This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BA6A2D6DA7111F0BCCF2879DAE4EC9C.roa
File:                     0BA6A2D6DA7111F0BCCF2879DAE4EC9C.roa (raw, json)
Hash identifier:          EDd2FUopmuviu7dbIBYHo/AW6pczhZ5+EDP+BrGC9Iw=
Subject key identifier:   FA:F3:A6:64:79:75:73:0D:F2:9C:A5:5D:F4:4E:B5:7F:7E:B6:A7:47
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018EE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BA6A2D6DA7111F0BCCF2879DAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 11:19:11 +0000
ROA not before:           Tue 16 Dec 2025 11:19:06 +0000
ROA not after:            Fri 26 Dec 2025 11:19:06 +0000
asID:                     63139
IP address blocks:        45.197.67.0/24 maxlen: 24
                          45.197.68.0/23 maxlen: 24
                          45.197.68.0/24 maxlen: 24
                          45.197.69.0/24 maxlen: 24
                          45.197.70.0/24 maxlen: 24
                          45.197.71.0/24 maxlen: 24
                          45.197.72.0/24 maxlen: 24
                          45.197.73.0/24 maxlen: 24
                          45.197.74.0/24 maxlen: 24
                          45.197.75.0/24 maxlen: 24
                          45.197.88.0/24 maxlen: 24
                          45.197.89.0/24 maxlen: 24
                          45.197.90.0/24 maxlen: 24
                          45.197.91.0/24 maxlen: 24
                          45.197.92.0/24 maxlen: 24
                          45.197.93.0/24 maxlen: 24
                          45.197.94.0/24 maxlen: 24
                          45.197.95.0/24 maxlen: 24
                          45.197.96.0/24 maxlen: 24
                          45.197.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102120 (0x18ee8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 16 11:19:06 2025 GMT
            Not After : Dec 26 11:19:06 2025 GMT
        Subject: CN=6941402f-e39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:82:3b:b2:36:e2:06:5d:59:07:01:83:6f:
                    71:7f:fb:b0:5b:3f:1b:01:39:3a:52:b1:cc:32:6c:
                    4a:17:bf:e5:9b:ba:06:ca:80:13:a0:f6:a6:aa:62:
                    7f:0a:40:2b:f7:12:64:61:45:6e:3a:af:8e:e6:62:
                    36:4d:41:78:e4:d5:a3:27:8b:dc:cd:41:fd:c0:44:
                    00:87:ac:31:31:fa:e3:1e:3d:db:41:0c:72:15:81:
                    21:dc:c8:b4:6d:1c:b9:0b:6c:88:82:01:52:9b:18:
                    0f:b2:97:15:fc:99:aa:99:67:04:93:76:27:96:1a:
                    62:6c:be:bb:ce:38:d2:67:a1:bc:29:1c:ea:34:1d:
                    dd:47:d2:5c:49:84:9a:d9:93:a3:74:00:59:fa:f3:
                    08:c2:a0:5f:a9:94:e4:02:8c:fc:1a:f8:2c:fb:17:
                    18:10:b7:5b:6d:93:34:5b:bc:8c:8e:9e:1d:dd:92:
                    d7:69:0c:31:7f:da:84:f2:dc:f4:1a:c0:31:82:b3:
                    bc:db:d3:70:9f:75:cc:a1:0c:0c:30:30:f3:7b:8d:
                    33:f2:33:ad:72:ce:b5:09:6c:d0:4e:3b:4e:b8:08:
                    1a:6d:2f:8c:47:2a:84:a3:01:d9:e3:61:f9:69:c4:
                    02:0f:f4:2a:2c:97:9f:43:37:b1:32:0c:74:a1:e5:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F3:A6:64:79:75:73:0D:F2:9C:A5:5D:F4:4E:B5:7F:7E:B6:A7:47
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BA6A2D6DA7111F0BCCF2879DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.67.0-45.197.75.255
                  45.197.88.0-45.197.97.255

    Signature Algorithm: sha256WithRSAEncryption
         8f:e8:84:6e:4d:af:f6:c9:d9:f2:2a:d0:29:ea:4a:50:a5:34:
         6b:7c:16:9e:43:9c:09:15:d7:85:5d:3a:59:b6:d1:da:00:bc:
         5a:54:11:96:32:56:a5:e0:1a:de:ad:b0:26:12:45:8c:5c:14:
         69:37:9c:9f:17:43:ac:8b:9f:8f:7c:05:0e:02:1d:13:0a:7a:
         d6:f6:c8:56:b4:84:aa:3a:5a:77:db:0b:57:dd:a8:de:d4:91:
         b0:33:22:eb:d0:e6:45:ad:11:48:ab:10:b9:ea:f7:23:d9:ba:
         fe:26:ff:23:71:cb:fe:35:2e:84:61:55:1a:2a:0b:a2:89:3e:
         cc:04:90:8c:36:44:6c:66:ac:e2:b6:b7:2f:0b:75:4c:ea:10:
         07:01:80:35:d5:90:ef:05:36:1e:7e:11:09:ce:d8:0f:e7:35:
         5e:f3:57:95:c3:fd:79:b1:18:bb:6a:4d:fc:84:7c:30:16:80:
         ae:21:3e:ad:9f:76:7b:92:66:19:38:f3:f1:72:e6:dc:5e:dc:
         10:ff:57:cc:e4:ba:36:40:b7:c7:7d:43:4d:55:bc:31:69:e7:
         67:69:2f:ba:1e:af:a6:77:aa:a4:40:f9:4a:e6:e9:ea:9c:ad:
         3e:b5:b0:dc:e3:7f:a9:d1:a8:ea:50:25:26:7d:03:27:21:dd:
         e0:0e:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:33:41 2025 by rpki-client