This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D748DC4AE7D911F0847F77B2DAE4EC9C.roa
File:                     D748DC4AE7D911F0847F77B2DAE4EC9C.roa (raw, json)
Hash identifier:          vnhREP6iaUx/CDqRjw3/y/xORTKtkWohl+ypu82C3AM=
Subject key identifier:   C1:24:7A:C9:7F:C4:CC:CC:0C:4E:29:D9:15:EA:E0:89:9A:9F:87:74
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019419
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D748DC4AE7D911F0847F77B2DAE4EC9C.roa
Signing time:             Fri 02 Jan 2026 12:52:06 +0000
ROA not before:           Fri 02 Jan 2026 12:52:01 +0000
ROA not after:            Tue 10 Feb 2026 12:52:01 +0000
asID:                     401366
IP address blocks:        45.207.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103449 (0x19419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  2 12:52:01 2026 GMT
            Not After : Feb 10 12:52:01 2026 GMT
        Subject: CN=6957bf76-8f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ec:c5:68:46:41:e5:5b:90:7b:f8:cc:d8:f6:
                    64:3f:ee:ff:cb:ea:08:d3:85:0f:de:2c:b4:8d:63:
                    e6:84:a7:65:e3:fe:60:b3:0a:ac:c6:e4:d6:a4:a8:
                    4d:b7:3e:e2:22:78:40:a3:b3:3a:33:85:be:44:15:
                    72:b5:eb:2e:b3:2f:81:93:fc:38:61:72:93:8d:f6:
                    98:e1:79:5c:97:e7:0f:5e:c4:32:59:eb:7d:95:09:
                    a8:8e:4c:5f:88:f0:c7:2d:dc:59:ba:c5:88:fd:a0:
                    ed:08:b4:3f:64:02:37:92:d0:f3:21:20:8c:d1:79:
                    0e:7e:0c:6e:32:9f:31:a1:4f:93:49:b0:92:a9:47:
                    cd:73:fb:d7:8f:dc:9c:70:b7:d5:d1:bf:e0:1b:f8:
                    e5:64:20:f1:1f:ca:d2:f8:6c:6e:76:7c:58:bc:78:
                    c4:72:90:06:bd:29:de:74:53:2d:67:02:ed:67:87:
                    58:49:7f:7d:b5:29:b8:01:c4:b9:a5:be:46:1e:99:
                    33:74:d2:5c:6c:ff:33:b4:db:12:0a:69:65:ce:db:
                    a7:6d:93:7d:3b:04:97:a3:10:62:ad:40:8c:ed:6f:
                    f1:0c:20:58:a9:8e:9d:cd:5c:6a:74:ed:d4:77:48:
                    96:a5:23:42:84:d5:28:4c:eb:20:f2:56:c8:88:a1:
                    31:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:24:7A:C9:7F:C4:CC:CC:0C:4E:29:D9:15:EA:E0:89:9A:9F:87:74
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D748DC4AE7D911F0847F77B2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:e3:a9:36:c4:3f:32:ec:3b:c8:02:52:f9:a9:54:0b:7b:bf:
         e4:07:41:46:ee:48:52:2f:46:15:29:fe:64:52:b0:af:88:55:
         97:22:d3:50:02:89:61:2a:f5:c2:d7:6a:f0:d0:cb:a4:b9:31:
         27:03:df:2e:2c:61:a3:7d:f1:81:6d:9b:57:1f:3f:c3:a0:a0:
         29:a2:5b:90:6d:98:6f:52:6c:56:54:11:56:81:1f:c4:45:6d:
         b3:bd:b2:6e:3f:6b:5e:a2:27:32:5a:de:06:30:c1:ff:73:3c:
         ba:db:a3:10:b3:ad:33:0d:32:6b:10:40:91:dc:ed:f3:44:46:
         95:37:ed:15:83:1a:08:a5:33:25:94:8c:06:0e:77:ae:6e:b7:
         7e:d2:2a:f5:dd:97:fc:2a:aa:65:34:7e:65:3d:e5:b7:4c:6d:
         ac:1f:66:9c:33:57:b8:8b:7c:51:2c:a4:e9:25:14:b2:9f:e8:
         f3:f7:94:35:3e:2f:d4:62:f4:fc:7d:06:53:29:e7:6b:be:73:
         d7:cb:5a:4a:ea:46:cf:9e:05:ff:e4:dc:23:cf:7d:3a:14:15:
         f9:1a:c7:d9:73:6a:f7:27:3a:10:14:dd:61:72:f9:8b:2b:6c:
         1a:51:6d:52:e6:c6:2a:af:ca:d9:5f:10:cd:9c:29:6f:06:62:
         33:cb:8c:33
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZQZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTAyMTI1MjAxWhcNMjYwMjEwMTI1MjAxWjAYMRYw
FAYDVQQDEw02OTU3YmY3Ni04ZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4+zFaEZB5VuQe/jM2PZkP+7/y+oI04UP3iy0jWPmhKdl4/5gswqsxuTW
pKhNtz7iInhAo7M6M4W+RBVytesusy+Bk/w4YXKTjfaY4Xlcl+cPXsQyWet9lQmo
jkxfiPDHLdxZusWI/aDtCLQ/ZAI3ktDzISCM0XkOfgxuMp8xoU+TSbCSqUfNc/vX
j9yccLfV0b/gG/jlZCDxH8rS+GxudnxYvHjEcpAGvSnedFMtZwLtZ4dYSX99tSm4
AcS5pb5GHpkzdNJcbP8ztNsSCmllztunbZN9OwSXoxBirUCM7W/xDCBYqY6dzVxq
dO3Ud0iWpSNChNUoTOsg8lbIiKEx5wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMEk
esl/xMzMDE4p2RXq4Iman4d0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENzQ4REM0QUU3RDkxMUYwODQ3Rjc3QjJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8uMA0GCSqGSIb3DQEBCwUA
A4IBAQCO46k2xD8y7DvIAlL5qVQLe7/kB0FG7khSL0YVKf5kUrCviFWXItNQAolh
KvXC12rw0MukuTEnA98uLGGjffGBbZtXHz/DoKApoluQbZhvUmxWVBFWgR/ERW2z
vbJuP2teoicyWt4GMMH/czy626MQs60zDTJrEECR3O3zREaVN+0VgxoIpTMllIwG
Dneubrd+0ir13Zf8KqplNH5lPeW3TG2sH2acM1e4i3xRLKTpJRSyn+jz95Q1Pi/U
YvT8fQZTKedrvnPXy1pK6kbPngX/5Nwjz306FBX5GsfZc2r3JzoQFN1hcvmLK2wa
UW1S5sYqr8rZXxDNnClvBmIzy4wz
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:15 2026 by rpki-client