This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/401165C6E00F11F089E54CB0DAE4EC9C.roa
File:                     401165C6E00F11F089E54CB0DAE4EC9C.roa (raw, json)
Hash identifier:          nx6l0TU3l0vjg90qRZOKXaxRFC7IzcFuB1zu2Pf9XyE=
Subject key identifier:   B9:C7:01:53:BF:2A:10:5E:2D:D1:AF:6D:2C:2B:F4:F2:86:6E:53:EC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0190C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/401165C6E00F11F089E54CB0DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 14:54:15 +0000
ROA not before:           Tue 23 Dec 2025 14:54:10 +0000
ROA not after:            Mon 09 Feb 2026 14:54:10 +0000
asID:                     7018
IP address blocks:        45.202.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102597 (0x190c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 14:54:10 2025 GMT
            Not After : Feb  9 14:54:10 2026 GMT
        Subject: CN=694aad17-efcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:bb:5a:be:0d:85:85:ea:ec:00:ff:51:01:
                    66:e9:ed:07:ca:8a:74:61:03:53:b3:b7:ed:b5:06:
                    d3:88:b4:6a:8a:87:e0:f8:0d:43:e5:f5:71:d5:b0:
                    fd:f3:e7:46:00:c6:ad:53:7a:ba:c5:3c:7c:b0:57:
                    2a:9c:ac:3a:40:c7:82:62:18:f6:32:ae:35:0e:b2:
                    c9:d2:e3:65:bb:b2:c0:c6:d2:67:fb:28:60:0b:02:
                    97:96:2e:f0:71:c9:70:b4:be:89:e9:33:d8:1a:63:
                    c5:9e:17:ba:48:e2:82:9e:23:0e:c7:16:24:f6:fe:
                    80:83:51:fb:0f:95:1c:03:cb:3e:36:4c:ee:9c:86:
                    db:25:f4:6b:3b:09:b7:64:f8:9f:4d:c7:22:f0:dc:
                    73:00:8e:9b:0a:cc:0c:0a:8c:89:ab:35:21:f9:e4:
                    92:1b:48:7a:83:a0:ee:2b:f8:d7:db:c8:b7:5f:fb:
                    59:5a:e9:05:d5:50:b8:ad:5f:dd:1a:8f:b4:f9:67:
                    9b:d8:22:09:73:15:59:cb:fc:1b:81:ed:98:33:f9:
                    c8:6c:39:49:45:e0:d7:91:52:e0:cc:56:1a:d3:13:
                    21:dc:5d:50:f2:fd:5e:7f:0c:85:31:a8:70:d4:e2:
                    34:e6:e9:b2:d2:96:6c:49:24:eb:a5:ed:27:7c:d1:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C7:01:53:BF:2A:10:5E:2D:D1:AF:6D:2C:2B:F4:F2:86:6E:53:EC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/401165C6E00F11F089E54CB0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:4e:30:eb:64:37:64:66:a0:5a:c0:37:c5:c9:c1:53:3a:32:
         17:e1:60:db:bc:ea:37:16:d9:75:01:8c:37:ad:ed:3c:ad:8c:
         3a:ff:67:05:10:1d:0b:9b:63:be:16:20:4a:45:f3:84:98:60:
         5b:31:76:3a:1f:3e:f9:cf:2b:cd:62:5d:58:72:c1:c2:d9:ff:
         21:ad:a7:14:bf:df:05:fa:61:7c:3e:a6:a3:cd:74:64:b8:ad:
         66:2d:71:3b:6c:0f:c8:df:31:a2:19:79:e0:24:ee:7e:ac:4c:
         0e:1a:e3:6a:62:38:29:27:c1:dd:04:6c:29:91:d2:ed:78:ba:
         4e:6a:fb:fe:61:50:32:3f:fd:27:ed:88:82:6b:9f:b8:92:7d:
         ec:8c:1f:9f:23:40:50:31:0c:84:d7:1f:73:5d:06:20:8e:b2:
         2b:a5:14:ce:25:4e:e2:fc:ab:70:11:d8:2d:a8:b4:78:6e:f6:
         d9:0b:2b:67:5c:04:69:76:69:90:95:57:19:24:86:2d:87:a5:
         6c:fa:04:87:4d:80:9e:8a:a4:19:ec:e4:50:5d:fb:c7:9a:65:
         3f:3f:14:60:87:ee:e2:e8:0e:2d:2d:c5:d1:a0:86:ef:d7:e3:
         ab:73:33:52:66:ab:ef:82:cb:d7:02:c0:a8:03:8c:dd:f7:fa:
         df:15:4e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:28:30 2025 by rpki-client