This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96F932EAF78111F0BE9741D9DAE4EC9C.roa
File:                     96F932EAF78111F0BE9741D9DAE4EC9C.roa (raw, json)
Hash identifier:          FtrPMXPk8a2ESHTN8x3/Y5HM7griL8w4GEf1eGcNO2I=
Subject key identifier:   23:BD:B1:40:7B:F5:08:B8:5F:2D:07:0E:D3:DB:D6:C5:26:2A:1E:B9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019843
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96F932EAF78111F0BE9741D9DAE4EC9C.roa
Signing time:             Thu 22 Jan 2026 11:00:41 +0000
ROA not before:           Thu 22 Jan 2026 11:00:35 +0000
ROA not after:            Sat 28 Feb 2026 11:00:35 +0000
asID:                     44559
IP address blocks:        45.192.52.0/24 maxlen: 24
                          45.192.53.0/24 maxlen: 24
                          45.195.162.0/24 maxlen: 24
                          45.195.163.0/24 maxlen: 24
                          45.195.164.0/24 maxlen: 24
                          45.195.165.0/24 maxlen: 24
                          45.195.167.0/24 maxlen: 24
                          45.195.168.0/24 maxlen: 24
                          45.195.189.0/24 maxlen: 24
                          45.195.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104515 (0x19843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 22 11:00:35 2026 GMT
            Not After : Feb 28 11:00:35 2026 GMT
        Subject: CN=69720359-849f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2e:1f:9d:60:aa:a0:c7:e5:5c:b7:11:bc:61:
                    b2:45:68:3b:c6:9b:cf:47:ab:e4:f2:20:e3:d0:e8:
                    a0:7c:62:9f:31:bd:9a:6a:2c:08:db:c8:61:16:71:
                    46:38:84:db:db:4f:78:fe:9c:26:c1:15:1e:d2:58:
                    1f:f9:2a:4c:1d:88:85:9e:fe:89:0c:cd:3a:c3:94:
                    68:49:c0:29:e4:33:24:a8:4f:88:e9:e4:8e:6e:44:
                    45:28:89:8a:51:ea:73:a0:f7:64:e2:6a:2e:a3:a3:
                    c5:11:bf:ad:8b:04:75:f8:b3:94:53:07:fa:dd:38:
                    61:75:c4:6f:9f:ef:7b:05:10:5e:38:43:6a:3f:e2:
                    01:25:99:51:22:02:27:40:1e:c9:1e:df:65:97:c9:
                    de:85:d3:59:03:55:01:57:44:70:85:a3:c3:33:e4:
                    38:e5:7b:92:d0:b0:90:67:9b:dd:9f:e0:bd:56:44:
                    99:67:f8:e5:cc:63:ba:df:b4:8d:a3:8c:af:b9:20:
                    b2:f1:f8:05:6e:6a:70:88:fe:66:0f:4c:a8:90:2d:
                    e5:06:4b:21:e8:e9:89:48:fc:d4:fd:a9:ab:9a:04:
                    1e:97:58:61:3d:9a:83:4b:13:cb:e7:44:eb:11:ce:
                    82:26:ca:c6:5e:6c:94:a2:92:37:a3:65:d1:39:78:
                    ce:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BD:B1:40:7B:F5:08:B8:5F:2D:07:0E:D3:DB:D6:C5:26:2A:1E:B9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96F932EAF78111F0BE9741D9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.52.0/23
                  45.195.162.0-45.195.165.255
                  45.195.167.0-45.195.168.255
                  45.195.189.0-45.195.190.255

    Signature Algorithm: sha256WithRSAEncryption
         27:05:9c:27:ab:57:b8:b2:9b:be:c6:d2:8d:d2:a9:e4:8f:90:
         1e:45:34:2c:21:df:34:92:9c:cc:ff:a2:4d:5a:3b:93:cf:1d:
         28:de:65:80:8c:2b:9c:86:23:25:0a:62:6e:b0:ee:4e:b7:48:
         67:62:03:e8:23:0d:a7:46:a0:4d:aa:50:2e:b0:85:00:59:81:
         d0:63:f0:0a:2a:fe:67:e5:a9:d0:96:6d:d8:36:47:88:15:f0:
         2d:a7:1a:a8:48:35:3d:e1:1c:b4:a0:e7:68:06:4a:a8:e5:2c:
         3e:f1:06:9e:46:74:66:22:b4:55:a8:f3:d6:69:dc:3c:ff:c8:
         8d:13:af:9d:81:cf:d3:50:4e:3f:a2:14:cd:8c:a0:17:c4:5b:
         55:81:ff:e6:cb:8c:2a:03:02:97:a6:b2:c6:84:b6:9a:66:4e:
         f8:2d:a2:00:02:54:6d:a2:22:cf:1c:56:1e:17:74:2e:87:bc:
         e7:a3:82:de:ef:11:55:33:02:76:8c:9f:e7:43:fe:69:d4:9c:
         d5:83:c4:e0:6b:58:69:7d:ce:0d:73:92:5d:29:c6:02:82:e0:
         70:8c:1b:17:52:5e:2e:60:fc:f5:1c:9e:8d:93:4d:a9:c5:38:
         b8:2a:a1:f9:3d:65:60:09:68:4b:1a:7c:e7:12:df:29:88:89:
         ca:a2:96:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:15:40 2026 by rpki-client