C.roa
File:                     CABD1DF8EAF711F0AEEB49DBDAE4EC9C.roa (raw, json)
Hash identifier:          tH0ormmrq9zDYQUluFyCit+8xeSv98CDPnlyzMs4lH0=
Subject key identifier:   48:B4:12:39:09:8E:E4:D8:9C:4D:1E:85:D6:AA:E1:F9:3F:E5:D0:2C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019498
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CABD1DF8EAF711F0AEEB49DBDAE4EC9C.roa
Signing time:             Tue 06 Jan 2026 12:04:03 +0000
ROA not before:           Tue 06 Jan 2026 12:03:58 +0000
ROA not after:            Thu 12 Feb 2026 12:03:58 +0000
asID:                     20326
IP address blocks:        45.202.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103576 (0x19498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  6 12:03:58 2026 GMT
            Not After : Feb 12 12:03:58 2026 GMT
        Subject: CN=695cfa33-4fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:59:18:a3:84:cc:c9:d7:8d:4d:05:a1:5b:1d:
                    77:2a:a6:88:d9:8b:d1:0b:ea:e1:3e:95:85:08:08:
                    ce:b1:35:10:44:05:b6:ad:de:31:22:ed:a9:2b:ce:
                    bf:fe:f4:58:e4:9e:48:40:87:ce:48:6f:c8:9d:14:
                    ec:6a:73:ee:3a:ac:4c:0c:aa:b6:55:fb:7a:25:52:
                    41:c1:eb:5b:00:96:9f:92:4a:fb:ca:90:1b:8d:14:
                    9e:b0:37:78:4e:1e:ee:15:fb:53:47:5b:5d:b5:97:
                    4d:a4:f7:89:50:e6:6f:1e:12:54:e1:2e:0a:94:8f:
                    81:1a:c5:7b:1d:47:c5:89:9c:32:0f:08:a3:44:e2:
                    39:9a:9d:6f:9d:a9:e1:13:95:3b:5b:17:88:e6:fc:
                    85:8b:0f:36:0e:08:04:02:f0:51:aa:a1:d5:13:50:
                    01:1b:f3:70:1d:6e:c7:f0:d2:56:1c:95:ce:8d:4d:
                    52:bf:f0:68:2b:1b:1d:e0:41:23:bd:d1:dc:14:23:
                    37:69:cc:32:a4:e9:c4:c8:5d:74:52:57:5a:69:22:
                    c6:49:7d:68:43:36:46:93:1d:9d:e1:98:c4:53:8d:
                    a8:69:ae:0a:5c:16:9d:8c:89:4e:98:87:63:bd:1c:
                    a3:d2:39:1e:47:75:d9:8e:3c:07:ab:71:24:d8:05:
                    bf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B4:12:39:09:8E:E4:D8:9C:4D:1E:85:D6:AA:E1:F9:3F:E5:D0:2C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CABD1DF8EAF711F0AEEB49DBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:17:a1:a2:e2:ca:cc:db:e1:96:07:81:de:c1:bc:77:e3:83:
         7a:33:02:36:0f:94:80:34:9f:71:af:69:d4:86:3b:1b:ad:1b:
         04:3b:74:26:31:de:67:5b:a9:9b:87:ca:3f:9d:cf:2f:fd:85:
         6c:e4:eb:cf:fa:80:01:91:b6:3c:a4:8b:c2:f4:d4:cc:1b:6b:
         b4:63:7a:c1:0c:10:e6:d3:9b:fd:43:bc:2f:a1:ec:c7:2e:c0:
         ba:86:88:34:14:17:56:e9:92:4c:54:58:ea:0e:e6:2d:9e:78:
         f3:42:69:3b:31:90:f9:62:dd:f6:ac:c4:a6:c2:11:93:4a:29:
         5b:f5:2b:7c:cb:05:f6:94:a1:5b:aa:56:2f:82:aa:1a:53:d5:
         9a:8e:7e:12:90:a3:78:72:e7:c4:7d:94:03:1a:2e:ff:61:06:
         d4:b6:bb:7c:ff:d1:d4:9c:06:2c:b2:03:95:9d:a5:23:db:0d:
         45:e5:dc:e7:f4:f8:78:e2:d6:b5:52:d2:87:1c:61:dd:4e:67:
         8a:3c:3e:8e:23:a6:13:38:3e:99:44:7e:f8:f3:dd:6c:da:d3:
         66:c8:d8:29:7b:44:63:bb:52:53:9e:a1:1b:96:d8:ac:e7:3f:
         fb:97:94:ce:7c:b3:cd:c4:a7:28:8d:9f:90:5b:56:cb:7b:38:
         f6:f7:6d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:47 2026 by rpki-client