This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4E4B4BAEEA011F096F8DCE3DAE4EC9C.roa
File:                     D4E4B4BAEEA011F096F8DCE3DAE4EC9C.roa (raw, json)
Hash identifier:          wj+5TYznzomc8BV215wZyExzzi1C4xlwoN8ROSFSXXU=
Subject key identifier:   B4:6F:32:FE:AA:BD:EE:AB:5D:78:60:B2:7F:63:17:DD:42:C4:C8:A2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019617
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4E4B4BAEEA011F096F8DCE3DAE4EC9C.roa
Signing time:             Sun 11 Jan 2026 03:51:39 +0000
ROA not before:           Sun 11 Jan 2026 03:51:33 +0000
ROA not after:            Fri 20 Feb 2026 03:51:33 +0000
asID:                     61112
IP address blocks:        45.196.233.0/24 maxlen: 24
                          45.196.234.0/23 maxlen: 24
                          45.196.235.0/24 maxlen: 24
                          45.196.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103959 (0x19617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 11 03:51:33 2026 GMT
            Not After : Feb 20 03:51:33 2026 GMT
        Subject: CN=69631e4a-4d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:de:7f:15:ea:78:2f:66:32:49:f1:b7:96:1b:
                    10:94:62:54:25:3b:7d:0c:2f:a2:45:e6:ae:a5:3c:
                    25:d1:a4:76:60:29:0a:2d:9c:18:c4:90:fa:42:8c:
                    a9:b8:4f:70:37:26:f0:38:b3:e6:56:12:64:00:7d:
                    93:59:68:10:a1:7b:91:0a:86:54:da:e3:52:f9:8a:
                    91:eb:b7:3a:de:8b:69:fe:4b:9c:b8:79:5c:1a:d2:
                    c2:06:17:9e:aa:82:2f:37:8c:bf:1d:a1:bc:dc:95:
                    50:d8:23:42:ef:de:af:53:5b:73:05:1a:b9:50:a9:
                    de:9c:42:05:78:dc:c7:99:30:fb:ca:f3:ec:84:23:
                    f9:f9:0c:37:02:72:c5:a4:8f:43:3e:e6:02:59:53:
                    02:c1:b2:55:c7:9a:be:11:38:80:ed:26:5d:99:78:
                    06:e1:fe:e5:16:31:0b:9e:2e:2d:e7:b2:dc:0a:44:
                    71:4d:39:19:6c:98:26:59:aa:41:ad:f7:07:39:b4:
                    c7:be:1e:70:38:25:c9:94:e6:8b:b3:a2:20:93:8b:
                    06:ee:8f:0c:23:e9:7a:22:ba:5d:d8:e2:00:b1:34:
                    db:7e:55:3c:39:dd:db:b0:e0:04:8b:50:4c:50:cc:
                    09:08:0f:5d:b6:5f:cd:be:5b:58:db:80:00:8b:66:
                    91:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6F:32:FE:AA:BD:EE:AB:5D:78:60:B2:7F:63:17:DD:42:C4:C8:A2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4E4B4BAEEA011F096F8DCE3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.233.0-45.196.235.255
                  45.196.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:ec:40:b4:58:64:d7:bb:7a:f9:d3:4a:a5:df:60:b7:f2:56:
         b4:8a:48:6b:91:2d:ef:a8:60:c3:c2:12:71:ef:0d:a5:df:ba:
         ca:3c:29:7c:f4:ac:28:0c:c9:34:0b:ab:d0:d3:86:49:79:7c:
         07:b9:bf:81:45:2c:80:76:c3:0b:de:d7:f1:ae:12:f1:5c:bc:
         ec:fc:58:9c:9c:3d:fa:14:ae:48:9b:4d:4c:fb:f3:2a:9f:8e:
         c4:d1:45:2f:ee:05:e1:df:60:a4:47:97:92:02:93:c1:1d:bf:
         49:ff:78:9b:cd:c7:e3:6b:c1:e9:08:b5:5b:37:ec:81:c8:39:
         5e:09:af:f5:e1:19:a8:56:6f:16:ce:45:4e:e9:eb:e7:2a:5f:
         1b:e8:84:bd:63:49:2f:18:55:54:b8:c8:10:85:c2:76:92:42:
         4d:7e:3b:82:c1:1f:75:6e:c9:b7:db:20:6d:39:39:e2:69:1a:
         18:8d:90:7c:c9:32:de:85:81:63:20:91:51:aa:ff:3b:49:9c:
         4d:fe:0b:06:02:f1:a2:39:ff:5a:f3:72:b5:05:90:de:73:e5:
         4c:57:d1:2d:19:79:40:52:c4:87:71:d4:db:66:59:ab:55:74:
         bb:cc:e4:a3:82:4c:16:41:cf:e3:72:f0:26:f4:fa:ea:7c:1b:
         af:7a:28:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:36 2026 by rpki-client