This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E232A334F06211F0AB61FFB5DAE4EC9C.roa
File:                     E232A334F06211F0AB61FFB5DAE4EC9C.roa (raw, json)
Hash identifier:          4wKRGTQP4A9buwrX+bjVCzii2xRSeKz5xBb8X+oIOvk=
Subject key identifier:   D3:C9:2A:56:52:EA:A2:8E:53:33:C4:25:6A:C6:1B:1B:80:50:62:DF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019681
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E232A334F06211F0AB61FFB5DAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 09:33:14 +0000
ROA not before:           Tue 13 Jan 2026 09:33:10 +0000
ROA not after:            Sat 14 Feb 2026 09:33:10 +0000
asID:                     147176
IP address blocks:        45.201.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104065 (0x19681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 13 09:33:10 2026 GMT
            Not After : Feb 14 09:33:10 2026 GMT
        Subject: CN=6966115a-cea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:af:f8:b9:7d:cf:53:62:b8:13:77:b4:68:
                    91:22:6a:e0:fe:d1:53:d7:d8:b0:ad:bb:2d:8b:98:
                    ad:d1:bd:3a:ff:b5:a6:16:af:18:75:14:9d:0b:7d:
                    c0:1a:c8:f9:8b:e6:22:74:b2:d5:87:cc:1f:4b:31:
                    36:e4:1d:89:b7:3a:92:2f:d3:67:4c:2b:0d:cb:6a:
                    e8:f7:3b:a7:2c:5b:09:a8:f3:90:23:0a:e9:aa:49:
                    85:53:34:ab:4e:8e:07:aa:eb:3d:ac:d8:d9:88:2a:
                    b8:06:1d:78:e2:45:b3:97:a7:29:bb:93:5e:8b:26:
                    9a:60:62:ae:f9:de:6a:7c:c8:68:7b:43:6e:b4:9e:
                    13:31:43:40:2c:62:4c:be:da:45:10:f8:39:c1:97:
                    8d:0b:9e:0b:e9:0f:72:9a:bd:7c:01:dd:b9:cd:a2:
                    5e:d9:0b:92:65:3b:df:43:b6:20:31:0f:b2:80:c7:
                    90:c5:0e:16:46:53:7d:0f:83:23:8f:d0:1c:a5:9d:
                    ca:8e:ab:a7:04:26:d1:2f:3b:86:51:87:03:fc:dd:
                    bb:91:77:83:68:3f:a3:67:4a:73:a8:07:bc:42:ad:
                    7d:d1:ca:53:5e:72:6b:8a:75:97:0f:5c:48:a0:46:
                    ee:df:e7:0b:b4:8e:db:2b:04:64:33:6f:88:1c:4c:
                    13:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C9:2A:56:52:EA:A2:8E:53:33:C4:25:6A:C6:1B:1B:80:50:62:DF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E232A334F06211F0AB61FFB5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:d4:b5:ca:23:66:32:bb:5b:55:b2:18:83:d9:c0:b3:ba:10:
         7b:f8:71:d4:48:a3:8f:82:c8:e4:ac:7a:df:0d:3b:6a:0f:d1:
         73:f9:90:7f:d7:41:22:ee:b5:8d:23:12:cc:a9:c3:66:5b:ce:
         31:5e:23:01:d6:dd:e8:83:71:2f:bf:af:7f:ec:a7:fe:b8:47:
         10:5a:60:8d:82:11:41:92:27:98:6d:53:c1:cf:6c:73:5d:57:
         b5:6a:54:60:1c:df:bd:bb:aa:24:54:12:01:56:e8:2f:ae:54:
         8c:50:56:3a:9a:a0:1c:cd:7f:29:6f:d9:23:84:d3:57:68:26:
         58:73:c6:db:9d:0f:0f:31:5e:f3:b9:0a:e4:53:12:2c:b0:6b:
         a3:05:3e:0b:f1:d7:81:7a:58:67:b0:9e:4d:a6:74:8d:61:a1:
         31:5a:d3:a4:7c:45:1d:c4:33:dc:21:8f:38:b2:20:db:f5:20:
         19:87:12:fa:ca:d3:94:72:cb:56:93:e3:f2:a7:14:38:8c:7e:
         45:61:ab:14:57:17:fc:45:0b:da:af:b1:63:fc:13:60:ee:78:
         8e:89:ea:38:7b:0f:8d:fc:01:1a:c7:cb:96:3f:85:99:4d:6d:
         6b:8a:50:49:7e:b8:c4:7b:98:d2:70:44:47:bc:3b:e6:c8:50:
         8e:db:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:35:16 2026 by rpki-client