This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA659398F6A311F09FE4A286DAE4EC9C.roa
File:                     AA659398F6A311F09FE4A286DAE4EC9C.roa (raw, json)
Hash identifier:          57gmVaWBG7W5vzCugZ3TBfR30azVEx4vDeY51DtpVqk=
Subject key identifier:   E3:AA:05:F8:20:89:34:1B:C6:CF:07:04:BD:C6:A4:2A:3B:81:FB:86
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01980E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA659398F6A311F09FE4A286DAE4EC9C.roa
Signing time:             Wed 21 Jan 2026 08:32:05 +0000
ROA not before:           Wed 21 Jan 2026 08:31:59 +0000
ROA not after:            Fri 27 Feb 2026 08:31:59 +0000
asID:                     6079
IP address blocks:        45.192.64.0/19 maxlen: 24
                          45.202.32.0/21 maxlen: 24
                          45.202.40.0/23 maxlen: 24
                          45.202.42.0/23 maxlen: 24
                          45.202.44.0/23 maxlen: 24
                          45.202.124.0/24 maxlen: 24
                          45.204.78.0/24 maxlen: 24
                          45.205.151.0/24 maxlen: 24
                          45.205.154.0/24 maxlen: 24
                          45.205.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104462 (0x1980e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 21 08:31:59 2026 GMT
            Not After : Feb 27 08:31:59 2026 GMT
        Subject: CN=69708f05-fbf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:b4:34:49:52:23:b9:96:af:69:5a:02:21:
                    d0:4e:da:16:6e:74:7e:40:11:52:2c:c4:59:d8:52:
                    cc:5c:5b:36:35:42:21:7f:91:d6:ae:04:5b:99:41:
                    51:fb:c5:57:41:1c:58:f9:95:05:6b:dd:65:67:31:
                    5b:4b:50:cc:40:4c:91:d0:91:97:76:22:c8:85:c8:
                    6e:48:8e:c0:d5:14:8d:bb:2a:23:38:94:a0:d2:1e:
                    b7:d3:db:a2:02:52:2d:f5:eb:7b:7b:1f:73:36:89:
                    30:53:dc:0e:e6:a1:59:7c:f0:0b:10:a3:dc:c1:a5:
                    41:ed:9f:e8:8f:25:99:36:c8:df:ea:df:70:96:bf:
                    da:eb:6f:e4:56:ab:5b:54:3c:d6:76:71:8f:bb:8e:
                    e8:65:21:6f:af:aa:4c:24:6f:d9:9d:9b:c6:ad:f3:
                    2f:9b:83:03:c9:2f:97:96:ff:c6:4c:a2:0f:16:ab:
                    f6:75:62:68:a9:37:88:9d:ac:ba:97:62:c1:c5:03:
                    91:b9:32:37:41:1e:94:e8:e5:8b:96:59:8c:40:8d:
                    f7:c5:0a:b4:69:b4:60:dd:1f:66:a7:3a:91:a5:fa:
                    e8:cb:08:ca:06:59:d9:9f:7b:36:3a:29:3c:fa:6b:
                    c0:33:94:a7:ad:f3:4e:b9:f4:07:4f:10:ff:7b:48:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AA:05:F8:20:89:34:1B:C6:CF:07:04:BD:C6:A4:2A:3B:81:FB:86
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA659398F6A311F09FE4A286DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.64.0/19
                  45.202.32.0-45.202.45.255
                  45.202.124.0/24
                  45.204.78.0/24
                  45.205.151.0/24
                  45.205.154.0/24
                  45.205.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:28:c1:f7:10:f9:1d:bf:28:f5:03:fc:b1:05:61:b3:34:7d:
         1b:48:f0:e0:92:6d:52:4a:49:ed:46:a6:82:51:d7:93:38:6f:
         17:e9:48:00:92:dd:34:69:0c:1e:d7:aa:bb:33:77:c2:c8:00:
         64:80:13:5c:38:85:53:44:b2:eb:9f:9c:92:7e:cb:6b:cf:af:
         61:43:f5:cb:eb:6a:cb:38:e6:eb:60:5d:db:2e:c1:3b:4c:38:
         d3:3c:1f:68:6c:75:72:76:5d:63:d9:c7:de:4e:02:25:58:34:
         ea:29:11:02:73:35:ac:59:f4:f3:f3:d5:46:ef:c5:92:2c:5e:
         87:2e:ad:75:24:7e:06:1b:2a:08:a8:50:d9:93:41:8b:a9:97:
         95:14:3d:50:52:a6:0d:14:7f:28:c1:74:5c:89:76:9c:5d:e7:
         1f:03:71:7c:91:2c:8b:d5:f6:20:80:35:ee:e3:4a:a1:fc:96:
         fd:1e:84:3f:8f:4c:ed:1d:c7:09:8a:6e:b3:2d:ec:04:87:a7:
         6d:06:72:22:10:85:e3:3f:58:11:3b:22:d9:10:a9:e3:40:bc:
         4e:43:b6:26:44:c6:a4:a7:c2:95:4d:22:ba:55:8e:6a:4d:c5:
         35:c5:c0:2b:dc:da:0c:e3:b7:c8:b9:d0:67:8c:55:16:5c:22:
         a3:95:1a:6d
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIDAZgOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTIxMDgzMTU5WhcNMjYwMjI3MDgzMTU5WjAYMRYw
FAYDVQQDEw02OTcwOGYwNS1mYmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApq20NElSI7mWr2laAiHQTtoWbnR+QBFSLMRZ2FLMXFs2NUIhf5HWrgRb
mUFR+8VXQRxY+ZUFa91lZzFbS1DMQEyR0JGXdiLIhchuSI7A1RSNuyojOJSg0h63
09uiAlIt9et7ex9zNokwU9wO5qFZfPALEKPcwaVB7Z/ojyWZNsjf6t9wlr/a62/k
VqtbVDzWdnGPu47oZSFvr6pMJG/ZnZvGrfMvm4MDyS+Xlv/GTKIPFqv2dWJoqTeI
nay6l2LBxQORuTI3QR6U6OWLllmMQI33xQq0abRg3R9mpzqRpfroywjKBlnZn3s2
Oik8+mvAM5SnrfNOufQHTxD/e0gfywIDAQABo4ICzjCCAsowHQYDVR0OBBYEFOOq
BfggiTQbxs8HBL3GpCo7gfuGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQTY1OTM5OEY2QTMxMUYwOUZFNEEyODZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQFLcBAMAwDBAUtyiADBAEtyiwD
BAAtynwDBAAtzE4DBAAtzZcDBAAtzZoDBAEtzawwDQYJKoZIhvcNAQELBQADggEB
AFYowfcQ+R2/KPUD/LEFYbM0fRtI8OCSbVJKSe1GpoJR15M4bxfpSACS3TRpDB7X
qrszd8LIAGSAE1w4hVNEsuufnJJ+y2vPr2FD9cvrass45utgXdsuwTtMONM8H2hs
dXJ2XWPZx95OAiVYNOopEQJzNaxZ9PPz1UbvxZIsXocurXUkfgYbKgioUNmTQYup
l5UUPVBSpg0UfyjBdFyJdpxd5x8DcXyRLIvV9iCANe7jSqH8lv0ehD+PTO0dxwmK
brMt7ASHp20GciIQheM/WBE7ItkQqeNAvE5DtiZExqSnwpVNIrpVjmpNxTXFwCvc
2gzjt8i50GeMVRZcIqOVGm0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:10:51 2026 by rpki-client