This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D934E1BAE57D11F0B0B3F4A8DAE4EC9C.roa
File:                     D934E1BAE57D11F0B0B3F4A8DAE4EC9C.roa (raw, json)
Hash identifier:          3Ju0tJAUkpgmIqP6R53xXR/QyEnAjDW+LTOqD/85WZI=
Subject key identifier:   9E:AE:02:09:39:FF:00:50:AA:91:84:C6:0C:BE:87:4A:65:F1:DD:55
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019309
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D934E1BAE57D11F0B0B3F4A8DAE4EC9C.roa
Signing time:             Tue 30 Dec 2025 12:48:33 +0000
ROA not before:           Tue 30 Dec 2025 12:48:28 +0000
ROA not after:            Tue 10 Feb 2026 12:48:28 +0000
asID:                     152599
IP address blocks:        45.196.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103177 (0x19309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 30 12:48:28 2025 GMT
            Not After : Feb 10 12:48:28 2026 GMT
        Subject: CN=6953ca21-ee9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3c:86:d3:a1:9e:12:81:ae:1c:c6:1c:2e:67:
                    bc:43:7b:d0:1c:f0:eb:96:a2:2a:b6:03:4e:26:e1:
                    c6:e8:0c:4b:02:cd:e7:c4:6e:0b:bb:c7:a0:c2:8d:
                    9e:2c:a0:ee:9a:69:79:35:7b:74:3b:f2:e7:dd:0d:
                    49:cd:9d:a5:68:7f:28:99:42:20:b0:d8:ec:4c:bd:
                    c1:bd:20:d7:49:ef:ff:35:35:64:37:30:53:2a:71:
                    10:66:de:01:c7:9e:bc:75:b5:58:29:7d:89:b1:09:
                    17:99:21:8e:e2:3b:9e:6b:d2:f1:12:d7:7a:48:71:
                    14:d1:be:5a:5b:3a:ec:a2:be:c5:56:d1:73:40:ae:
                    b1:5e:ed:bb:99:62:9f:53:48:b4:38:65:61:07:29:
                    ba:2d:4f:eb:ce:0f:0d:ed:f5:ff:86:1f:6b:d8:b6:
                    0f:ef:15:00:54:8e:2b:76:35:1c:db:a6:ec:f3:68:
                    6e:de:07:a5:ae:81:98:bd:87:5a:8f:a6:aa:6c:38:
                    11:d0:0e:d2:b8:fd:c4:ab:b5:ba:54:2d:b8:5e:4d:
                    96:5c:45:4b:eb:91:59:11:bf:db:bd:70:f1:49:47:
                    27:0a:da:0c:0c:c5:b0:22:db:f0:d3:df:e4:8d:ef:
                    a9:9b:45:55:1f:5f:d4:2b:0f:bb:ed:18:0c:04:df:
                    60:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AE:02:09:39:FF:00:50:AA:91:84:C6:0C:BE:87:4A:65:F1:DD:55
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D934E1BAE57D11F0B0B3F4A8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:b0:6c:a6:5e:7e:69:8a:8d:8d:d1:fa:1f:be:6d:c5:f1:bd:
         64:bf:85:c5:35:26:f6:a9:59:88:2b:c4:be:3f:e2:fb:79:35:
         d9:d3:a8:18:54:c0:c9:9c:17:5e:95:8e:b4:21:29:a2:21:2b:
         ed:6d:87:61:33:d6:8d:ff:4a:95:36:33:fd:66:00:5e:2b:40:
         5b:24:39:d2:17:b8:87:bd:69:83:e8:83:39:98:f6:32:97:73:
         9e:db:5a:ae:58:f0:1f:5e:13:99:d5:52:3b:fd:45:f8:cb:21:
         32:b0:1a:94:6b:ef:21:28:c2:04:5a:82:87:f5:68:17:f9:de:
         0e:b5:23:df:e1:fc:a9:3f:f2:ab:ab:e6:68:40:09:b5:b4:a0:
         23:2f:bd:0c:6c:44:e9:3f:9d:2c:67:15:b6:f1:68:5b:74:ed:
         da:46:a4:3a:4f:c2:00:4f:2d:7b:de:2b:52:9f:98:04:5c:0e:
         42:84:97:9c:03:bd:60:98:70:b8:28:85:03:99:aa:b3:9d:97:
         1a:b7:a5:42:27:2b:e8:29:90:b0:eb:83:e0:a8:d3:b7:9f:5a:
         be:b3:40:5a:2d:c7:e8:f0:51:38:3a:70:32:d7:b3:68:e8:7b:
         76:cd:c3:20:ea:a7:75:40:2a:ad:40:7d:fa:3a:05:2f:bd:6e:
         fc:3e:0b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:12 2026 by rpki-client