This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB23EB9E040111F1BE41F5B7DAE4EC9C.roa
File:                     EB23EB9E040111F1BE41F5B7DAE4EC9C.roa (raw, json)
Hash identifier:          lw8vrIzUv4wQbUAQiUzpX9lQ2ad3zVjGPdZSVMUVmCE=
Subject key identifier:   B4:66:FE:40:BA:D6:09:08:DB:2E:8D:95:BB:85:BD:97:E4:75:0E:56
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019C25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB23EB9E040111F1BE41F5B7DAE4EC9C.roa
Signing time:             Sat 07 Feb 2026 08:49:31 +0000
ROA not before:           Sat 07 Feb 2026 08:49:26 +0000
ROA not after:            Thu 12 Mar 2026 08:49:26 +0000
asID:                     395886
IP address blocks:        45.207.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Feb 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105509 (0x19c25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb  7 08:49:26 2026 GMT
            Not After : Mar 12 08:49:26 2026 GMT
        Subject: CN=6986fc9b-397c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:f1:de:6f:fe:cd:77:b6:9f:0f:36:c9:ae:
                    40:25:37:79:11:98:d9:74:c0:bc:d8:25:6a:a0:99:
                    3f:63:ff:3b:7c:2c:b8:2f:67:6e:1c:43:e2:a6:3a:
                    56:9b:d0:a2:70:57:d8:a5:f2:37:fc:14:1f:7b:f2:
                    26:40:21:e7:90:17:a3:b9:48:4f:f7:3c:2c:7a:c6:
                    b7:05:7c:36:6a:34:45:08:3c:f7:43:6d:f1:c9:ad:
                    91:28:20:76:4d:38:f2:21:61:fc:a2:ee:c4:e8:2e:
                    72:0e:81:60:f5:d3:53:9b:2a:70:01:77:6d:aa:f3:
                    bf:c2:f2:90:48:1a:a5:89:a4:46:94:6e:d5:05:12:
                    be:58:c4:09:1f:ce:ae:04:f1:68:29:04:86:de:18:
                    e5:35:1b:49:8b:b1:9f:e9:68:48:10:eb:a2:59:1a:
                    0d:dd:5e:7c:32:0d:49:15:5a:cb:bf:fd:f9:87:ba:
                    44:cc:c0:a2:24:40:ba:e3:be:62:e6:b7:ba:b8:8e:
                    d1:05:2a:86:4c:c9:44:0f:5f:aa:97:a0:ec:ec:54:
                    f5:61:5a:ca:41:4c:38:f9:31:5b:ab:3e:17:2d:ef:
                    1a:d8:33:7f:08:47:82:ad:2b:36:be:ec:3a:8b:42:
                    c4:9d:d4:40:ab:0f:75:6e:fc:11:0f:54:7b:4d:9e:
                    55:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:66:FE:40:BA:D6:09:08:DB:2E:8D:95:BB:85:BD:97:E4:75:0E:56
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB23EB9E040111F1BE41F5B7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7e:aa:a7:56:1e:fa:c6:2c:14:8b:eb:c9:c4:3f:c4:6c:bb:e4:
         00:1f:e9:f3:a5:38:ae:4b:99:2b:e6:fe:e9:ce:ca:2d:1b:ff:
         0d:6f:6f:60:7d:fa:01:99:40:df:d3:67:57:ae:1b:1c:65:f8:
         7a:38:fc:da:cb:7d:57:99:17:00:2f:ea:65:d4:66:c2:d4:77:
         8d:78:c7:7a:6e:18:72:65:20:f0:04:7e:b3:56:ae:13:2a:5a:
         11:ee:0c:3c:90:14:18:05:f0:74:aa:b9:27:03:2a:20:84:ed:
         36:18:4d:c0:9b:28:72:da:29:9e:5e:8c:d3:9b:39:f9:7a:d5:
         48:a6:bb:71:9a:45:b1:c5:73:ba:81:e7:de:a9:11:5c:c1:bf:
         9f:6f:a9:75:89:5d:e5:35:ce:6d:9e:2b:70:8e:5f:f0:99:f4:
         51:72:31:d6:8a:28:1e:b3:a3:17:1e:f3:1a:b6:64:e9:de:1b:
         52:11:09:67:3f:1b:80:79:87:f1:81:ac:3a:55:2d:01:9c:7c:
         3a:e0:79:cb:d6:60:91:5e:5e:4d:00:f7:06:18:a8:ba:2f:56:
         8e:70:eb:f5:68:33:24:f3:81:44:32:38:45:0c:b3:cc:e5:d6:
         df:41:06:ae:3e:bc:aa:9e:7c:af:81:97:81:9c:76:31:75:e1:
         ad:cf:a1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 04:51:15 2026 by rpki-client