This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37B9D0A6D67411F0BA8B73F6DAE4EC9C.roa
File:                     37B9D0A6D67411F0BA8B73F6DAE4EC9C.roa (raw, json)
Hash identifier:          lDZKhdC/7dB5AeWQsXYBmWgDYa4wABkV4A2o46USvZM=
Subject key identifier:   28:E4:29:15:78:0B:6A:8D:85:0C:3D:7B:36:13:41:74:61:15:E0:FC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018DC2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37B9D0A6D67411F0BA8B73F6DAE4EC9C.roa
Signing time:             Thu 11 Dec 2025 09:31:49 +0000
ROA not before:           Thu 11 Dec 2025 09:31:44 +0000
ROA not after:            Mon 11 Dec 2028 09:31:44 +0000
asID:                     17561
IP address blocks:        45.202.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101826 (0x18dc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 11 09:31:44 2025 GMT
            Not After : Dec 11 09:31:44 2028 GMT
        Subject: CN=693a8f85-8e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f6:8c:c0:2f:45:54:15:80:5c:b7:23:c4:70:
                    2a:5a:db:4e:d5:7d:e6:c3:81:fa:78:0c:29:5b:cd:
                    a5:de:a3:01:01:d1:55:f8:59:07:1c:c7:4c:80:7d:
                    ce:50:83:50:83:59:1e:2d:e6:3c:d7:81:7e:80:26:
                    12:0b:77:60:c4:72:ef:50:0e:06:95:c0:09:9b:cc:
                    01:ac:5b:87:22:86:5b:d3:c1:14:6c:f3:fd:4b:66:
                    84:37:bf:c5:19:7c:45:93:8a:7f:12:2c:63:1e:c5:
                    e7:82:a1:fc:cc:37:01:69:b5:5d:d1:fa:5e:02:cb:
                    f0:2f:95:5b:35:b0:d3:b0:23:ae:36:73:83:ba:a4:
                    0b:4a:1e:69:ef:48:96:21:e8:ef:29:2b:81:c7:5a:
                    90:68:46:d2:29:26:a8:2f:93:df:7f:e8:7b:d8:4b:
                    72:9e:67:7b:5e:80:e5:65:13:3e:ac:db:79:00:50:
                    88:d4:2b:02:fb:91:bf:c7:b4:90:2b:b6:5c:6e:db:
                    d1:49:0a:34:c2:8c:c0:33:90:c8:03:af:56:d4:0d:
                    59:f1:62:8e:f6:b4:54:b4:7c:3d:a8:2a:86:1b:16:
                    d7:51:7a:a9:23:08:74:6d:b0:c3:9b:39:75:f2:08:
                    57:81:df:b9:ae:49:59:e7:ca:5d:f8:c4:d2:49:96:
                    92:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E4:29:15:78:0B:6A:8D:85:0C:3D:7B:36:13:41:74:61:15:E0:FC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37B9D0A6D67411F0BA8B73F6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:88:da:1a:be:84:a0:58:aa:40:80:79:67:65:44:3e:6c:9e:
         ff:b4:77:68:58:41:4f:08:e3:93:61:5c:9f:ae:3e:39:8c:1c:
         55:48:20:48:bb:55:24:e6:ad:22:33:6a:35:d5:23:69:c3:f4:
         4c:fc:15:fd:99:a6:59:37:87:8a:2f:e9:50:58:8e:0c:4a:42:
         38:6d:da:16:54:7e:83:d6:02:c4:0d:2a:26:4a:77:83:f0:69:
         ed:4d:35:9c:c2:34:84:e9:2d:13:ca:d9:6e:77:8e:a3:77:a2:
         fd:41:6f:c9:0f:44:42:e9:07:71:d7:ca:a1:fe:aa:05:a1:a2:
         fc:48:8f:d9:de:f8:21:c6:0b:6d:ce:f6:ea:54:a7:4c:5f:4e:
         e3:ae:28:23:19:63:a6:68:e9:b5:a1:97:35:3f:d0:56:14:c1:
         2c:ba:9f:04:03:9b:77:82:60:17:dc:10:c1:67:1f:16:7c:80:
         6f:2f:60:25:5c:80:65:cc:56:97:b8:00:e4:af:7b:a1:e4:29:
         af:51:9a:7c:9b:41:69:66:6f:e1:bb:b5:70:e0:e5:f5:01:e7:
         6d:f1:2a:3e:cd:2f:c9:40:7c:f5:5b:0e:ec:10:e8:a7:98:93:
         ad:a0:a5:fb:d2:f0:d2:06:de:0b:9a:d2:cb:e0:38:11:6c:76:
         2a:e9:15:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:20 2025 by rpki-client