This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBA115A4F0AE11F09BB03B81DAE4EC9C.roa
File:                     DBA115A4F0AE11F09BB03B81DAE4EC9C.roa (raw, json)
Hash identifier:          b78ILW0we+rf28mSiN3hnmf8OWYC5lsE8xE1g5yQvHQ=
Subject key identifier:   94:C7:0B:44:FD:65:BC:DC:AA:35:8E:C3:E7:21:34:5D:CC:12:88:EF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0196A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBA115A4F0AE11F09BB03B81DAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 18:37:05 +0000
ROA not before:           Tue 13 Jan 2026 18:37:00 +0000
ROA not after:            Fri 23 Jan 2026 18:37:00 +0000
asID:                     395793
IP address blocks:        45.192.13.0/24 maxlen: 24
                          45.192.14.0/24 maxlen: 24
                          45.192.15.0/24 maxlen: 24
                          45.192.16.0/24 maxlen: 24
                          45.198.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104102 (0x196a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 13 18:37:00 2026 GMT
            Not After : Jan 23 18:37:00 2026 GMT
        Subject: CN=696690d1-6897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:8f:54:53:ec:59:e3:64:35:2b:34:35:f6:
                    74:26:a2:0d:4a:f0:fa:f5:13:8e:a9:d2:ea:ae:6b:
                    66:ea:11:96:2a:73:69:3a:2e:eb:df:5b:27:9b:19:
                    ba:c6:b8:03:2b:c2:b3:fe:67:0b:15:c6:63:2c:73:
                    eb:f4:ca:cd:e5:4f:6f:9e:46:98:5e:ba:12:0f:02:
                    51:fe:5c:cf:99:7c:ef:28:29:9f:a4:0e:42:9e:22:
                    2d:15:ff:6a:08:73:02:ee:9b:32:cd:d3:43:bb:f2:
                    ff:70:ca:b4:20:b4:31:81:fd:d6:63:55:76:ff:6d:
                    b8:37:54:5b:75:80:8e:00:c5:94:ab:b0:76:e5:78:
                    39:61:27:6a:5a:32:97:80:4b:ef:5f:ae:ee:09:33:
                    f1:c3:d6:62:b0:d8:b3:f8:0e:24:a1:cf:c2:c2:3d:
                    39:11:67:9b:46:f1:1d:75:6f:7d:8c:5f:4e:da:04:
                    f4:20:67:76:24:0f:31:37:a4:16:62:9a:d9:71:62:
                    16:42:18:bf:3d:8e:f2:b0:c5:94:20:9d:c6:fd:02:
                    1d:31:94:9b:ff:7c:67:95:3d:03:e5:3a:5b:b9:ea:
                    b9:18:f1:b4:6b:ab:c8:93:6e:6d:25:17:42:9d:38:
                    98:38:db:bc:da:13:49:ae:0a:ef:a2:d9:5d:83:6a:
                    9f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C7:0B:44:FD:65:BC:DC:AA:35:8E:C3:E7:21:34:5D:CC:12:88:EF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBA115A4F0AE11F09BB03B81DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.13.0-45.192.16.255
                  45.198.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:c7:63:36:25:4b:00:32:71:65:e2:58:4f:22:2c:95:a2:26:
         1d:22:77:bc:8b:1a:b0:e7:5a:b5:03:1d:89:20:e6:ad:54:57:
         82:a7:be:a7:ac:e7:d0:8f:42:1b:25:3f:f8:55:6a:4d:e7:8d:
         44:df:80:57:8f:33:3e:d6:13:7c:6f:21:23:db:01:c1:8e:96:
         15:7a:e5:fa:84:ff:6b:b5:e7:9a:31:0f:55:28:ca:71:db:00:
         41:47:17:31:0d:45:0d:b0:8b:89:2c:f8:6b:4b:bb:88:4d:c1:
         c6:6b:b2:bf:0f:97:0c:51:01:b4:b1:ff:2c:9a:4f:9b:16:3c:
         60:8c:96:82:96:a0:d8:a4:53:8b:7e:56:9f:81:62:d5:c4:5c:
         c5:2d:c9:69:77:63:6b:13:a0:0a:8a:82:7d:bc:18:09:6b:32:
         5a:5c:d7:00:47:8e:e8:0f:63:40:c0:09:db:89:21:3e:12:ad:
         4d:e0:ca:41:3f:8e:62:f8:59:fa:1d:a8:6d:ee:6f:cc:52:1d:
         84:e1:b5:dc:1d:4a:38:3b:b2:18:fb:13:0c:4d:3f:b0:85:35:
         cf:55:bc:2b:98:da:94:a5:a5:c2:8e:3d:07:3e:96:34:ee:7e:
         27:27:38:6c:41:af:e0:74:e4:e8:c1:3c:b8:97:f5:32:68:2d:
         e8:3b:19:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:10 2026 by rpki-client