This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64C8A8BEF78B11F09AF6E395DAE4EC9C.roa
File:                     64C8A8BEF78B11F09AF6E395DAE4EC9C.roa (raw, json)
Hash identifier:          +I8ZUveQ1Vg5Nd/c+KSOPcJoY5U3QZkBGK955efqKTk=
Subject key identifier:   EA:3E:9B:86:F6:D1:9D:7D:84:75:6A:A1:5E:D6:EA:84:1E:A0:9F:67
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019851
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64C8A8BEF78B11F09AF6E395DAE4EC9C.roa
Signing time:             Thu 22 Jan 2026 12:10:53 +0000
ROA not before:           Thu 22 Jan 2026 12:10:46 +0000
ROA not after:            Thu 28 Jan 2027 12:10:46 +0000
asID:                     399945
IP address blocks:        45.196.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104529 (0x19851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 22 12:10:46 2026 GMT
            Not After : Jan 28 12:10:46 2027 GMT
        Subject: CN=697213cd-fa39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:46:06:9e:c7:bb:1c:64:a6:b1:d1:95:5c:c4:
                    3d:fc:07:81:3b:f2:8b:28:14:1a:42:bb:90:35:32:
                    cb:1c:50:25:31:f0:13:76:8a:8b:08:c5:19:53:11:
                    5b:c6:0e:19:bb:12:88:fd:9b:0e:c8:19:8d:6a:39:
                    1a:95:17:7f:28:45:cc:4e:c1:f4:e3:78:91:19:ca:
                    02:43:46:f3:57:76:b7:51:34:fd:4c:8c:3f:2e:b6:
                    f8:d9:76:ad:04:72:3c:43:8c:34:8a:10:48:26:53:
                    0c:f0:cd:9d:d0:18:d3:1a:88:e6:45:4b:04:d7:99:
                    c0:b9:a0:a1:2f:12:d8:e6:da:bb:16:03:b9:30:6a:
                    57:cc:72:b8:a6:b8:d2:5a:4e:54:c6:82:6a:8f:df:
                    41:29:ae:41:82:c3:ec:5a:dd:15:88:8d:79:1e:a1:
                    c7:54:4e:4b:f8:2f:2c:06:3a:6d:43:60:13:cf:72:
                    b8:f8:a6:c2:0c:d7:23:08:15:8a:ea:cc:a4:f9:b8:
                    01:ce:06:60:ff:b3:fc:31:f9:56:ee:9a:05:1c:d8:
                    33:27:09:c0:38:66:51:58:42:ba:f5:20:0b:88:13:
                    87:47:b1:1f:29:22:cc:bd:7d:87:e9:2f:55:f7:ee:
                    2c:a3:39:c8:a9:18:82:2a:16:11:95:44:60:e5:d6:
                    59:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3E:9B:86:F6:D1:9D:7D:84:75:6A:A1:5E:D6:EA:84:1E:A0:9F:67
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64C8A8BEF78B11F09AF6E395DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:49:2c:0d:2e:92:10:c1:eb:4e:e0:ac:90:90:76:7c:40:5b:
         8f:8a:1a:6a:49:49:91:ae:70:cc:d9:8b:b7:da:25:34:1f:ff:
         7e:fa:46:be:1f:23:af:25:39:e6:61:f4:aa:bb:d8:3c:c8:cc:
         90:37:f8:6a:23:b1:55:80:2d:3a:fb:d5:46:50:c8:2c:b8:07:
         9d:fd:e7:dc:0e:c8:85:18:b8:fb:f3:10:fd:2e:04:7c:25:23:
         73:c6:57:b8:00:bb:5d:ec:60:ea:5e:bf:de:81:32:38:b5:6a:
         cc:02:99:fd:53:e5:c1:2d:44:15:11:61:43:ab:b0:5b:a6:19:
         54:90:a4:41:e7:ee:7c:45:a6:81:85:f3:b9:6c:65:3d:31:7c:
         44:8d:fb:82:74:e4:b3:ba:df:20:67:be:ce:c1:ed:66:59:6a:
         6e:c9:54:67:4a:17:94:b4:43:08:92:42:fb:eb:2c:f6:e0:32:
         a4:97:de:ee:e5:29:b7:ac:20:c7:76:f7:59:b4:46:62:79:a4:
         48:ce:9b:8c:b8:a9:d1:a0:22:88:6c:a8:ad:62:e8:ed:ea:8d:
         86:c3:f7:a1:9e:a2:90:90:bf:a7:01:fa:e4:ce:f6:1d:36:ff:
         07:06:9e:d3:59:fa:6a:37:4b:f7:86:7f:19:59:95:30:f6:2a:
         76:59:29:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:11:00 2026 by rpki-client