This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F6E347AF5EC11F0A2CADA9BDAE4EC9C.roa
File:                     4F6E347AF5EC11F0A2CADA9BDAE4EC9C.roa (raw, json)
Hash identifier:          8kdXakT67QB/iDudqrgtVzc3iNcKpe/Jq0/kEQvJsJ0=
Subject key identifier:   13:52:81:CE:2C:97:A6:F2:9E:5F:6A:8F:2C:0E:C3:43:F1:8C:15:52
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0197E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F6E347AF5EC11F0A2CADA9BDAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 10:39:34 +0000
ROA not before:           Tue 20 Jan 2026 10:39:29 +0000
ROA not after:            Thu 26 Feb 2026 10:39:29 +0000
asID:                     48678
IP address blocks:        45.192.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104417 (0x197e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 20 10:39:29 2026 GMT
            Not After : Feb 26 10:39:29 2026 GMT
        Subject: CN=696f5b66-c3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:d4:ee:b1:68:88:b5:ad:2c:78:24:20:66:
                    46:2a:a5:06:df:96:59:03:e1:86:6e:ce:d3:8a:e0:
                    e5:ba:cd:1f:9b:f8:6d:3e:69:a1:f0:2c:61:9a:8a:
                    99:2b:91:46:bf:13:a6:71:6b:a3:85:33:ec:9c:c5:
                    80:72:0a:a9:9c:ba:bf:02:f6:aa:7b:7c:0a:1e:56:
                    12:95:f4:a3:fb:56:6f:3b:b3:e7:1e:3e:ab:f7:e0:
                    3a:ab:63:7f:1e:87:35:cd:f5:de:d5:8c:9a:94:6c:
                    73:bf:23:5e:01:9a:92:b1:c0:19:ec:88:53:02:ff:
                    7e:a8:59:86:38:bd:87:4c:23:d4:b2:2f:ce:9f:ce:
                    e9:ff:5a:16:77:65:52:a4:af:37:6b:8d:0c:7f:74:
                    62:ac:4a:0e:73:dc:f9:ed:3f:3e:88:74:d3:a6:00:
                    7a:f2:97:6f:34:b2:86:ec:62:b0:bd:83:8d:f6:ac:
                    58:fb:0d:13:e7:8a:47:5d:6a:ae:23:e7:8e:9b:5e:
                    37:af:1a:21:80:20:5d:e8:5f:5a:e1:ad:61:e7:78:
                    d9:98:f3:a4:9d:f6:f0:dc:7d:d4:36:1d:fa:9a:0d:
                    61:cc:c2:c6:34:87:9c:81:c0:fd:95:a0:04:eb:33:
                    ad:fd:02:08:48:db:6c:4b:55:44:5e:86:b5:03:c0:
                    15:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:52:81:CE:2C:97:A6:F2:9E:5F:6A:8F:2C:0E:C3:43:F1:8C:15:52
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F6E347AF5EC11F0A2CADA9BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:a5:d9:d7:9d:df:44:80:f2:56:c8:c1:97:e2:9a:85:5c:66:
         14:32:fb:2a:8b:0c:f6:f1:7c:0d:5b:fa:82:4f:2a:df:02:33:
         d9:e8:d0:b9:6c:06:78:3b:37:a2:a0:0e:60:ba:c2:42:37:b5:
         e0:72:31:4c:64:85:0d:b8:22:e9:fa:16:28:cd:96:b0:0a:77:
         d5:ec:61:37:a0:1f:82:59:38:a2:d5:73:78:7e:79:49:b0:4c:
         23:1e:9c:5f:86:62:ba:3c:d7:32:4a:fb:f7:1d:b9:90:99:15:
         95:e8:c8:4f:65:17:8b:e3:4d:ee:f1:73:39:8f:ce:86:3c:86:
         8d:76:25:99:50:9e:90:4e:27:ca:6c:92:c7:d4:9a:31:cd:f9:
         f8:b8:4a:5a:c1:a4:72:0e:10:5d:31:0a:eb:7e:d6:eb:d6:df:
         33:fe:04:91:a4:8b:c8:fd:1f:d0:9f:b2:db:19:5a:5d:b2:d0:
         77:2d:bc:5d:f4:c4:c0:0d:0e:80:3a:52:a9:71:dc:82:b8:91:
         10:67:c0:42:8b:dc:09:a4:b2:f4:3e:6f:50:78:8c:8d:ad:45:
         11:db:3b:81:9f:b7:72:60:94:78:0c:bb:d1:68:8a:11:dc:f6:
         1e:53:33:3f:b2:75:c6:21:33:2a:a4:14:a1:65:81:a7:81:f8:
         ea:d1:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:16:19 2026 by rpki-client