This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F7693EF83411F0BF1C51AADAE4EC9C.roa
File:                     82F7693EF83411F0BF1C51AADAE4EC9C.roa (raw, json)
Hash identifier:          XCLo2+Zf+oc7tIWbPeN9TLdnND8XcvZMm95w5KoTyoU=
Subject key identifier:   8E:19:D6:BA:22:01:6F:0B:17:AD:D3:B2:5D:88:D3:9D:37:20:58:4B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0198C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F7693EF83411F0BF1C51AADAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 08:21:27 +0000
ROA not before:           Fri 23 Jan 2026 08:21:22 +0000
ROA not after:            Sun 01 Mar 2026 08:21:22 +0000
asID:                     48678
IP address blocks:        45.195.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104645 (0x198c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 23 08:21:22 2026 GMT
            Not After : Mar  1 08:21:22 2026 GMT
        Subject: CN=69732f87-2037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ff:c8:f9:80:64:17:f0:ec:10:19:de:f8:9a:
                    d7:9f:70:bf:6a:26:ac:0c:e9:de:69:83:29:e3:88:
                    3c:dc:c3:be:c4:98:f3:b9:2b:c7:08:1a:de:7c:ad:
                    03:48:c9:56:aa:04:ee:fb:97:78:22:ad:1c:60:20:
                    a1:1c:ac:48:65:73:5f:dc:95:39:0f:46:4a:be:44:
                    cb:4a:8b:b5:df:db:83:2c:2b:61:14:14:48:53:4e:
                    22:7c:ee:fe:01:a1:f5:b3:86:2a:7d:d1:c1:61:39:
                    d9:fe:ab:fc:c1:82:77:99:4b:3d:b5:02:8d:32:cf:
                    a5:8f:0c:49:7c:88:3a:6d:be:65:a8:b3:47:31:1e:
                    93:12:54:58:63:b0:63:a8:c7:30:a3:5a:fb:b4:73:
                    75:80:cd:8f:87:75:17:43:16:ff:84:9d:9c:77:29:
                    c9:59:fa:2b:7b:f6:08:ec:f5:c0:f3:fd:96:5b:cd:
                    27:8c:87:a7:d1:bd:98:7e:f6:8c:e6:43:79:b4:a3:
                    37:79:63:c8:c5:a8:ac:6b:a4:05:c7:4e:25:97:ae:
                    79:83:9f:26:28:a9:7d:d2:d8:62:ac:c6:e2:38:55:
                    a5:99:43:1b:4f:ef:ba:46:df:bc:ef:15:ab:68:b1:
                    4f:23:54:5c:86:b0:4c:9c:2b:4c:48:a8:c2:18:1e:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:19:D6:BA:22:01:6F:0B:17:AD:D3:B2:5D:88:D3:9D:37:20:58:4B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F7693EF83411F0BF1C51AADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:bd:dd:15:09:97:aa:01:4b:d6:64:21:72:4d:44:20:55:bb:
         84:e1:fa:b8:ff:da:a3:65:ca:b2:57:0e:88:7a:b5:39:e9:31:
         ee:e4:70:7a:bc:8d:0d:2d:f2:0b:fb:77:33:94:fd:eb:0a:b3:
         57:d2:b7:7b:37:16:84:d1:5e:bf:04:ba:68:c0:01:27:8b:5e:
         21:d3:65:a4:77:02:1f:15:85:b1:0e:65:8a:2e:6b:97:af:4e:
         17:25:15:4c:79:72:20:6e:00:92:88:d7:c8:53:fe:02:eb:02:
         84:ed:20:ef:b5:33:3c:4c:5d:cb:6b:d8:45:b5:24:f7:c4:27:
         0f:c3:f8:14:86:06:64:ba:08:68:79:32:89:02:92:16:15:16:
         66:96:78:95:e2:3b:24:d0:53:38:13:48:21:18:0b:52:e9:4d:
         6f:8c:c9:c3:97:6b:fc:3c:21:20:fa:0f:02:40:ef:41:c6:8e:
         27:f2:fa:3a:b6:0f:8c:12:bf:17:54:ea:f8:d6:c1:58:49:8f:
         5f:6b:58:a4:39:ed:e6:1a:bd:09:5b:d8:a5:fb:16:6f:7d:22:
         6f:03:b5:c2:52:44:a6:61:07:28:52:fc:ae:74:b5:cf:5c:a0:
         f0:e5:a8:e3:42:66:da:e8:00:c3:67:b2:a9:00:c1:6e:d4:1a:
         2e:e5:bc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:06:08 2026 by rpki-client