This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12B09442DF0D11F095CE8BE1DAE4EC9C.roa
File:                     12B09442DF0D11F095CE8BE1DAE4EC9C.roa (raw, json)
Hash identifier:          //oUULox1av67BTXzeNuzB27Fo8un/HaSvwPgyKl7XY=
Subject key identifier:   BB:70:DD:05:54:A5:BE:64:00:A4:C4:A8:2D:C3:05:DF:60:55:BF:19
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019041
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12B09442DF0D11F095CE8BE1DAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 08:06:09 +0000
ROA not before:           Mon 22 Dec 2025 08:06:04 +0000
ROA not after:            Sat 03 Jan 2026 08:06:04 +0000
asID:                     54801
IP address blocks:        45.194.85.0/24 maxlen: 24
                          45.195.60.0/24 maxlen: 24
                          45.195.192.0/24 maxlen: 24
                          45.195.196.0/24 maxlen: 24
                          45.195.197.0/24 maxlen: 24
                          45.197.1.0/24 maxlen: 24
                          45.197.2.0/24 maxlen: 24
                          45.197.4.0/24 maxlen: 24
                          45.197.5.0/24 maxlen: 24
                          45.199.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102465 (0x19041)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 22 08:06:04 2025 GMT
            Not After : Jan  3 08:06:04 2026 GMT
        Subject: CN=6948fbf1-277d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:39:77:39:39:0f:ab:df:8a:c4:65:94:f1:81:
                    a9:d1:b1:d4:bb:11:99:b1:e2:ea:ca:74:7c:17:ad:
                    69:88:b8:a1:d6:55:51:db:86:53:7c:eb:27:af:14:
                    ac:26:3e:32:c2:72:66:23:8d:3a:2e:e0:14:7e:f1:
                    8e:21:f8:73:ff:27:93:65:f4:29:f4:7b:6c:8f:a1:
                    26:38:b4:d0:dd:c2:a4:f5:68:50:3a:d9:83:bd:7e:
                    50:0e:54:97:c7:71:4f:ef:e7:03:8c:7d:f5:6a:c2:
                    21:d4:89:7b:2e:12:4b:4b:a7:2f:00:35:f5:c1:77:
                    2a:c5:68:92:91:d2:75:f3:1e:54:cb:d4:57:4a:5e:
                    16:ab:d5:c4:4b:66:ce:37:5b:59:93:98:90:eb:a7:
                    b7:ec:19:4b:2b:6e:45:dc:53:74:07:95:de:a4:83:
                    97:8d:fe:17:3e:72:7d:f7:29:4a:87:e6:c1:41:98:
                    32:b0:15:4c:ab:c1:16:07:4f:c0:0a:3e:a1:5c:de:
                    df:46:44:61:35:11:d1:b7:aa:d0:43:61:71:06:85:
                    9f:b5:c1:87:3e:c6:15:40:5e:3f:75:6d:b0:77:6e:
                    92:31:70:b1:65:6b:85:01:06:b6:df:c1:3f:79:ae:
                    30:ea:7e:bd:9b:13:ef:f2:46:f7:97:be:a7:fe:5f:
                    46:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:70:DD:05:54:A5:BE:64:00:A4:C4:A8:2D:C3:05:DF:60:55:BF:19
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12B09442DF0D11F095CE8BE1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.85.0/24
                  45.195.60.0/24
                  45.195.192.0/24
                  45.195.196.0/23
                  45.197.1.0-45.197.2.255
                  45.197.4.0/23
                  45.199.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:5e:78:82:b1:dd:6e:11:6a:f5:e8:07:41:af:2f:d6:f1:1e:
         4c:f5:89:14:84:70:62:6c:04:b9:d8:d5:44:55:24:55:42:90:
         77:f3:b4:35:a8:9a:66:f8:32:4c:6b:25:6e:15:1c:70:0e:7a:
         5e:d6:e0:50:ea:84:55:c9:c5:bc:90:8e:3f:42:d1:7c:2f:09:
         a3:27:5b:48:a7:0c:2a:d1:1b:5b:b5:29:8a:da:a6:e5:81:49:
         9d:65:9b:2f:cd:2b:40:61:6f:ae:e6:08:a1:24:88:f4:b9:e5:
         da:2e:be:76:c6:40:55:64:45:f6:f7:5e:d6:50:70:68:da:e2:
         65:13:0d:30:64:58:8b:d1:e0:8a:ab:f3:92:7a:d5:16:07:73:
         f2:54:08:d9:34:5b:dd:e2:f1:05:73:c9:2e:51:96:62:d2:b5:
         02:ad:02:88:a9:ef:78:61:db:ce:3e:f1:33:1d:24:a8:c2:f7:
         18:8b:80:8c:a1:d2:6b:97:b9:ac:bb:23:d6:78:95:84:ed:1c:
         aa:c3:f4:3e:c9:d9:4b:09:c7:74:fa:72:a6:12:43:54:11:c0:
         a3:fc:5e:81:65:8e:dd:50:7d:f9:e8:dc:f5:36:f1:63:76:f2:
         21:80:3b:2d:88:7c:8b:ef:8f:d5:16:3c:53:fc:11:23:34:6f:
         70:05:62:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:03 2025 by rpki-client