This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00B21008DF1811F0A2A669A7DAE4EC9C.roa
File:                     00B21008DF1811F0A2A669A7DAE4EC9C.roa (raw, json)
Hash identifier:          JXPIuuo6xPsNTdRghnEoTw5C7USXsfPuaJyfyqXPPVI=
Subject key identifier:   02:EA:0C:05:FC:93:53:1C:A3:8E:B8:FE:27:4E:FD:28:4B:AE:4A:B2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019053
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00B21008DF1811F0A2A669A7DAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 09:24:24 +0000
ROA not before:           Mon 22 Dec 2025 09:24:19 +0000
ROA not after:            Fri 09 Jan 2026 09:24:19 +0000
asID:                     205463
IP address blocks:        45.192.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102483 (0x19053)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 22 09:24:19 2025 GMT
            Not After : Jan  9 09:24:19 2026 GMT
        Subject: CN=69490e47-0a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:b8:b2:7f:dd:d8:6b:ad:d2:da:1a:54:ac:
                    11:d4:7b:3c:01:d9:49:21:64:31:d4:8e:db:c2:b6:
                    1f:3f:6b:bb:b6:74:c7:fc:d1:fb:d5:9c:d0:c5:42:
                    b6:8b:c8:e4:7b:1d:14:2a:be:f1:10:07:76:c3:5b:
                    15:87:90:cc:ae:59:3a:8b:57:d6:5f:47:23:84:41:
                    50:d7:3c:93:86:1b:27:1d:88:86:f3:23:66:f4:43:
                    92:94:e1:e2:3f:5e:e2:e8:ed:f6:53:1a:a2:54:fa:
                    e5:f2:2e:af:86:a3:10:51:a6:aa:04:22:96:fe:be:
                    d3:e5:98:50:ef:35:7a:4d:6f:ce:7c:5a:06:91:4f:
                    c9:d4:6c:93:25:d5:17:b3:7e:84:45:3f:eb:13:a4:
                    6a:d8:e3:b0:c3:ed:a3:5f:3f:60:76:78:12:c7:95:
                    57:56:1d:4f:b5:23:a4:09:9b:cc:cc:e5:75:9d:3c:
                    82:65:ac:18:89:58:9f:d6:11:ac:15:36:2b:f2:61:
                    d8:d5:2d:70:84:48:b7:f0:89:9a:f8:07:2b:16:4b:
                    52:a0:43:88:e3:78:1f:56:1d:f7:3d:23:e2:a6:b6:
                    e9:85:e6:8c:4e:c6:a8:9a:4f:c7:bd:ee:26:18:bd:
                    a1:fe:4c:97:17:b7:5b:6a:01:78:21:b2:54:d7:b4:
                    15:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EA:0C:05:FC:93:53:1C:A3:8E:B8:FE:27:4E:FD:28:4B:AE:4A:B2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00B21008DF1811F0A2A669A7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:38:52:e9:0e:83:32:65:fb:86:24:a1:45:32:f3:2f:28:04:
         ce:98:20:65:75:62:23:5a:26:2e:ea:2e:cd:1b:63:9f:a5:32:
         91:73:68:e9:37:42:41:85:84:3e:c3:60:48:3c:e9:7f:1f:5a:
         91:b7:e1:47:a2:4f:67:7d:d3:12:99:73:e2:e6:c7:b7:c9:27:
         f0:ab:56:e8:eb:6d:8d:fa:d0:7b:65:7b:22:49:ee:06:1b:c3:
         87:2c:94:e3:d4:3f:55:17:77:87:b0:7d:b9:79:1e:3f:60:91:
         e7:0e:09:65:bf:3b:32:8e:69:a3:de:fe:6c:c4:3b:c7:ad:c3:
         86:df:34:e7:80:5d:bf:43:a5:32:7e:b1:f1:53:2f:0f:84:82:
         96:74:e0:8c:14:1b:7a:57:01:4b:80:32:b3:ac:69:27:28:c5:
         9f:04:3d:52:93:b9:40:79:f6:03:a4:f9:a7:e8:c0:7e:5b:04:
         d0:4c:71:d3:8f:a2:62:90:81:fe:29:5e:e1:82:e8:c8:45:8e:
         a2:a4:0b:48:e7:a0:f4:3e:d8:fd:b3:f7:0d:3b:f7:e8:4c:f3:
         e5:2b:79:ee:be:77:fc:34:ae:6d:ee:e7:cd:f5:51:c6:5f:43:
         a3:ef:89:7d:a3:cc:f8:02:03:29:89:ad:73:51:3d:a3:09:7a:
         ef:aa:d8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:35 2025 by rpki-client