This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/145D94D4DC1011F09CCE0AA1DAE4EC9C.roa
File:                     145D94D4DC1011F09CCE0AA1DAE4EC9C.roa (raw, json)
Hash identifier:          BUKbVgfnP6kdnYwWexDSgg3cW35cbW8xW0tU1jOvoCQ=
Subject key identifier:   7D:80:24:38:C9:30:F6:F3:88:BE:21:7B:85:11:16:FB:26:9E:D6:89
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018FF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/145D94D4DC1011F09CCE0AA1DAE4EC9C.roa
Signing time:             Thu 18 Dec 2025 12:50:07 +0000
ROA not before:           Thu 18 Dec 2025 12:50:02 +0000
ROA not after:            Mon 19 Jan 2026 12:50:02 +0000
asID:                     395793
IP address blocks:        45.192.13.0/24 maxlen: 24
                          45.192.14.0/24 maxlen: 24
                          45.192.15.0/24 maxlen: 24
                          45.192.16.0/24 maxlen: 24
                          45.198.226.0/24 maxlen: 24
                          45.207.138.0/23 maxlen: 24
                          45.207.140.0/23 maxlen: 24
                          45.207.142.0/23 maxlen: 24
                          45.207.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102387 (0x18ff3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 18 12:50:02 2025 GMT
            Not After : Jan 19 12:50:02 2026 GMT
        Subject: CN=6943f87f-3b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:7e:a2:f8:ce:1c:a2:86:58:6d:c9:38:25:
                    e8:02:8c:93:30:fd:ac:da:5e:df:16:62:67:aa:6e:
                    e7:93:9e:64:8c:46:d2:c0:01:0d:98:52:a8:08:cc:
                    fb:40:55:f6:95:3c:2b:82:e8:d9:ab:c8:50:7d:12:
                    13:d6:da:59:61:2f:0c:68:8b:dc:35:e6:5d:1a:07:
                    c9:35:75:e9:2a:44:81:74:e7:3f:20:76:bc:08:37:
                    6d:8a:eb:f2:ec:a9:3b:36:a3:3c:b4:36:a2:c9:16:
                    33:f3:67:fe:97:d5:b4:25:b7:69:03:50:29:f5:6b:
                    94:d2:cb:c3:bf:68:98:f7:e1:bc:9a:60:9e:fd:04:
                    9a:a2:67:f0:74:7b:b4:e6:12:26:35:02:b8:2f:66:
                    eb:c5:cc:da:2a:35:98:f7:00:c0:13:6b:09:52:d2:
                    70:af:ad:b2:7e:e3:75:b9:2b:75:af:6b:d7:6e:da:
                    25:86:71:03:a6:59:ba:89:fc:37:b9:39:17:a8:f2:
                    f6:bb:c6:75:0c:99:9e:c3:eb:ed:23:9f:b4:df:af:
                    b9:57:c4:e6:62:21:68:ca:84:df:ae:c8:bc:95:9a:
                    ab:dd:a9:d0:b7:da:2d:7c:0b:bb:9b:bf:15:a6:ac:
                    3d:29:f3:10:09:cd:2c:b8:1b:76:3f:15:c4:c0:c6:
                    56:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:80:24:38:C9:30:F6:F3:88:BE:21:7B:85:11:16:FB:26:9E:D6:89
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/145D94D4DC1011F09CCE0AA1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.13.0-45.192.16.255
                  45.198.226.0/24
                  45.207.138.0-45.207.147.255

    Signature Algorithm: sha256WithRSAEncryption
         1a:d6:6d:52:94:f3:75:b7:55:42:0e:0d:bf:42:2e:11:70:f4:
         2f:fb:0d:da:e0:f2:ea:09:4e:46:fa:0f:47:a8:0d:8e:73:cf:
         a1:af:09:89:44:16:15:31:34:eb:30:84:24:3b:48:77:bc:25:
         23:99:c8:9a:7d:c3:48:4f:8b:ef:e3:1a:37:06:6f:3b:9c:8c:
         a0:fe:d3:20:fc:15:8c:f2:38:0c:9d:ac:4e:aa:e8:80:4d:20:
         de:57:8c:8c:a7:42:a1:45:b7:d0:28:b0:15:6e:61:4e:5b:58:
         c9:ba:dc:db:e6:cc:ee:22:8a:ae:f7:12:c9:c2:f6:6f:9d:75:
         2c:bf:4b:c6:d2:6d:e8:2f:aa:ac:f1:e9:01:1f:33:23:93:ce:
         b0:09:2a:f2:f2:b4:b2:c8:46:30:73:ed:ba:8e:7d:9f:62:a6:
         f7:27:f7:f4:32:6a:91:75:1c:36:01:80:7c:64:31:47:08:49:
         ac:b2:23:fb:6f:e7:99:73:72:0b:9c:7d:b7:41:0f:f8:e5:9b:
         e0:4b:2e:8b:5b:5f:10:28:05:8a:c2:38:73:c0:09:98:ee:6f:
         66:51:c4:bf:34:76:66:d1:fc:2a:7c:f8:d4:78:37:f9:9d:39:
         5d:d3:b1:c8:ab:62:c5:1d:51:64:34:5b:30:e4:3d:c1:9d:62:
         a5:89:5c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:34:12 2025 by rpki-client