This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17A35D76F60611F0909183B5DAE4EC9C.roa
File:                     17A35D76F60611F0909183B5DAE4EC9C.roa (raw, json)
Hash identifier:          NYsFgI+9LDN4RG96V8mQhEqfl+eSHWNuJv4lOHboT/8=
Subject key identifier:   00:74:2F:31:04:08:45:0F:F3:7C:8A:4A:61:B6:21:B2:06:F5:59:E6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0197EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17A35D76F60611F0909183B5DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 13:44:08 +0000
ROA not before:           Tue 20 Jan 2026 13:44:03 +0000
ROA not after:            Fri 20 Feb 2026 13:44:03 +0000
asID:                     401783
IP address blocks:        45.198.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104427 (0x197eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 20 13:44:03 2026 GMT
            Not After : Feb 20 13:44:03 2026 GMT
        Subject: CN=696f86a8-a31b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:75:af:c8:23:1e:81:6c:bd:37:29:a4:f1:d6:
                    be:c6:41:e7:28:51:4c:01:58:29:48:5c:75:a9:3a:
                    7d:95:af:23:dd:6e:23:38:7b:c0:cb:91:d2:8e:5a:
                    86:83:4f:6a:b1:1a:4f:26:e3:2c:e6:0b:b5:7e:4f:
                    54:ce:3c:4d:8a:46:87:7d:28:a1:32:0d:cf:96:3c:
                    38:fd:5c:08:e7:44:72:90:06:8d:51:30:f8:de:36:
                    d9:fb:75:dc:74:4b:90:3d:b4:02:ae:ef:5e:c3:99:
                    b2:bd:3b:84:ad:99:89:db:77:29:d5:ac:13:b7:f8:
                    64:32:02:62:97:ba:15:5a:06:f4:14:07:1c:a3:83:
                    3c:70:93:1c:ef:40:fc:1b:57:ab:6b:c2:35:2a:9d:
                    ea:1c:89:70:71:24:ec:fd:a4:c7:92:78:7a:bc:25:
                    87:6a:cb:35:23:0a:82:81:de:18:40:34:1d:30:80:
                    4b:be:05:f0:6e:d5:ac:0b:1c:76:c9:de:32:e8:dd:
                    08:61:7c:95:2a:04:c2:31:d3:5b:33:e0:d1:3c:22:
                    52:82:46:a0:98:be:a2:80:df:f8:88:b1:b3:73:1e:
                    13:91:2d:a8:61:e2:69:aa:a1:91:cb:b2:ee:95:96:
                    04:29:f4:b2:07:c4:73:34:bf:49:03:97:b3:3d:30:
                    c0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:74:2F:31:04:08:45:0F:F3:7C:8A:4A:61:B6:21:B2:06:F5:59:E6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17A35D76F60611F0909183B5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:06:66:9f:f2:d8:ce:fa:dd:f6:b6:8c:f6:bf:c6:62:8e:22:
         51:da:03:35:e1:52:1b:44:fc:f1:6a:c4:07:15:2e:21:e2:da:
         8b:39:e6:dd:79:da:e0:af:db:ca:80:6e:f7:da:eb:16:ec:47:
         79:26:3f:31:0a:81:8d:c8:49:fc:77:b9:b5:5c:59:ec:dc:57:
         7b:93:c7:06:39:1b:a2:0c:8f:ac:88:b1:62:86:f0:50:c5:a7:
         db:8f:7b:ef:e0:43:2a:7d:aa:d8:e2:11:a7:fa:44:e3:55:14:
         2d:aa:cf:0c:bd:ad:a3:47:a3:42:2d:cf:af:85:20:b0:7d:63:
         2f:70:61:72:dd:ea:fe:d5:91:5f:12:7d:1e:01:45:9b:1b:d7:
         cb:ca:83:99:2c:5c:c0:90:cc:4b:64:f2:59:56:bb:0f:ee:5d:
         64:c1:c2:5e:39:46:26:3e:41:e8:2e:a1:be:39:ac:b6:6f:47:
         b3:63:c2:ba:03:73:1d:3d:bc:f4:03:9b:8a:56:69:6a:81:ab:
         13:c6:04:9c:c8:59:b3:61:ea:41:0c:77:bf:47:3f:68:fb:5b:
         d6:9f:b4:1c:d5:26:8f:bb:27:b7:e0:25:f9:0a:85:df:16:51:
         27:3e:2d:d4:c1:62:6f:e2:61:25:24:21:e9:48:de:0e:1c:50:
         79:35:21:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:52:01 2026 by rpki-client