This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09D7C326DA6811F0989848C1DAE4EC9C.roa
File:                     09D7C326DA6811F0989848C1DAE4EC9C.roa (raw, json)
Hash identifier:          5l7Z9x7iN+7ZRRzE1Zgx/SUq/Rt+d6iGMsiga3i+Fqo=
Subject key identifier:   A4:4E:BD:6B:40:7E:FB:32:E1:1B:C4:09:03:5A:87:F0:6D:7E:2F:AC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018EDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09D7C326DA6811F0989848C1DAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 10:14:43 +0000
ROA not before:           Tue 16 Dec 2025 10:14:38 +0000
ROA not after:            Fri 16 Jan 2026 10:14:38 +0000
asID:                     273079
IP address blocks:        45.194.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102110 (0x18ede)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 16 10:14:38 2025 GMT
            Not After : Jan 16 10:14:38 2026 GMT
        Subject: CN=69413113-7b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2e:47:00:6f:1c:72:cc:32:a8:30:cf:82:2a:
                    7d:4b:f6:88:93:b5:4e:d5:b9:ac:34:e8:d5:af:9e:
                    0f:16:9d:5e:ce:bb:94:6c:8f:cc:cb:22:06:eb:68:
                    f9:37:7c:da:0e:d0:94:db:c8:7e:d5:c4:d0:4b:aa:
                    0b:1f:65:22:0e:9c:d1:6e:27:72:12:e1:f0:74:95:
                    dd:7d:81:cf:2d:82:76:53:66:fd:7d:89:26:2c:15:
                    7d:d2:98:b8:29:e5:f8:66:0d:02:d8:4a:68:81:8a:
                    6e:6d:48:8e:82:7c:8b:ac:0d:b8:7d:b5:17:23:ae:
                    61:e0:a8:3f:06:7d:62:5b:a8:20:e8:a2:e0:be:c8:
                    48:c1:9d:3d:d4:f4:11:48:b4:03:2b:ae:27:76:b3:
                    82:61:27:3b:1b:11:6e:59:43:00:7a:ce:3c:a1:67:
                    e4:6f:a8:aa:97:ad:f3:06:20:94:2c:76:cc:32:2a:
                    15:7b:ee:50:ee:22:0d:f4:dc:b9:ba:d5:16:e3:36:
                    43:85:a5:6d:69:d4:51:65:f9:2e:30:47:72:e5:a8:
                    1e:e8:f5:8b:48:6c:41:1b:8c:89:71:62:37:73:6f:
                    aa:7a:f8:7d:4e:01:14:60:ce:bd:de:9b:05:43:76:
                    61:46:60:07:a3:f6:c8:49:bd:ea:c6:5b:7e:76:bd:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4E:BD:6B:40:7E:FB:32:E1:1B:C4:09:03:5A:87:F0:6D:7E:2F:AC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09D7C326DA6811F0989848C1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:9a:a7:80:f1:13:df:9a:6d:56:0d:87:b1:b0:b8:3a:1d:bd:
         75:3c:55:36:94:b0:d9:ec:e9:fb:13:9a:df:97:2e:23:7e:92:
         0e:ca:f2:81:45:4c:2e:be:f9:61:54:8e:8c:b9:c7:1f:c2:d6:
         81:53:87:4c:82:a5:8c:5d:10:f3:e9:ef:30:95:99:e1:40:04:
         ae:1e:93:cb:6e:40:d0:57:bc:fc:39:71:58:ea:68:d0:20:bb:
         21:0a:a5:51:46:51:f6:8e:8c:f6:79:ff:c8:50:c9:ee:a5:f9:
         89:bd:e7:ba:db:42:f5:52:5e:c0:25:16:3c:20:82:f7:ab:fd:
         f8:26:2d:76:e5:5f:fd:ac:ed:51:3b:8a:11:77:2b:a8:c9:c2:
         b1:32:63:c5:68:1e:47:f5:bc:d1:a3:f9:bd:9c:bb:3d:3e:b6:
         22:8e:99:09:e9:7c:45:9f:fe:e3:2b:4c:20:e6:d5:e4:8b:9a:
         86:43:c7:98:dc:6d:e4:6d:50:da:17:1b:f0:b2:5b:89:1b:25:
         d6:45:65:ae:a4:a4:f0:77:65:b2:1c:9d:9c:da:83:0e:70:43:
         0e:a1:cc:02:62:ab:3b:c7:94:84:4c:e5:f6:66:e1:3a:0c:43:
         84:97:c9:3d:cd:02:3c:da:cc:a6:a6:56:15:13:da:5b:c6:d3:
         f9:45:b5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:34:07 2025 by rpki-client