This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6EF718CF2D311F0BDF03F96DAE4EC9C.roa
File:                     D6EF718CF2D311F0BDF03F96DAE4EC9C.roa (raw, json)
Hash identifier:          b4mTLMWlioQEpQ5iN30tqv1UyTE735sDosQLUlFIoyU=
Subject key identifier:   99:AF:40:DE:39:B3:4D:77:02:06:52:33:A9:0D:35:B3:77:DD:CB:31
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01976D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6EF718CF2D311F0BDF03F96DAE4EC9C.roa
Signing time:             Fri 16 Jan 2026 12:06:51 +0000
ROA not before:           Fri 16 Jan 2026 12:06:46 +0000
ROA not after:            Fri 06 Mar 2026 12:06:46 +0000
asID:                     21859
IP address blocks:        45.197.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104301 (0x1976d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 16 12:06:46 2026 GMT
            Not After : Mar  6 12:06:46 2026 GMT
        Subject: CN=696a29db-2c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:1a:f9:2e:18:86:17:26:ce:3d:5e:1f:f2:
                    e5:a6:6d:92:29:50:53:9c:cd:df:44:2e:9b:dd:eb:
                    6e:6b:4c:3c:bb:3b:18:5e:6b:34:9b:60:82:63:30:
                    f2:a5:ed:ff:86:06:f4:36:c2:bb:bb:df:f8:9e:9d:
                    1a:8b:96:81:8c:44:5e:80:ce:11:8c:81:04:2d:7a:
                    53:c7:b1:9b:84:70:e9:91:7f:b0:e1:65:7d:c5:9a:
                    ed:90:62:19:a9:43:01:e6:10:fc:ed:b6:72:03:10:
                    b1:bc:f2:5f:99:33:2d:b7:28:42:65:e2:b1:20:d9:
                    e8:2a:ed:0b:45:0e:d1:00:0c:c2:af:8c:01:9c:48:
                    5a:74:5b:d0:ca:66:8e:22:a5:cf:83:7c:da:9a:5b:
                    51:be:e6:dc:1f:4c:01:2d:65:33:4a:26:2e:35:cd:
                    d6:1b:37:22:ee:34:50:3d:5c:4e:87:b8:12:63:36:
                    b4:69:1e:0a:63:2b:8c:49:a2:62:43:63:6a:93:ab:
                    41:ba:2d:d1:4f:81:c0:00:10:ef:14:f3:eb:f3:fd:
                    27:f5:e7:dc:ca:a7:12:6b:ce:76:70:50:26:46:50:
                    a5:68:86:21:d6:ad:b2:33:74:54:2f:50:86:e9:42:
                    eb:de:27:23:21:db:fd:c4:8b:26:0b:5c:3f:97:f0:
                    04:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AF:40:DE:39:B3:4D:77:02:06:52:33:A9:0D:35:B3:77:DD:CB:31
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6EF718CF2D311F0BDF03F96DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:01:08:86:65:e3:41:ab:2e:0f:96:e0:55:04:0b:aa:5e:0b:
         9a:24:69:66:a2:08:0f:c3:2b:c0:da:74:9f:ae:c1:9d:3c:28:
         7f:4a:47:3d:c4:d8:25:60:90:42:3a:c8:dc:68:89:b7:c0:fe:
         0d:1a:61:76:e9:ac:db:60:49:38:5d:24:96:84:0d:ea:fe:9d:
         94:fa:d4:f4:44:d2:24:6d:b2:c3:ed:6c:51:08:34:f5:50:74:
         9b:d7:46:a2:17:34:8d:e8:f4:86:61:bc:f3:39:42:0b:97:78:
         59:cf:30:c3:d4:8b:7a:eb:27:71:aa:4d:34:56:ef:1f:d0:f5:
         23:6d:cb:f7:89:bc:ef:3a:4e:c0:d4:a6:15:b2:96:f0:29:f6:
         7e:34:f7:04:ae:a9:84:e2:06:d1:8c:8c:37:fe:bd:04:45:41:
         4c:64:a8:fe:63:d1:5c:ae:b3:a4:49:a3:90:53:27:25:b9:41:
         b9:53:af:8a:9d:e2:cc:53:de:46:59:a4:44:37:72:99:3d:1a:
         8c:1c:29:2d:06:3c:be:ce:14:f3:54:15:38:e3:0e:3e:36:24:
         f3:fc:71:66:a9:39:51:f4:12:f2:98:83:56:42:3e:01:b4:8d:
         b3:7e:33:c1:84:54:0d:bc:ec:fd:df:56:cb:4f:f4:76:06:5b:
         29:05:14:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:00 2026 by rpki-client