This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C04C86AE0ED11F0974D51A3DAE4EC9C.roa
File:                     1C04C86AE0ED11F0974D51A3DAE4EC9C.roa (raw, json)
Hash identifier:          6DNywzhM1slCKe92dz+cy68HuHqQzn49txA2scS368M=
Subject key identifier:   1F:09:EF:2A:3F:77:B7:A5:60:0C:B4:A4:50:C6:1B:51:65:F2:CA:96
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0191D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C04C86AE0ED11F0974D51A3DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 17:22:23 +0000
ROA not before:           Wed 24 Dec 2025 17:22:19 +0000
ROA not after:            Wed 04 Feb 2026 17:22:19 +0000
asID:                     20326
IP address blocks:        45.202.89.0/24 maxlen: 24
                          45.202.115.0/24 maxlen: 24
                          45.202.118.0/24 maxlen: 24
                          45.202.126.0/24 maxlen: 24
                          45.207.25.0/24 maxlen: 24
                          45.207.28.0/24 maxlen: 24
                          45.207.30.0/24 maxlen: 24
                          45.207.44.0/24 maxlen: 24
                          45.207.47.0/24 maxlen: 24
                          45.207.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102868 (0x191d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 17:22:19 2025 GMT
            Not After : Feb  4 17:22:19 2026 GMT
        Subject: CN=694c214f-a32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b5:52:a5:cb:a0:a1:de:d5:84:61:8b:22:44:
                    74:92:41:da:98:0b:84:44:52:86:80:a9:99:16:34:
                    ba:a6:3f:7b:40:42:15:26:38:4b:21:49:34:bd:5b:
                    46:42:98:24:57:55:99:b7:33:65:af:44:0b:21:8e:
                    05:68:44:f3:bf:12:e3:8e:3b:c6:0e:98:4e:1b:91:
                    83:e4:9d:6d:9a:71:4c:84:2a:f7:69:1b:86:ca:f3:
                    f7:a6:65:8c:7a:06:67:ef:37:bd:93:87:94:cf:40:
                    48:16:a1:36:bb:b0:5c:73:cd:8c:16:5b:87:32:94:
                    cf:9c:88:5f:f9:9c:f9:69:38:c0:2d:91:7b:74:78:
                    06:5b:39:59:38:ef:47:72:61:c6:df:22:fd:2d:37:
                    1d:aa:17:f1:56:a6:3a:98:59:80:61:1a:6a:c2:57:
                    36:b1:ab:86:b3:2f:cc:b6:f6:a2:a2:00:1c:30:28:
                    83:10:2f:f9:71:7d:22:c6:bd:59:ac:36:2a:1f:c1:
                    7b:ad:21:64:8f:82:a5:e9:dd:9f:09:ea:1a:41:21:
                    b6:68:d3:91:ee:7d:45:95:2c:b7:89:31:23:cd:62:
                    4c:6f:53:2c:c6:6a:3d:d4:ca:cf:0d:3b:83:f9:f7:
                    42:d1:5d:e1:9d:f0:5a:4f:4e:4e:24:28:6a:be:17:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:09:EF:2A:3F:77:B7:A5:60:0C:B4:A4:50:C6:1B:51:65:F2:CA:96
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C04C86AE0ED11F0974D51A3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.89.0/24
                  45.202.115.0/24
                  45.202.118.0/24
                  45.202.126.0/24
                  45.207.25.0/24
                  45.207.28.0/24
                  45.207.30.0/24
                  45.207.44.0/24
                  45.207.47.0/24
                  45.207.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d2:f5:28:75:75:26:13:f9:20:a3:41:59:3f:a5:ff:cc:0c:
         ab:e8:05:be:88:7d:41:e8:c4:31:b1:5d:a7:7e:cf:1e:7a:d3:
         b4:5e:9f:2b:ce:4b:cc:15:0a:99:a9:e7:7d:57:25:fa:f3:ba:
         2b:b4:d0:9b:b6:43:79:63:4e:d9:ef:f4:22:97:db:bd:bd:f5:
         31:79:d2:14:18:3a:a6:e4:10:78:56:43:0a:0b:5e:99:3d:8f:
         23:80:d8:72:5b:2c:0a:29:30:68:2a:47:4c:d9:e6:98:0f:3a:
         22:b3:5b:22:0d:04:b9:86:ff:d5:28:bd:cf:68:ed:82:fb:9a:
         c6:de:f7:5e:9f:b3:87:4c:78:5d:a0:0b:b1:31:27:72:eb:98:
         a6:ec:9d:be:1c:37:bc:60:24:32:03:46:c7:77:41:23:4c:20:
         6b:8a:ca:dd:74:6f:8e:0f:a1:ea:96:fe:69:ce:cc:cc:57:df:
         6f:0f:0d:28:1f:1a:5a:7f:af:2e:4b:ca:22:5a:72:9c:de:6b:
         07:4c:d8:ec:d6:2f:62:ba:bc:88:d8:28:5e:76:b8:d3:93:9b:
         2d:d2:cc:c5:21:d4:44:6a:0b:d5:00:53:c6:9d:6c:82:9e:00:
         04:83:cb:67:b0:7f:31:1f:a2:90:78:cd:1c:be:52:c0:d9:64:
         f1:0e:b7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:19:52 2025 by rpki-client