This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D2E7D7CF93E11F08775C280DAE4EC9C.roa
File:                     0D2E7D7CF93E11F08775C280DAE4EC9C.roa (raw, json)
Hash identifier:          1LiCLlgCjB2uA5aKYSj4Gt/lv8nIIJttzkivZdhyfeM=
Subject key identifier:   73:7C:BA:3C:2F:7C:D1:2A:AA:4B:B5:14:B4:62:41:BB:C5:9A:11:1F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019941
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D2E7D7CF93E11F08775C280DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 16:02:16 +0000
ROA not before:           Sat 24 Jan 2026 16:02:11 +0000
ROA not after:            Sun 01 Mar 2026 16:02:11 +0000
asID:                     214143
IP address blocks:        45.195.3.0/24 maxlen: 24
                          45.198.97.0/24 maxlen: 24
                          45.198.109.0/24 maxlen: 24
                          45.198.112.0/24 maxlen: 24
                          45.198.138.0/24 maxlen: 24
                          45.198.163.0/24 maxlen: 24
                          45.198.168.0/24 maxlen: 24
                          45.198.176.0/24 maxlen: 24
                          45.198.181.0/24 maxlen: 24
                          45.206.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104769 (0x19941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 16:02:11 2026 GMT
            Not After : Mar  1 16:02:11 2026 GMT
        Subject: CN=6974ed07-0c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:32:d6:71:ce:a8:3f:69:d7:cb:15:9d:6c:
                    47:48:6e:9e:60:09:f5:c1:84:cb:86:39:1a:3e:e6:
                    ce:51:d2:38:cd:3e:08:f6:a0:c0:f4:94:be:76:a8:
                    28:2f:8d:f6:bc:38:94:60:ff:5c:71:a8:5f:06:eb:
                    dd:1b:9b:8d:fa:01:9c:fa:e1:c9:b7:67:52:87:95:
                    b7:15:66:04:8a:ae:dd:82:db:d9:22:fa:05:08:f2:
                    b8:03:53:cd:ab:3e:6f:0b:48:89:e0:c5:d1:f9:43:
                    28:d9:26:4b:3d:a6:76:55:f2:81:7c:36:64:c1:d0:
                    12:89:21:74:85:bb:3d:48:c2:ea:6c:ab:5c:3d:9c:
                    a3:87:d1:58:ab:9e:39:ec:3e:d7:4a:2f:ba:61:13:
                    95:8d:c1:90:43:3c:10:39:51:b6:90:b5:ef:61:7d:
                    7c:9f:54:66:18:e1:c3:00:a1:c7:97:b5:4b:c0:19:
                    5d:61:19:9a:1a:d0:83:8a:c4:64:d9:60:13:25:e6:
                    e4:71:32:d7:d2:74:03:ed:25:f3:54:d0:e1:85:82:
                    60:1c:a3:93:c9:fc:01:d4:b4:fc:6c:64:9f:e8:52:
                    78:69:b0:bc:c5:16:d9:3a:5d:04:fa:98:d4:c3:cc:
                    61:5e:62:2d:c0:d0:2e:33:44:f9:1f:32:6f:77:cd:
                    e5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7C:BA:3C:2F:7C:D1:2A:AA:4B:B5:14:B4:62:41:BB:C5:9A:11:1F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D2E7D7CF93E11F08775C280DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.3.0/24
                  45.198.97.0/24
                  45.198.109.0/24
                  45.198.112.0/24
                  45.198.138.0/24
                  45.198.163.0/24
                  45.198.168.0/24
                  45.198.176.0/24
                  45.198.181.0/24
                  45.206.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:4c:0d:9d:4e:77:d9:a0:cd:ef:ea:7b:fc:d6:f8:35:7b:c2:
         64:e7:9d:47:9a:42:b3:e5:f1:76:cd:bb:1c:c6:f8:39:0d:1f:
         aa:1a:8b:58:00:3a:96:c4:6d:db:4b:d4:18:0b:40:15:71:24:
         82:e0:93:0d:46:00:48:4c:06:1e:f5:e2:57:2a:d9:a0:7e:c8:
         b6:e8:cf:8f:52:c6:bf:c3:0e:ad:1e:70:d4:26:c2:79:b1:41:
         55:27:0d:21:84:f1:9f:74:c2:12:e0:d0:83:28:29:f2:6d:95:
         de:89:e4:59:be:cd:d2:9f:f5:fd:8a:3f:1d:f9:59:db:e8:56:
         b2:ed:34:44:b8:da:95:4c:93:fd:20:60:d0:7f:6b:8c:d2:e0:
         ba:69:61:aa:33:e9:c8:d5:fe:d0:b9:d6:93:54:cc:72:2f:20:
         1a:cb:5b:d6:ee:47:87:0f:3f:1f:66:cf:4c:c3:06:10:04:d5:
         ed:a5:e6:da:23:e7:b0:78:8e:35:cd:7c:60:37:a5:48:28:8b:
         0f:9c:2f:69:d2:17:86:89:42:47:d2:b7:7d:16:48:a1:3a:e0:
         05:fb:ea:dd:64:dc:09:23:83:65:a1:13:6f:b7:cf:be:74:83:
         b3:9b:73:90:bc:27:3b:9e:7f:65:57:2e:36:07:60:70:c1:25:
         51:80:bc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:47:23 2026 by rpki-client