This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B755210F50911F08EDA82AEDAE4EC9C.roa
File:                     9B755210F50911F08EDA82AEDAE4EC9C.roa (raw, json)
Hash identifier:          +OVBscmNWzubzwcV+wG6swoF1zElMNMm1x7MU1U5nRk=
Subject key identifier:   6B:4D:A6:25:B1:E3:C0:11:9C:46:F2:48:75:31:9E:C2:EC:39:D0:DF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01979D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B755210F50911F08EDA82AEDAE4EC9C.roa
Signing time:             Mon 19 Jan 2026 07:36:46 +0000
ROA not before:           Mon 19 Jan 2026 07:36:40 +0000
ROA not after:            Thu 26 Feb 2026 07:36:40 +0000
asID:                     7029
IP address blocks:        45.194.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104349 (0x1979d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 19 07:36:40 2026 GMT
            Not After : Feb 26 07:36:40 2026 GMT
        Subject: CN=696ddf0e-d9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d9:d7:2f:24:12:ae:51:21:c4:20:09:5d:b6:
                    d7:56:8d:49:c7:d1:06:2a:7c:11:2b:13:07:67:95:
                    f6:b3:7a:1e:60:04:c6:03:4a:3c:19:62:f8:2f:76:
                    fc:e6:0d:1c:24:c3:7d:40:76:31:b1:d2:58:63:39:
                    4c:bb:77:f0:89:e9:8b:8c:b7:63:b1:53:3b:1f:8e:
                    f7:6b:26:14:0c:27:7b:1a:79:21:c7:56:80:b8:f6:
                    68:01:b6:74:98:dd:d3:ce:69:65:29:8f:e4:44:17:
                    08:81:88:86:b7:37:dd:fb:b2:79:39:e2:be:99:85:
                    81:c5:62:79:12:2c:c5:bb:2d:4f:89:9b:0c:1e:95:
                    4c:89:c5:5d:b6:0a:f5:80:6c:18:c6:aa:7a:86:7e:
                    59:c2:20:45:72:50:0c:b6:9e:c4:e3:03:ef:2c:32:
                    21:15:fa:8b:25:da:40:64:0f:bf:6d:67:a3:b8:95:
                    8f:7f:13:98:65:d0:ed:90:62:3b:47:c4:b9:8e:68:
                    72:9d:0f:eb:1d:fb:96:11:62:ed:4f:2e:a8:61:b7:
                    76:4a:6f:83:27:be:42:9f:03:12:1c:33:7e:b0:c0:
                    3e:b0:76:28:23:97:1e:cc:99:e4:48:93:0a:58:27:
                    83:39:af:f1:31:f0:2d:02:3e:29:8f:71:9d:08:79:
                    8e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4D:A6:25:B1:E3:C0:11:9C:46:F2:48:75:31:9E:C2:EC:39:D0:DF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B755210F50911F08EDA82AEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:38:e4:ed:12:7e:2d:03:3a:a1:f3:65:89:65:59:ff:0f:05:
         af:ec:d9:0f:90:82:02:d7:99:88:98:5f:53:d4:10:f6:15:cd:
         ab:3c:0e:37:cb:da:cb:f1:da:e2:01:f5:31:af:a5:ac:4d:ce:
         66:7f:e2:67:94:c0:3b:31:16:97:7a:67:03:5b:a0:84:0c:a3:
         3d:62:8e:dd:75:44:ca:1d:a9:36:06:e1:2b:ef:a7:11:16:b1:
         b7:c8:de:3a:87:7c:3e:4f:b7:96:81:78:68:9b:a0:32:16:a8:
         9e:d7:23:1d:20:8c:0b:a6:2a:70:e7:59:01:88:68:ed:00:5b:
         bc:e7:a8:67:a4:31:63:5a:4c:9d:19:18:87:ba:0e:c2:ec:e2:
         c3:91:fb:27:71:fb:a2:ce:20:01:fe:bb:2a:c5:f1:0d:bd:3f:
         6c:ba:2d:5b:32:3f:fb:06:6a:8e:f6:b3:38:66:d9:f4:bd:8e:
         d5:97:31:9b:3b:b2:c1:3b:7c:71:74:d0:85:da:90:b0:6f:28:
         76:30:5a:40:36:9d:49:f1:0f:6c:0b:1f:15:7b:97:e0:04:09:
         c7:10:68:09:db:d4:25:f7:fb:59:60:bf:9f:23:1a:45:f5:20:
         e4:3f:13:6a:3a:e5:69:36:c0:a0:1a:cc:93:23:50:c3:21:43:
         79:65:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:15:33 2026 by rpki-client