This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D6AB820DF0B11F089E7EFD4DAE4EC9C.roa
File:                     0D6AB820DF0B11F089E7EFD4DAE4EC9C.roa (raw, json)
Hash identifier:          wK1BuYLS7uH5blw3U9JMOuYg+66VD7lb5t+w9aFek5o=
Subject key identifier:   D8:32:4D:72:C1:0A:CE:BE:BB:52:0B:2E:65:09:25:8E:EB:A5:D7:F7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019037
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D6AB820DF0B11F089E7EFD4DAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 07:51:41 +0000
ROA not before:           Mon 22 Dec 2025 07:51:37 +0000
ROA not after:            Fri 09 Jan 2026 07:51:37 +0000
asID:                     205463
IP address blocks:        45.192.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102455 (0x19037)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 22 07:51:37 2025 GMT
            Not After : Jan  9 07:51:37 2026 GMT
        Subject: CN=6948f88d-2410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:14:6c:e8:7b:02:ca:fe:39:91:fa:0c:a3:
                    7e:85:d4:c6:ef:13:ad:5b:a3:8e:a0:e0:4e:1c:dd:
                    74:bd:65:cd:2d:42:48:97:6d:cc:ba:7a:93:b7:d7:
                    a9:e4:f1:2b:82:1a:42:57:8c:28:6c:bf:0d:97:79:
                    b4:f5:b7:30:8e:1d:bc:ae:ba:ce:bc:bf:d7:d3:7e:
                    96:de:26:fa:5f:a0:28:51:1c:ce:56:a0:3e:ce:05:
                    79:a7:43:16:b2:17:55:f7:87:75:25:3f:a7:61:0b:
                    b3:97:e6:88:92:29:14:44:a9:9f:ad:f5:59:65:05:
                    5b:53:92:93:26:1e:54:66:ce:69:90:b5:92:e0:1c:
                    0d:06:1e:59:23:66:5f:93:d0:81:35:ec:d8:0c:d9:
                    bf:7a:94:22:d2:b2:e9:33:16:d6:37:9c:1a:4d:4c:
                    84:84:31:b1:c2:1b:29:da:89:96:71:43:70:b5:54:
                    4d:6a:cc:9d:88:a1:74:e5:eb:f2:e7:d6:26:4a:50:
                    a2:1b:2a:a0:1f:e0:59:62:bd:0c:67:8b:37:0b:e9:
                    11:bc:16:c1:5a:34:8a:ad:5d:47:29:fe:7a:31:0f:
                    0c:d9:a9:5d:f7:cd:aa:33:31:7c:3a:58:97:ae:62:
                    bc:b2:67:fe:0e:cc:a8:61:e1:bb:4a:b4:dd:57:d4:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:32:4D:72:C1:0A:CE:BE:BB:52:0B:2E:65:09:25:8E:EB:A5:D7:F7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D6AB820DF0B11F089E7EFD4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:de:58:e7:47:82:e1:0d:4b:d8:29:d7:f0:4a:bb:47:61:a3:
         43:b3:95:36:bf:f8:f9:6d:ae:03:87:21:7b:d7:ff:49:bf:64:
         d2:57:43:0e:ea:64:cd:17:99:24:d9:4f:07:b4:65:2b:db:db:
         c8:23:d1:4d:ad:fa:6a:f4:ce:ae:31:88:e3:1d:32:ec:a3:bb:
         b3:b5:14:4d:a8:ae:ba:bc:97:ad:29:1f:14:24:a8:25:cb:c6:
         38:f2:7a:b3:29:23:93:37:7d:31:8e:77:ca:15:51:46:dd:81:
         91:21:02:eb:de:38:f4:ca:f2:13:3c:80:b6:6e:98:c8:89:c0:
         be:f0:93:a7:50:51:d1:69:1d:8f:e2:94:0d:f8:9f:9e:03:9a:
         52:44:7c:f4:5d:32:e1:37:25:b0:f9:04:0f:00:5b:7b:d8:7d:
         64:e1:3e:7c:8e:78:01:0e:08:7d:ef:a8:91:7f:78:c4:d1:05:
         e2:92:44:cc:79:12:21:73:77:fb:8e:3e:ca:7f:f7:49:ea:08:
         df:6d:f6:ca:80:1c:16:d1:60:11:ad:d7:31:57:a7:7d:b2:44:
         2a:3c:7c:1c:8c:88:92:11:fc:8d:b1:f8:2c:d7:c8:ed:db:88:
         44:4f:ed:e6:ba:40:e4:c5:29:c2:e1:25:62:b8:20:37:46:27:
         7a:3b:91:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:00 2025 by rpki-client