This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F0B604EE03F11F09F4EFFD5DAE4EC9C.roa
File:                     2F0B604EE03F11F09F4EFFD5DAE4EC9C.roa (raw, json)
Hash identifier:          ItNE+Vw8B56GkgIILVigEroJDlLRnHh4lqyurwBUIWI=
Subject key identifier:   53:1A:91:23:86:95:6F:21:B1:83:A8:EE:AA:B1:42:D3:B8:C7:E4:34
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01911D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F0B604EE03F11F09F4EFFD5DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 20:37:23 +0000
ROA not before:           Tue 23 Dec 2025 20:37:18 +0000
ROA not after:            Wed 28 Jan 2026 20:37:18 +0000
asID:                     44559
IP address blocks:        45.199.231.0/24 maxlen: 24
                          45.199.232.0/24 maxlen: 24
                          45.199.233.0/24 maxlen: 24
                          45.199.234.0/24 maxlen: 24
                          45.199.235.0/24 maxlen: 24
                          45.199.236.0/24 maxlen: 24
                          45.199.237.0/24 maxlen: 24
                          45.199.238.0/24 maxlen: 24
                          45.199.239.0/24 maxlen: 24
                          45.199.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102685 (0x1911d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 20:37:18 2025 GMT
            Not After : Jan 28 20:37:18 2026 GMT
        Subject: CN=694afd83-a6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:02:a4:4b:29:f4:91:3f:77:50:02:e0:45:bb:
                    f5:22:54:ab:fe:ba:35:cc:1e:aa:71:41:68:d3:49:
                    1e:61:3b:78:56:47:91:dc:ee:d9:70:b9:6a:17:cf:
                    ff:ae:eb:bf:d4:d4:f6:24:94:92:9a:ca:22:1d:73:
                    e0:ea:de:82:41:88:13:78:39:43:ae:65:39:ff:16:
                    4d:8c:bc:54:c2:24:bb:cf:b2:b2:60:cc:a7:76:be:
                    f2:57:61:a9:e0:b9:9a:ef:23:9e:b3:9b:37:a6:9f:
                    26:ed:e9:63:c8:7d:a0:03:53:a0:43:14:cf:13:a0:
                    02:6a:17:f7:a2:db:33:97:33:08:7b:f7:2b:8f:ff:
                    08:b3:00:58:85:31:56:8e:23:b4:18:a8:96:11:06:
                    66:63:9f:ea:82:d1:71:eb:09:18:ed:f0:08:9c:c7:
                    3f:3d:9b:94:92:50:4e:f6:0a:06:fa:f1:61:4d:82:
                    78:31:58:65:0a:95:39:ea:c2:1f:70:2d:fc:71:02:
                    b1:c3:f0:09:7a:77:ee:92:8d:a1:0d:ba:1f:4f:ce:
                    09:21:26:e9:56:ca:db:56:87:de:7f:3b:e3:8e:fd:
                    7f:a6:db:fb:3e:cf:2a:4d:54:d1:1f:9d:fb:43:e9:
                    df:c0:76:de:92:63:01:01:7d:d7:00:f7:b3:9c:fb:
                    46:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1A:91:23:86:95:6F:21:B1:83:A8:EE:AA:B1:42:D3:B8:C7:E4:34
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F0B604EE03F11F09F4EFFD5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.231.0-45.199.240.255

    Signature Algorithm: sha256WithRSAEncryption
         7b:4d:72:a2:56:c7:3a:50:73:43:a7:32:62:9f:7e:38:b0:30:
         48:ab:22:4e:e5:37:60:6a:82:52:99:76:c6:dd:88:b7:0e:d5:
         6c:2e:29:18:da:0d:76:cd:1d:be:37:8f:2b:0a:cb:66:13:a5:
         10:2f:60:03:8b:5a:7e:a1:f0:a1:69:d9:5f:f2:d9:ab:83:09:
         21:f4:aa:5a:20:19:d4:ec:c8:ba:85:21:c8:29:1b:32:6e:3e:
         0c:18:f3:b7:8b:ee:95:a9:9c:cf:d6:0c:90:f3:03:3a:46:b7:
         70:20:c2:71:d2:71:ae:69:3e:09:52:e7:31:80:c7:c8:55:90:
         dc:84:d7:91:d2:04:86:ce:44:6a:03:1a:b7:29:12:a1:6a:ab:
         b3:3a:22:53:67:d8:43:d6:f8:e3:d9:18:21:4a:c3:a1:41:ae:
         81:89:39:d0:4d:f9:ac:21:a4:79:89:df:cc:1d:7a:4a:b7:f8:
         d3:06:ae:a6:a5:de:e0:c3:b9:42:ef:43:af:d9:c7:98:8b:d3:
         16:04:ec:95:ef:ff:ef:5d:93:68:12:75:7f:d1:ae:77:67:ed:
         09:9a:45:68:6a:ac:8d:8c:96:92:10:3b:08:6f:23:2e:93:92:
         99:02:46:d5:dc:67:1d:fc:d5:d4:13:d9:1b:f6:0d:bd:fc:a9:
         59:c2:47:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:03 2025 by rpki-client