This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3C9C8E2000A11F1928885D9DAE4EC9C.roa
File:                     D3C9C8E2000A11F1928885D9DAE4EC9C.roa (raw, json)
Hash identifier:          HBHu0nQ24H6txDmqvK1ZhckZDRGvG4yEz4eN6UNVjts=
Subject key identifier:   75:AC:03:9F:D8:2A:B4:15:73:CD:3C:BF:E5:FA:A6:5F:1E:62:21:49
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019B75
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3C9C8E2000A11F1928885D9DAE4EC9C.roa
Signing time:             Mon 02 Feb 2026 07:43:13 +0000
ROA not before:           Mon 02 Feb 2026 07:43:08 +0000
ROA not after:            Thu 12 Mar 2026 07:43:08 +0000
asID:                     141883
IP address blocks:        45.200.24.0/21 maxlen: 24
                          45.200.32.0/19 maxlen: 24
                          45.201.214.0/23 maxlen: 24
                          45.201.216.0/21 maxlen: 24
                          45.201.224.0/21 maxlen: 24
                          45.201.240.0/20 maxlen: 24
                          45.204.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 12 Feb 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105333 (0x19b75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb  2 07:43:08 2026 GMT
            Not After : Mar 12 07:43:08 2026 GMT
        Subject: CN=69805591-df6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:bc:fb:d2:b6:b2:03:7d:0f:41:31:39:22:
                    c6:5c:a4:ae:89:24:c3:95:db:2a:5e:1a:82:fa:74:
                    52:bb:f3:96:86:92:c0:e8:0e:b3:86:0a:98:fe:a1:
                    2e:17:ca:31:0c:b5:68:35:4b:92:07:02:26:28:37:
                    0d:f1:74:2d:3e:82:8d:7f:93:ba:22:1b:b4:23:d5:
                    da:1b:ab:c6:60:15:c7:a2:5d:a0:a7:8f:7f:a6:43:
                    18:93:11:c9:f1:77:97:da:50:22:e5:52:b5:0d:f6:
                    9f:1d:30:ad:c8:bb:b3:fc:a7:92:3a:69:42:5a:22:
                    13:27:91:de:ed:d8:f5:56:3b:60:82:ed:62:07:4a:
                    0d:71:75:ec:8c:5c:54:38:e1:78:ba:d1:70:b0:d4:
                    ee:cf:5c:cf:48:79:38:4f:7d:60:35:c2:d1:75:75:
                    05:17:e3:20:12:13:11:3e:83:2f:a1:40:67:61:bd:
                    41:7f:7f:cf:1a:2c:29:de:dc:25:39:a7:4d:17:78:
                    eb:e1:50:4e:22:26:ae:82:21:69:aa:7d:53:74:51:
                    f8:04:c9:eb:7d:ca:28:68:72:77:f0:3f:31:b4:af:
                    f2:d9:d4:55:40:90:d6:dd:ea:f6:eb:a6:cc:f2:9c:
                    da:07:87:45:8d:c7:ac:c2:c6:e9:f1:ce:a5:2d:dd:
                    13:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AC:03:9F:D8:2A:B4:15:73:CD:3C:BF:E5:FA:A6:5F:1E:62:21:49
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3C9C8E2000A11F1928885D9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.24.0-45.200.63.255
                  45.201.214.0-45.201.231.255
                  45.201.240.0/20
                  45.204.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:45:f9:ff:4a:38:46:0e:6d:7c:fb:83:83:c2:ab:07:e7:c2:
         ff:8d:bd:2d:4d:7a:09:45:f9:44:78:6b:a1:8f:2b:1c:b6:1f:
         45:35:79:73:00:d1:04:73:fd:3f:e0:39:0d:6d:d9:16:fd:ad:
         af:f3:b5:42:a0:43:5a:b3:45:f1:9c:fe:9a:8f:3c:c5:41:38:
         fe:06:ff:3e:7d:e3:31:1b:dc:86:d1:42:24:47:dc:60:2f:68:
         e5:3d:fb:43:18:13:5c:ed:0d:f7:f3:3c:21:1e:d6:02:8e:3f:
         62:bc:7f:d8:7b:28:61:f8:43:cb:d0:4f:0c:d0:d4:0c:94:f6:
         b8:6d:e1:ab:a4:48:d7:e5:ed:2f:2d:2e:37:3e:cf:67:4f:6c:
         70:7c:26:e9:ef:05:cb:99:3c:bd:d9:d6:e0:b9:27:0b:4b:c5:
         94:90:cb:ad:80:5d:b8:9e:57:f5:70:19:a3:69:6f:b2:2d:d2:
         9b:f4:df:6a:1d:55:22:61:dc:8b:3d:a5:5b:ff:23:78:cb:31:
         d9:ed:7b:c0:a0:c7:db:ee:7b:a0:9c:85:b0:3e:d0:8a:8c:6a:
         ed:0b:d3:81:f5:ad:e0:23:52:fd:9b:31:57:3f:40:8a:95:d3:
         bf:de:e9:58:91:e2:f9:81:f2:44:f5:04:23:b4:ff:a4:01:d8:
         ae:e7:b8:9b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAZt1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjAyMDc0MzA4WhcNMjYwMzEyMDc0MzA4WjAYMRYw
FAYDVQQDEw02OTgwNTU5MS1kZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxSq8+9K2sgN9D0ExOSLGXKSuiSTDldsqXhqC+nRSu/OWhpLA6A6zhgqY
/qEuF8oxDLVoNUuSBwImKDcN8XQtPoKNf5O6Ihu0I9XaG6vGYBXHol2gp49/pkMY
kxHJ8XeX2lAi5VK1DfafHTCtyLuz/KeSOmlCWiITJ5He7dj1Vjtggu1iB0oNcXXs
jFxUOOF4utFwsNTuz1zPSHk4T31gNcLRdXUFF+MgEhMRPoMvoUBnYb1Bf3/PGiwp
3twlOadNF3jr4VBOIiaugiFpqn1TdFH4BMnrfcooaHJ38D8xtK/y2dRVQJDW3er2
66bM8pzaB4dFjceswsbp8c6lLd0TBQIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFHWs
A5/YKrQVc808v+X6pl8eYiFJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EM0M5QzhFMjAwMEExMUYxOTI4ODg1RDlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAMtyBgDBAYtyAAwDAMEAS3J
1gMEAy3J4AMEBC3J8AMEAC3MADANBgkqhkiG9w0BAQsFAAOCAQEAGkX5/0o4Rg5t
fPuDg8KrB+fC/429LU16CUX5RHhroY8rHLYfRTV5cwDRBHP9P+A5DW3ZFv2tr/O1
QqBDWrNF8Zz+mo88xUE4/gb/Pn3jMRvchtFCJEfcYC9o5T37QxgTXO0N9/M8IR7W
Ao4/Yrx/2HsoYfhDy9BPDNDUDJT2uG3hq6RI1+XtLy0uNz7PZ09scHwm6e8Fy5k8
vdnW4LknC0vFlJDLrYBduJ5X9XAZo2lvsi3Sm/Tfah1VImHciz2lW/8jeMsx2e17
wKDH2+57oJyFsD7Qioxq7QvTgfWt4CNS/ZsxVz9AipXTv97pWJHi+YHyRPUEI7T/
pAHYrue4mw==
-----END CERTIFICATE-----
Generated at Wed Feb 11 01:29:44 2026 by rpki-client