This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9D391B8F7E311F0A9C7D6A6DAE4EC9C.roa
File:                     B9D391B8F7E311F0A9C7D6A6DAE4EC9C.roa (raw, json)
Hash identifier:          DtR5gGoFL2qI5SWTF9Ucs6mQ0I+FRt3D5AilSR7QzK4=
Subject key identifier:   83:DC:3D:15:DB:A2:9C:4E:82:38:04:7D:B7:56:F2:92:48:05:CB:5C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0198A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9D391B8F7E311F0A9C7D6A6DAE4EC9C.roa
Signing time:             Thu 22 Jan 2026 22:43:10 +0000
ROA not before:           Fri 23 Jan 2026 22:43:05 +0000
ROA not after:            Mon 02 Mar 2026 22:43:05 +0000
asID:                     963
IP address blocks:        45.202.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104612 (0x198a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 23 22:43:05 2026 GMT
            Not After : Mar  2 22:43:05 2026 GMT
        Subject: CN=6972a7fe-cf39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:38:9d:a7:50:5a:91:a3:01:99:45:b1:42:
                    94:ef:0b:ef:e1:7e:8a:bf:c2:eb:19:2c:4c:ea:af:
                    e4:0f:a4:ef:1a:42:4f:ec:72:1b:a3:6c:48:64:9e:
                    72:83:b0:58:c4:b6:4d:35:01:c4:b0:97:04:03:86:
                    47:f3:18:12:e8:e7:95:9a:39:4f:39:3a:bd:ec:87:
                    2e:0a:ad:a8:4e:46:a6:da:73:a6:ed:0b:18:fe:48:
                    40:a2:37:33:e2:1f:c0:bc:28:b7:34:3e:5f:27:3f:
                    e1:04:e9:61:c4:2d:6e:b9:0e:97:eb:ca:75:18:04:
                    df:af:cb:c4:8e:84:60:db:a7:21:06:bf:f5:fe:ea:
                    15:a6:7b:66:f5:cb:b0:87:3d:d1:2c:07:53:d3:5b:
                    00:7b:dc:e7:01:e2:67:bd:f2:5d:19:2e:3d:85:8c:
                    0b:84:6d:90:0d:69:32:69:e4:f6:f6:7e:db:ff:01:
                    00:87:7e:9e:63:25:f1:fa:08:76:11:22:b9:42:92:
                    a2:c9:fd:ea:7b:73:ce:71:97:15:8d:88:58:29:f3:
                    9c:94:da:a8:c8:6b:2d:e0:58:7e:2a:0d:9d:40:e6:
                    c0:68:cc:03:59:bc:42:7f:18:1e:22:b4:5e:dc:74:
                    82:b5:01:9a:42:76:c7:41:d2:39:d8:d1:92:95:f4:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DC:3D:15:DB:A2:9C:4E:82:38:04:7D:B7:56:F2:92:48:05:CB:5C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9D391B8F7E311F0A9C7D6A6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:98:26:1e:4a:82:ec:24:3f:5e:f6:c6:60:19:82:bc:2b:45:
         fb:10:b4:5b:6c:af:f5:1d:42:94:89:23:63:22:6f:9a:1c:f5:
         dc:2f:84:6f:e1:f7:69:95:5c:27:01:df:9b:aa:17:5e:3d:41:
         a4:49:ab:2f:a5:6e:10:5c:ef:ec:11:d1:75:fe:a0:6e:1f:25:
         98:35:22:3c:5e:bc:bd:f8:96:e3:aa:62:18:be:20:7c:96:08:
         0c:43:d9:b2:63:45:21:86:55:f8:4d:dc:51:6c:36:18:0c:3b:
         49:ab:e9:b5:63:ba:c4:78:f3:1d:99:16:bb:3c:19:f8:02:77:
         36:57:d6:21:25:56:7d:93:a2:32:40:c8:07:5e:7b:96:ab:b1:
         30:b8:61:c0:9c:6a:fe:68:d5:7e:2b:e2:be:18:7d:b7:c1:23:
         cf:07:01:38:09:42:16:50:22:e9:20:ec:cd:5f:93:73:ce:e1:
         f2:06:73:26:fe:c6:88:d2:6c:3c:38:55:01:af:1f:fe:4b:90:
         25:69:7c:d2:d3:7a:ff:42:d1:07:d3:50:69:66:07:88:14:3c:
         04:9c:dc:10:9a:b8:5f:49:90:a9:51:6f:5b:01:e0:19:90:62:
         d9:f9:1b:fe:28:48:a6:4b:4a:fe:de:9d:52:24:f7:5b:32:a6:
         5c:43:14:21
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZikMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTIzMjI0MzA1WhcNMjYwMzAyMjI0MzA1WjAYMRYw
FAYDVQQDEw02OTcyYTdmZS1jZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqv44nadQWpGjAZlFsUKU7wvv4X6Kv8LrGSxM6q/kD6TvGkJP7HIbo2xI
ZJ5yg7BYxLZNNQHEsJcEA4ZH8xgS6OeVmjlPOTq97IcuCq2oTkam2nOm7QsY/khA
ojcz4h/AvCi3ND5fJz/hBOlhxC1uuQ6X68p1GATfr8vEjoRg26chBr/1/uoVpntm
9cuwhz3RLAdT01sAe9znAeJnvfJdGS49hYwLhG2QDWkyaeT29n7b/wEAh36eYyXx
+gh2ESK5QpKiyf3qe3POcZcVjYhYKfOclNqoyGst4Fh+Kg2dQObAaMwDWbxCfxge
IrRe3HSCtQGaQnbHQdI52NGSlfRvBQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIPc
PRXbopxOgjgEfbdW8pJIBctcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9COUQzOTFCOEY3RTMxMUYwQTlDN0Q2QTZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcouMA0GCSqGSIb3DQEBCwUA
A4IBAQCXmCYeSoLsJD9e9sZgGYK8K0X7ELRbbK/1HUKUiSNjIm+aHPXcL4Rv4fdp
lVwnAd+bqhdePUGkSasvpW4QXO/sEdF1/qBuHyWYNSI8Xry9+JbjqmIYviB8lggM
Q9myY0UhhlX4TdxRbDYYDDtJq+m1Y7rEePMdmRa7PBn4Anc2V9YhJVZ9k6IyQMgH
XnuWq7EwuGHAnGr+aNV+K+K+GH23wSPPBwE4CUIWUCLpIOzNX5NzzuHyBnMm/saI
0mw8OFUBrx/+S5AlaXzS03r/QtEH01BpZgeIFDwEnNwQmrhfSZCpUW9bAeAZkGLZ
+Rv+KEimS0r+3p1SJPdbMqZcQxQh
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:22:10 2026 by rpki-client