This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/223D5128E04511F0A0DD2E7CDAE4EC9C.roa
File:                     223D5128E04511F0A0DD2E7CDAE4EC9C.roa (raw, json)
Hash identifier:          sUfpXsJvH78Rz6dvVMRn53a+mkxAt2TJXnr3oLEE7bs=
Subject key identifier:   71:8C:05:B2:63:8C:AB:8F:7B:7B:FA:58:10:EC:FF:B7:2F:51:50:31
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01912B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/223D5128E04511F0A0DD2E7CDAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 21:19:58 +0000
ROA not before:           Tue 23 Dec 2025 21:19:54 +0000
ROA not after:            Wed 28 Jan 2026 21:19:54 +0000
asID:                     273870
IP address blocks:        45.192.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102699 (0x1912b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 21:19:54 2025 GMT
            Not After : Jan 28 21:19:54 2026 GMT
        Subject: CN=694b077e-d4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:6a:de:ab:03:24:ab:23:77:8b:a3:3a:35:
                    c2:6f:dd:4e:8e:76:b0:99:ce:16:64:82:85:58:a0:
                    9d:dc:e9:41:f0:57:30:3f:90:da:75:b6:2a:42:82:
                    0a:ae:64:9b:a2:f3:3a:6a:d4:30:a6:64:4d:6b:a8:
                    32:58:09:db:9a:db:e1:02:05:74:cc:af:69:53:b7:
                    82:2a:80:d7:1b:fc:13:f8:bd:1e:4d:58:15:21:94:
                    cd:2d:7c:b8:c2:a2:b3:7c:90:16:49:c9:ea:c0:22:
                    4c:05:31:61:c8:f1:02:c6:20:8f:4d:b0:5c:6e:c2:
                    63:7e:b0:b5:9f:a9:30:85:ae:a5:4e:2f:80:e1:ae:
                    3e:3a:60:20:d5:f2:39:76:e2:2b:ce:0e:99:65:c4:
                    95:9b:84:5e:1f:1e:07:15:1c:ad:d9:3a:2e:b7:ba:
                    56:ce:de:ab:8f:f0:ef:9b:8a:13:36:6f:0b:5a:7b:
                    8f:1d:ab:38:09:a8:af:e2:da:75:03:fa:38:a0:ec:
                    7e:9c:f3:30:43:c7:2e:fc:94:ce:2b:fc:f6:28:aa:
                    ce:a5:03:1f:94:ee:51:84:0b:c7:04:b8:ec:88:00:
                    ba:77:a5:2e:cd:04:4e:fd:bd:1f:c7:71:9a:de:4f:
                    59:a8:54:18:09:03:21:e9:00:34:3e:28:a6:99:db:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8C:05:B2:63:8C:AB:8F:7B:7B:FA:58:10:EC:FF:B7:2F:51:50:31
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/223D5128E04511F0A0DD2E7CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ab:c0:cf:64:38:66:2e:6d:95:b3:a6:5b:d7:8a:67:6b:60:
         7f:aa:0a:09:4d:01:49:30:10:c3:fd:b5:2a:e7:f8:93:98:83:
         19:68:4c:8d:30:a4:ab:84:55:87:84:0b:57:43:3b:13:5f:87:
         4a:96:d5:1b:37:71:1d:36:1b:f3:ed:08:b8:a0:7e:42:2d:f3:
         43:d4:b0:a0:14:2f:53:92:33:e2:6e:38:7f:13:f8:a9:a2:ff:
         36:56:04:45:0c:ed:f2:76:b4:b2:d4:cf:ae:82:d5:30:98:26:
         5d:0a:66:eb:a2:f1:10:43:67:7f:62:45:68:95:b8:47:50:fb:
         a1:e0:f3:d8:5d:f8:27:93:7d:a4:84:2e:69:47:50:4e:23:99:
         2c:5e:4e:d5:ba:ee:93:cf:ff:a5:84:d4:65:fd:28:4c:07:77:
         67:56:dc:69:83:ad:c6:70:87:48:e4:b4:33:bb:0c:69:9c:f4:
         fb:23:e8:a4:eb:17:81:ac:d9:70:dc:bb:71:25:19:a7:42:9d:
         2c:f2:50:75:37:b3:c2:1c:ce:59:09:11:86:8f:78:8b:14:50:
         6e:3a:3b:b7:8e:39:1e:65:8e:9d:b0:42:66:87:85:ad:3c:51:
         70:58:14:02:fc:fc:68:1f:32:d2:c0:33:5b:25:b2:b3:9d:4b:
         f7:a1:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:35 2025 by rpki-client