This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E7E0EC2F97411F0976C92C6DAE4EC9C.roa
File:                     1E7E0EC2F97411F0976C92C6DAE4EC9C.roa (raw, json)
Hash identifier:          b0v/flD2LKaj8ktxJbKQ3bDsHG5/cTx3YhFxTA7HoFA=
Subject key identifier:   14:B2:C9:FD:09:B3:2B:E0:10:C1:58:89:BF:60:7B:80:F1:AF:85:C7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0199AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E7E0EC2F97411F0976C92C6DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 22:29:20 +0000
ROA not before:           Sat 24 Jan 2026 22:29:12 +0000
ROA not after:            Tue 03 Mar 2026 22:29:12 +0000
asID:                     44559
IP address blocks:        45.192.253.0/24 maxlen: 24
                          45.192.254.0/24 maxlen: 24
                          45.192.255.0/24 maxlen: 24
                          45.195.96.0/24 maxlen: 24
                          45.195.97.0/24 maxlen: 24
                          45.195.98.0/24 maxlen: 24
                          45.195.99.0/24 maxlen: 24
                          45.195.100.0/24 maxlen: 24
                          45.195.101.0/24 maxlen: 24
                          45.195.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104878 (0x199ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 22:29:12 2026 GMT
            Not After : Mar  3 22:29:12 2026 GMT
        Subject: CN=697547c0-3c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:8c:e7:77:2a:3c:ac:f1:64:72:a5:71:56:
                    1b:aa:df:dd:06:d2:f9:9c:57:b8:70:ce:31:ef:88:
                    db:63:fb:71:e5:a2:ac:9e:07:fb:16:f3:a8:60:36:
                    c2:4e:1b:96:87:11:66:8d:ca:37:94:b6:35:56:72:
                    b6:f1:b2:74:e9:27:d2:19:19:47:f6:1a:85:e4:67:
                    94:fe:9d:84:b0:95:5c:d7:bc:0a:6f:c8:11:f4:ed:
                    d0:a4:08:43:e1:ae:f2:b7:0a:20:5a:76:88:da:1e:
                    81:2a:2e:b5:8b:c4:ea:d7:76:64:53:2f:31:dd:58:
                    fd:2b:c3:97:1f:5f:2d:f7:b0:2a:48:1a:5a:d3:b1:
                    9c:25:9d:78:1a:0a:2e:d3:8c:a5:d7:a3:d6:f6:36:
                    7e:c8:0f:66:0a:81:06:84:71:dc:ec:39:91:d6:b8:
                    33:ed:05:80:2e:6e:f1:8d:15:38:f2:53:a7:89:55:
                    e0:0e:c5:75:40:12:68:49:59:aa:ff:dd:bc:db:68:
                    bd:7b:72:f6:95:e0:b9:f0:89:b0:f6:8e:7b:12:4a:
                    4d:98:89:ae:f3:d4:cf:45:42:61:aa:b1:ef:17:6e:
                    0b:c3:d2:38:15:bd:cf:04:21:0e:84:4b:1a:29:4b:
                    cf:23:59:f6:a7:f2:ec:66:65:d4:dc:3e:f6:c5:d5:
                    bf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B2:C9:FD:09:B3:2B:E0:10:C1:58:89:BF:60:7B:80:F1:AF:85:C7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E7E0EC2F97411F0976C92C6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.253.0-45.192.255.255
                  45.195.96.0-45.195.102.255

    Signature Algorithm: sha256WithRSAEncryption
         4a:f9:8b:26:d3:19:74:72:3c:d6:6b:f1:44:e9:d7:67:a7:a7:
         c5:4d:88:b1:24:bd:52:ec:84:52:3c:70:e1:4c:95:40:90:fd:
         c8:05:53:f8:32:75:ad:a2:56:49:cc:80:a1:c2:1b:66:b2:a8:
         d3:a8:dc:cb:ac:b3:01:08:35:ce:dd:a4:48:7b:72:8c:5a:8f:
         46:d3:be:56:a2:55:1c:7d:99:ab:70:1a:74:22:19:30:18:96:
         d6:1b:3d:d0:be:0e:c1:4c:69:35:1b:6e:2b:24:62:01:7f:7d:
         8d:84:a1:4e:2b:e7:d6:a9:c2:ca:ba:16:fe:2d:a1:1f:2c:73:
         7f:5c:d8:31:8a:26:e5:fb:5e:f6:77:0e:5b:7b:88:d4:90:9c:
         44:8c:9e:1e:c2:25:fa:36:77:68:9b:0d:31:66:3a:97:b1:4a:
         d3:a6:d1:43:97:7a:dc:00:4c:14:33:99:39:f5:f3:37:0b:d3:
         f7:0a:2a:1c:96:ad:3c:b4:6b:73:22:f5:cb:75:c3:47:a7:9b:
         53:c1:5c:9d:ee:c4:42:ec:c8:f0:f1:d3:ca:49:ed:b7:74:1f:
         25:a9:94:74:ae:68:19:75:7a:01:b9:08:be:7a:09:95:60:3b:
         d6:e3:3c:c8:63:29:df:4b:7c:2b:79:1c:7a:6f:65:e3:c2:80:
         4c:e2:71:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:46:39 2026 by rpki-client