This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A3ABDA2F94C11F08DFC76D4DAE4EC9C.roa
File:                     0A3ABDA2F94C11F08DFC76D4DAE4EC9C.roa (raw, json)
Hash identifier:          b/Ff8VqikmdRB2SFrLnfUdCkkqQbfEn/HXpJ9sZHzBw=
Subject key identifier:   74:74:05:51:67:4E:64:83:F0:24:07:F9:67:07:52:45:9F:87:52:92
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01996C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A3ABDA2F94C11F08DFC76D4DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 17:42:24 +0000
ROA not before:           Sat 24 Jan 2026 17:42:19 +0000
ROA not after:            Sat 07 Mar 2026 17:42:19 +0000
asID:                     204741
IP address blocks:        45.194.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104812 (0x1996c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 17:42:19 2026 GMT
            Not After : Mar  7 17:42:19 2026 GMT
        Subject: CN=6975047f-81b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:50:0c:99:4a:0b:bb:36:f7:0d:8e:31:4d:
                    da:19:c0:1c:d9:e4:fe:56:7a:70:e6:7c:87:0b:1d:
                    3f:10:5e:21:de:53:6b:d5:e4:23:17:73:ed:05:1d:
                    2b:86:a2:22:5e:40:b6:b2:9f:60:d4:47:06:1e:27:
                    7e:64:38:b2:fd:36:b6:66:e8:7a:97:21:54:36:bc:
                    f6:96:b4:4e:bd:a8:66:f6:b3:79:47:26:a2:de:72:
                    81:82:92:e8:b3:9a:02:19:db:12:11:95:3b:f8:ea:
                    93:5b:01:43:cf:7d:fd:ef:9a:6c:1a:e8:34:e9:18:
                    b8:6e:26:85:9e:74:a2:d6:22:28:b9:4a:85:01:52:
                    5d:5f:18:ab:39:df:c1:fa:55:28:13:11:4f:e9:21:
                    4f:5a:b3:2a:45:ad:dd:ab:c4:08:b5:3c:bf:1a:3b:
                    08:23:1d:ab:0a:8b:ff:c5:ea:30:c3:7e:b2:ca:21:
                    d2:14:2a:68:54:40:18:fe:11:a3:d7:98:d1:01:a1:
                    c6:89:b2:9e:b0:7f:80:60:84:1d:b4:9a:39:1b:d7:
                    e8:09:72:09:05:e9:87:a4:39:f8:69:6a:8f:58:2a:
                    15:86:73:3b:85:25:be:89:b0:eb:d3:a7:0b:4c:0a:
                    ad:78:d3:66:3c:e0:72:fe:d1:e4:4c:6a:1b:92:ad:
                    3d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:74:05:51:67:4E:64:83:F0:24:07:F9:67:07:52:45:9F:87:52:92
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A3ABDA2F94C11F08DFC76D4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:c8:b1:98:e2:7b:b1:95:95:34:c5:e2:a4:0e:34:6b:e8:e3:
         bd:e0:1b:82:1e:c3:5b:9b:06:1a:f4:86:54:c3:1e:c5:e6:7a:
         8d:76:7c:94:40:fc:3e:3a:ad:fd:00:b2:d3:58:a5:d4:13:67:
         8e:64:78:0c:36:99:82:da:dc:7d:b4:4a:ec:95:69:76:4a:85:
         94:d8:0f:98:25:b1:99:21:2f:28:de:60:e8:9f:87:d1:73:8e:
         be:09:c3:58:5c:00:0a:a4:9a:80:cf:09:ad:2d:e0:dd:7e:76:
         99:2b:77:51:6c:67:d1:d6:e6:5a:26:16:20:ea:bb:2b:40:20:
         5a:0b:9f:f6:4d:be:f0:08:37:b7:6c:77:09:c7:95:f5:00:04:
         bf:87:41:b3:80:43:e7:04:79:a3:ae:19:26:1c:5b:01:ad:f0:
         5d:cb:28:b2:de:2d:a9:18:6e:d2:43:7c:71:04:1c:7e:69:a1:
         67:58:25:a6:41:93:c7:e2:ab:16:5d:09:8f:b5:d1:60:2c:20:
         91:ca:44:7a:10:58:8a:c2:c5:79:fa:f8:2b:60:36:aa:7b:df:
         18:af:82:0f:9c:c0:24:8d:b6:56:35:91:82:53:2d:81:09:3c:
         98:50:a5:7b:99:83:8e:7e:cf:82:42:b3:a0:31:ab:09:08:2d:
         e0:e6:84:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:16:08 2026 by rpki-client