This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/196E7D80D03F11F08BE5318ADAE4EC9C.roa
File:                     196E7D80D03F11F08BE5318ADAE4EC9C.roa (raw, json)
Hash identifier:          cOtmsKi8k9xqHH3aTd/5eF4nN+D6peBDM6LUaFptCp8=
Subject key identifier:   EF:52:FA:BE:AB:B7:8E:8E:22:22:2A:EF:7F:15:E0:5D:6B:DF:62:DE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018B97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/196E7D80D03F11F08BE5318ADAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 11:56:28 +0000
ROA not before:           Wed 03 Dec 2025 11:56:20 +0000
ROA not after:            Fri 25 Aug 2028 11:56:20 +0000
asID:                     17561
IP address blocks:        45.196.158.0/24 maxlen: 24
                          45.203.128.0/24 maxlen: 24
                          45.203.136.0/24 maxlen: 24
                          45.203.140.0/24 maxlen: 24
                          45.203.141.0/24 maxlen: 24
                          45.203.142.0/24 maxlen: 24
                          45.203.143.0/24 maxlen: 24
                          45.203.144.0/24 maxlen: 24
                          45.203.145.0/24 maxlen: 24
                          45.203.146.0/24 maxlen: 24
                          45.203.147.0/24 maxlen: 24
                          45.203.148.0/24 maxlen: 24
                          45.203.149.0/24 maxlen: 24
                          45.203.150.0/24 maxlen: 24
                          45.203.151.0/24 maxlen: 24
                          45.203.152.0/24 maxlen: 24
                          45.203.153.0/24 maxlen: 24
                          45.203.154.0/24 maxlen: 24
                          45.203.155.0/24 maxlen: 24
                          45.203.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101271 (0x18b97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  3 11:56:20 2025 GMT
            Not After : Aug 25 11:56:20 2028 GMT
        Subject: CN=6930256c-6f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:db:f6:e1:a9:0c:8c:36:62:55:58:b9:31:f0:
                    b1:e8:5e:3d:f0:a0:ea:0d:89:b9:3f:bd:fd:a2:7e:
                    d6:4a:7d:3e:66:ef:1a:03:6e:ab:19:08:94:99:92:
                    8b:ca:64:f9:52:23:f0:7c:65:85:35:00:b0:2a:ac:
                    e2:41:ee:8c:b9:a0:7d:37:02:db:23:8a:eb:b0:79:
                    fe:70:c6:55:47:4c:0d:15:4e:6a:dd:e3:91:55:5f:
                    db:66:c5:a6:74:c8:35:ba:31:8d:98:7e:6d:46:51:
                    da:80:26:35:da:05:f5:a7:64:73:09:8e:fa:e7:58:
                    1f:2f:20:9b:47:f2:44:74:a0:30:e6:88:aa:41:2c:
                    c2:b6:37:7f:21:27:c5:aa:64:88:7d:fb:89:0f:fa:
                    85:58:e0:44:50:7e:3c:ac:27:df:c0:c0:68:e3:97:
                    b4:2d:ea:cc:c0:0b:17:11:66:81:51:88:9c:0d:7d:
                    0a:d1:0a:02:89:9b:e0:dc:2d:f2:a4:6b:49:47:f3:
                    b3:58:6a:76:74:de:c4:f0:c8:d0:03:07:92:45:7d:
                    1c:50:6b:01:5c:1e:f7:66:61:2d:b5:90:48:df:d7:
                    eb:17:79:c7:dd:54:a7:10:52:66:9f:3a:82:c4:f1:
                    fa:27:b7:98:90:95:4b:d4:43:89:e0:c7:d1:48:61:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:52:FA:BE:AB:B7:8E:8E:22:22:2A:EF:7F:15:E0:5D:6B:DF:62:DE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/196E7D80D03F11F08BE5318ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.158.0/24
                  45.203.128.0/24
                  45.203.136.0/24
                  45.203.140.0-45.203.155.255
                  45.203.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:7d:e2:9d:f3:a2:de:f5:11:9b:af:25:d3:ff:54:d3:3b:16:
         ba:a9:33:ec:c2:ab:e2:d6:33:99:ef:1d:d7:e3:93:42:50:d6:
         25:88:f1:7e:f6:d3:bb:3c:52:1f:52:79:a3:d4:16:ce:72:2d:
         12:ab:51:1e:9f:c1:07:31:c7:fa:2b:8b:2c:42:c0:5d:b2:ab:
         40:98:5f:34:22:02:10:95:b8:79:65:09:9f:82:60:00:50:1b:
         3a:97:55:9e:73:12:a6:3c:17:d1:df:0b:6a:c1:f4:2d:b9:ae:
         a7:da:fa:72:b5:c7:31:bb:ff:18:6c:02:dc:e5:b6:73:14:ca:
         54:66:a5:1e:ad:43:fe:2b:c0:8c:36:b0:14:3f:70:ed:ed:2c:
         cb:b9:5d:ed:b1:5c:0b:71:41:a2:1b:7d:c3:46:26:00:f9:58:
         7e:43:12:4d:b4:1b:d9:ec:d6:42:7d:c8:89:43:96:38:69:3e:
         8a:f7:fe:ea:56:60:65:06:b5:99:9b:68:b5:e2:9f:85:19:c4:
         0c:f6:d6:ae:4f:81:50:dd:e0:fe:4e:43:79:08:21:48:3d:cd:
         8e:d6:44:05:af:18:4b:68:7b:62:95:a4:0e:04:87:3f:4a:e6:
         84:01:b8:9b:2f:89:0a:cb:de:27:17:6c:0b:8c:19:e4:60:92:
         e6:02:23:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:18 2025 by rpki-client