This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8CE313EF95511F0AD0EFF8FDAE4EC9C.roa
File:                     A8CE313EF95511F0AD0EFF8FDAE4EC9C.roa (raw, json)
Hash identifier:          7bJq3xR2OUPe5QYb1vn2SvXyGyQxzf1kSXrxx9FYBtA=
Subject key identifier:   0A:45:46:9B:56:AD:8E:84:3A:F5:4F:BB:44:9E:99:0B:C0:93:D7:D2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01997A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8CE313EF95511F0AD0EFF8FDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 18:51:15 +0000
ROA not before:           Sat 24 Jan 2026 18:51:10 +0000
ROA not after:            Thu 12 Mar 2026 18:51:10 +0000
asID:                     2914
IP address blocks:        45.192.232.0/24 maxlen: 24
                          45.201.12.0/22 maxlen: 24
                          45.202.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Jan 2026 23:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104826 (0x1997a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 24 18:51:10 2026 GMT
            Not After : Mar 12 18:51:10 2026 GMT
        Subject: CN=697514a3-c758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:d1:db:f4:42:a6:2d:44:1e:27:7d:23:20:
                    77:4b:6f:3d:49:b3:97:d0:d1:a1:4d:86:da:a9:6d:
                    6f:62:0d:f5:10:a5:9f:65:5d:be:9e:bf:2d:0f:aa:
                    e2:72:40:70:7d:f9:04:c3:e4:98:4a:bf:1b:54:4f:
                    97:9b:0e:d0:ba:e1:9c:7c:8d:33:72:47:04:49:48:
                    12:de:c8:ca:09:0a:20:b0:92:43:28:cf:82:76:82:
                    2a:7a:c1:2b:ca:fd:7a:60:bc:db:f0:d2:bc:50:5a:
                    54:d7:0e:e0:ae:63:1e:27:79:45:7d:b1:39:10:14:
                    ae:22:7b:c1:c0:3d:05:3f:17:a1:76:4d:6b:ad:51:
                    10:e3:b5:ac:f3:ae:b8:91:52:02:16:04:83:22:3c:
                    80:b1:dd:53:0a:db:77:9f:55:28:0d:00:e7:00:24:
                    8f:04:a3:04:13:60:f9:08:e1:cb:62:52:9b:06:5c:
                    20:aa:d4:a3:44:c6:8e:39:ff:42:ec:73:23:59:54:
                    aa:69:1c:45:55:53:90:a5:55:96:c7:a6:20:f1:b0:
                    72:ba:cb:aa:24:21:2b:87:a4:27:99:cd:87:db:d4:
                    73:2a:8f:d8:cf:e4:49:3f:2f:aa:b9:24:b1:23:8b:
                    96:e8:5b:b8:5c:0b:8d:ec:09:88:1f:60:4c:3d:14:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:45:46:9B:56:AD:8E:84:3A:F5:4F:BB:44:9E:99:0B:C0:93:D7:D2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8CE313EF95511F0AD0EFF8FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.232.0/24
                  45.201.12.0/22
                  45.202.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:5a:37:ea:35:fa:5f:b4:bd:16:1b:9a:a9:d5:ff:b0:f9:68:
         4d:26:bc:ce:4c:05:65:28:53:ca:58:78:dd:73:e8:a3:20:69:
         55:92:e4:a4:d8:bf:e7:b4:da:74:b5:30:a2:40:45:28:1b:02:
         d4:19:b8:a4:72:fe:7b:be:9e:eb:37:5f:1d:99:34:2a:4f:cd:
         d2:45:d8:9d:4e:3b:36:be:b6:34:c4:d6:82:e7:86:d4:2e:a7:
         fe:e2:f6:e4:32:0b:66:57:8c:97:b3:fc:5e:71:81:6d:6c:57:
         7f:ee:5c:4a:33:b9:ba:1c:92:50:2f:78:9b:3d:d3:a3:0d:7e:
         87:a0:ea:1c:11:6b:4e:17:ec:eb:78:e1:4f:8c:79:56:e8:39:
         84:ad:0c:70:1f:bb:e9:54:28:50:8e:0d:5f:b8:22:89:bc:a4:
         06:6f:ab:ba:7e:e0:94:2c:07:92:99:f1:e9:f4:a6:a5:b6:88:
         9b:a6:b5:8c:08:76:0f:e4:ea:e9:07:ee:55:c5:30:63:3f:b7:
         44:90:c4:c5:fc:ae:e2:0f:85:08:b8:ae:b6:50:24:62:24:08:
         82:34:7c:9b:ad:e9:39:e5:fc:ca:9b:96:cd:0f:1e:92:ab:02:
         a2:1f:2c:b5:62:b0:6f:1c:2d:dd:70:89:e8:a3:fb:24:a8:a2:
         4b:c2:b9:8e
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAZl6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTI0MTg1MTEwWhcNMjYwMzEyMTg1MTEwWjAYMRYw
FAYDVQQDEw02OTc1MTRhMy1jNzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyXnR2/RCpi1EHid9IyB3S289SbOX0NGhTYbaqW1vYg31EKWfZV2+nr8t
D6rickBwffkEw+SYSr8bVE+Xmw7QuuGcfI0zckcESUgS3sjKCQogsJJDKM+CdoIq
esEryv16YLzb8NK8UFpU1w7grmMeJ3lFfbE5EBSuInvBwD0FPxehdk1rrVEQ47Ws
8664kVICFgSDIjyAsd1TCtt3n1UoDQDnACSPBKMEE2D5COHLYlKbBlwgqtSjRMaO
Of9C7HMjWVSqaRxFVVOQpVWWx6Yg8bByusuqJCErh6Qnmc2H29RzKo/Yz+RJPy+q
uSSxI4uW6Fu4XAuN7AmIH2BMPRQWhQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFApF
RptWrY6EOvVPu0SemQvAk9fSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BOENFMzEzRUY5NTUxMUYwQUQwRUZGOEZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALcDoAwQCLckMAwQALcpKMA0G
CSqGSIb3DQEBCwUAA4IBAQBFWjfqNfpftL0WG5qp1f+w+WhNJrzOTAVlKFPKWHjd
c+ijIGlVkuSk2L/ntNp0tTCiQEUoGwLUGbikcv57vp7rN18dmTQqT83SRdidTjs2
vrY0xNaC54bULqf+4vbkMgtmV4yXs/xecYFtbFd/7lxKM7m6HJJQL3ibPdOjDX6H
oOocEWtOF+zreOFPjHlW6DmErQxwH7vpVChQjg1fuCKJvKQGb6u6fuCULAeSmfHp
9KaltoibprWMCHYP5OrpB+5VxTBjP7dEkMTF/K7iD4UIuK62UCRiJAiCNHybrek5
5fzKm5bNDx6SqwKiHyy1YrBvHC3dcInoo/skqKJLwrmO
-----END CERTIFICATE-----
Generated at Sun Jan 25 03:59:00 2026 by rpki-client