This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F995402F95611F08EE62C95DAE4EC9C.roa
File:                     5F995402F95611F08EE62C95DAE4EC9C.roa (raw, json)
Hash identifier:          deyKUW5wikwr1utjGOh6xja30Zs6n9N0Jw5JkDLaUiQ=
Subject key identifier:   5E:F1:88:A2:B6:88:E1:87:BA:3F:FF:15:5D:1B:08:1A:5F:71:74:E5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01997C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F995402F95611F08EE62C95DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 18:56:22 +0000
ROA not before:           Sat 24 Jan 2026 18:56:17 +0000
ROA not after:            Thu 12 Mar 2026 18:56:17 +0000
asID:                     25160
IP address blocks:        45.201.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104828 (0x1997c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 18:56:17 2026 GMT
            Not After : Mar 12 18:56:17 2026 GMT
        Subject: CN=697515d6-f625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:98:e2:7e:cd:47:36:f8:ed:0a:c9:21:34:9b:
                    f5:31:33:47:c1:b2:b4:d1:a9:a0:92:bf:46:65:dd:
                    eb:82:4e:de:d3:2d:38:bb:34:6a:9c:27:18:03:2a:
                    1d:58:8c:02:66:e6:f8:c7:6d:d8:20:b8:0c:75:d7:
                    eb:03:f5:c3:86:be:38:7d:5b:2c:97:5e:ec:37:c8:
                    d6:ed:ab:87:15:01:a6:80:15:94:c4:1f:fc:1a:82:
                    43:23:b5:80:cf:5a:b2:52:19:12:06:ce:4e:c7:db:
                    12:59:fc:72:18:ae:98:91:6f:00:79:59:40:8f:b0:
                    f3:34:13:d2:b9:b3:20:04:a2:fd:da:77:1b:b8:be:
                    ee:f0:db:5b:12:f4:d5:d9:61:5b:c7:c1:8e:13:fa:
                    3c:c0:71:00:14:83:b3:5f:48:a9:2e:06:d4:cb:67:
                    09:1b:84:71:a6:5b:da:0d:76:9f:b3:aa:55:ad:d6:
                    13:ba:8e:2b:c6:32:35:aa:7b:cd:1b:76:93:e1:ff:
                    e7:67:63:28:dc:fd:2c:19:96:e7:8a:14:74:b5:21:
                    10:7d:e7:e5:9f:78:17:90:74:67:6d:dc:59:fd:b0:
                    58:12:75:48:35:67:bb:18:09:02:b2:35:e7:da:98:
                    e9:e9:99:48:4e:07:34:2e:cb:d1:e3:53:e5:3e:e7:
                    dd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F1:88:A2:B6:88:E1:87:BA:3F:FF:15:5D:1B:08:1A:5F:71:74:E5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F995402F95611F08EE62C95DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:a3:20:9b:7e:18:d3:f3:bc:f9:c4:f7:e5:1b:0a:18:84:ba:
         dd:44:17:54:85:fb:61:ed:a3:6a:ab:c6:0f:57:85:8b:0b:85:
         0d:c2:86:41:a3:94:06:d2:5c:bd:94:65:6d:04:70:04:3d:3c:
         4f:3d:7e:80:68:60:06:ba:50:7c:f7:48:df:a6:67:a9:d1:3b:
         3b:e4:e0:5e:6e:6e:48:1f:a2:38:63:e9:71:a1:ca:8e:38:2f:
         e2:0a:b6:7f:f8:cd:17:42:45:3e:9f:72:5f:f1:a2:28:bb:41:
         14:d0:3f:db:c7:74:19:b6:44:5c:eb:32:ef:6d:96:4f:ac:dd:
         2a:c7:2a:5c:6b:9b:d8:9c:75:54:80:43:bb:ec:92:73:bd:e1:
         18:7f:50:1a:e8:69:55:e2:78:db:cc:b5:e5:28:c9:22:4e:2d:
         9a:b5:8f:3a:a8:c1:39:7b:97:da:78:44:83:17:43:8c:6e:7b:
         80:e7:ea:23:02:48:39:8f:28:b0:8f:20:7e:91:4d:a9:0a:55:
         89:4b:0d:80:78:dc:6a:25:74:3d:3c:18:cd:06:ce:bb:62:6e:
         d1:46:3c:56:a6:69:86:a7:a3:55:7b:50:a0:e2:14:fc:3e:98:
         5f:6d:52:0f:eb:b6:ec:a0:78:b7:8e:c2:2b:1d:ed:3a:70:39:
         bc:11:7a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:52:04 2026 by rpki-client