This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C2EAA38F5DD11F0A1614EC2DAE4EC9C.roa
File:                     9C2EAA38F5DD11F0A1614EC2DAE4EC9C.roa (raw, json)
Hash identifier:          CZpmnnEK11MtL4hTI9Mh/weNCRNWtwBL+cgT5zBJdw8=
Subject key identifier:   00:17:F2:56:68:DA:E2:58:B8:4C:76:6D:65:55:13:9B:E8:93:71:DF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0197BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C2EAA38F5DD11F0A1614EC2DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 08:54:21 +0000
ROA not before:           Tue 20 Jan 2026 08:54:16 +0000
ROA not after:            Mon 23 Feb 2026 08:54:16 +0000
asID:                     27951
IP address blocks:        45.195.254.0/24 maxlen: 24
                          45.196.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104382 (0x197be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 20 08:54:16 2026 GMT
            Not After : Feb 23 08:54:16 2026 GMT
        Subject: CN=696f42bd-d9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8c:f9:e3:42:83:65:80:a7:0a:61:23:a3:7c:
                    04:af:eb:8b:96:3c:80:05:cb:ee:50:d0:37:7c:69:
                    02:f2:05:e4:38:f5:2d:09:21:8a:1a:ea:0d:1c:44:
                    9f:84:1d:92:45:2c:b1:f1:c4:d0:4d:67:6d:e9:a9:
                    2c:98:d4:39:3c:48:83:bc:63:85:05:94:b7:52:58:
                    87:3a:2d:e5:97:a8:b8:7e:19:ee:54:fd:31:34:fd:
                    87:0f:f4:90:de:e7:a7:13:a8:2e:8c:48:cd:66:b9:
                    ca:f3:df:55:c4:d4:e2:da:89:79:ed:1c:50:52:ac:
                    76:43:8a:64:5b:21:21:bd:63:98:8d:8e:2e:1a:63:
                    50:2c:6c:de:db:6b:fe:2a:8d:c9:82:67:8f:d5:aa:
                    df:8e:cd:16:38:f0:f9:51:19:68:cc:69:30:bd:a8:
                    5d:08:bd:69:6f:cd:4d:f5:de:d1:df:30:d8:16:0d:
                    fb:56:39:e7:75:c4:07:4c:7f:32:68:40:8b:73:11:
                    97:6d:79:5d:8f:3e:a3:66:d6:e6:2a:b4:9b:2e:0f:
                    29:fe:9a:33:2f:a0:5c:26:21:c4:22:38:32:10:06:
                    be:e7:28:74:ea:52:53:7d:57:29:51:78:e9:20:d7:
                    cc:05:c9:39:81:bb:15:7a:d0:4b:13:9e:87:78:92:
                    99:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:17:F2:56:68:DA:E2:58:B8:4C:76:6D:65:55:13:9B:E8:93:71:DF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C2EAA38F5DD11F0A1614EC2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.254.0/24
                  45.196.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:f8:ee:0b:30:31:6a:9a:8c:ec:77:61:42:34:14:5e:c6:be:
         d1:9e:1f:69:7b:4b:a0:d3:fd:a8:c3:16:43:c8:64:01:fc:64:
         73:91:b4:f2:7c:bc:c9:34:cd:13:c6:af:93:bb:9e:92:7d:98:
         2b:09:8f:a7:7f:a9:d8:d0:42:c1:b5:da:40:f0:c6:83:d2:1f:
         67:2d:7d:02:62:2a:66:0f:f6:78:d8:77:cb:1c:46:58:2a:f9:
         33:cc:18:3c:49:f0:2c:93:65:0d:00:14:3f:ab:5a:01:ad:14:
         ce:e5:ef:89:ad:bd:5c:e4:44:76:8a:98:23:c6:08:8b:1b:58:
         7a:d6:0f:77:39:9b:cf:ac:24:57:e1:e1:7e:bb:d2:41:f6:c4:
         5f:2c:e5:82:72:65:cb:23:4e:23:d4:92:0b:a0:5b:49:4f:b4:
         6e:bf:ba:17:3a:dc:de:60:91:4f:96:ef:c2:c0:17:06:90:78:
         61:70:f3:50:f8:52:49:55:04:ff:10:28:47:b4:0c:ef:21:61:
         38:2c:72:b7:04:12:a7:d3:28:7a:ce:c1:b3:34:ee:6b:f4:c4:
         9f:0f:da:2c:ae:fd:1b:75:2c:41:31:1f:f6:18:40:dd:40:da:
         db:b9:86:f2:e7:26:f7:8a:d7:62:74:89:72:ef:10:9e:e2:67:
         5d:ac:2d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:45:33 2026 by rpki-client