This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEF5E7EEE97711F0BA1A28A2DAE4EC9C.roa
File:                     EEF5E7EEE97711F0BA1A28A2DAE4EC9C.roa (raw, json)
Hash identifier:          QXZoWHmtZysF2PAWdg2GtoHPO78b9GoIF4y2Wu19OXs=
Subject key identifier:   DA:72:AA:48:D6:E4:06:A2:B5:00:72:DE:5B:8A:CE:CD:A9:F6:D1:2E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01944B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEF5E7EEE97711F0BA1A28A2DAE4EC9C.roa
Signing time:             Sun 04 Jan 2026 14:16:17 +0000
ROA not before:           Sun 04 Jan 2026 14:16:12 +0000
ROA not after:            Mon 16 Feb 2026 14:16:12 +0000
asID:                     43260
IP address blocks:        45.195.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103499 (0x1944b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  4 14:16:12 2026 GMT
            Not After : Feb 16 14:16:12 2026 GMT
        Subject: CN=695a7631-d64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:88:12:40:dd:c7:a2:e1:a3:7a:03:b8:4b:b9:
                    74:38:2a:8c:14:4e:05:57:70:a4:00:11:16:a8:15:
                    19:cc:42:03:7e:e0:20:ec:9a:1b:14:d8:2e:d0:03:
                    69:06:29:85:b5:9c:1c:51:5b:d7:17:47:0c:c8:75:
                    e9:46:ee:d4:7e:c0:e4:91:39:bf:d5:6c:ed:36:a6:
                    d7:fc:27:c9:9f:4f:a2:fc:65:0b:e0:a3:4f:3d:5e:
                    63:8f:3e:8d:47:90:ec:30:b5:2e:2f:80:11:28:36:
                    9f:e9:1b:27:57:a2:c1:ba:0f:d6:e4:bd:15:5c:a6:
                    d9:56:4c:f8:49:78:68:92:a1:54:b3:c5:ac:6a:04:
                    04:b7:61:ab:46:60:16:e8:ac:51:e7:f1:55:fe:8e:
                    cb:d9:bd:e2:68:d5:ab:b1:f3:37:31:46:f6:6c:8e:
                    6b:eb:0f:12:7f:76:ab:de:af:c6:b1:cb:9b:e4:c9:
                    c4:4e:eb:5f:03:26:45:6f:3b:b6:74:ec:aa:35:45:
                    45:67:04:1b:0b:3c:5d:66:cc:72:d5:be:e0:fc:e8:
                    91:6f:e3:d3:3c:bf:a0:9e:82:54:15:2b:bf:4f:10:
                    79:3e:72:ef:28:f4:21:30:cb:3c:46:a9:e5:ec:5c:
                    95:d5:f6:99:5e:3d:ce:f1:a5:f0:a3:37:d8:33:66:
                    5b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:72:AA:48:D6:E4:06:A2:B5:00:72:DE:5B:8A:CE:CD:A9:F6:D1:2E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEF5E7EEE97711F0BA1A28A2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:0f:3d:84:78:f2:67:5d:e5:ac:20:0e:a7:4e:5d:ac:f8:7f:
         28:73:c7:dc:34:cb:68:b9:d0:bf:47:55:65:03:d2:73:77:67:
         88:db:08:9a:c2:44:fa:93:11:1a:f3:c7:28:46:bc:83:4c:3f:
         97:54:5d:f1:f0:ce:68:cf:0e:3d:8b:cd:00:ab:ea:8c:64:2d:
         7b:c9:a3:37:f3:85:4b:8d:08:3f:43:4d:51:5c:28:93:e0:3c:
         43:e2:1b:7b:df:b7:3b:c9:02:ee:9e:9b:49:c3:da:5f:fe:ef:
         8e:1b:53:2a:a4:eb:50:7f:cd:e7:4b:df:0f:3a:ad:7a:d1:38:
         ef:56:79:7a:04:89:bd:34:cd:ee:2a:80:96:83:57:ed:51:2f:
         47:49:7b:b4:6d:84:e1:6d:c5:e9:0e:5a:9d:6d:39:83:66:50:
         92:59:7a:9f:da:77:ab:f0:db:67:f8:ac:c4:62:23:7e:cc:17:
         6b:48:90:9e:8d:e5:9f:45:f8:33:a9:5a:87:08:6d:a9:d0:ab:
         66:01:38:26:d4:d1:1c:1b:84:2d:90:2b:a9:49:db:15:1a:93:
         f0:d6:95:4b:b9:be:94:5e:ba:d6:05:77:75:de:fa:25:11:c1:
         0c:09:ad:44:bf:61:ab:6a:d5:3b:af:36:79:83:d5:97:c4:e2:
         23:55:12:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:09 2026 by rpki-client