This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39268D0EE05011F084B9B5BFDAE4EC9C.roa
File:                     39268D0EE05011F084B9B5BFDAE4EC9C.roa (raw, json)
Hash identifier:          ieJOunPLIdZ/6topVr34YMkBCvrGAtal0lmM0XmzC68=
Subject key identifier:   4A:60:8F:DC:B6:7F:37:B1:F4:8D:22:20:79:D9:5D:A9:86:F9:78:67
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019133
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39268D0EE05011F084B9B5BFDAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 22:39:25 +0000
ROA not before:           Tue 23 Dec 2025 22:39:16 +0000
ROA not after:            Thu 29 Jan 2026 22:39:16 +0000
asID:                     214143
IP address blocks:        45.195.3.0/24 maxlen: 24
                          45.198.97.0/24 maxlen: 24
                          45.198.109.0/24 maxlen: 24
                          45.198.112.0/24 maxlen: 24
                          45.198.138.0/24 maxlen: 24
                          45.198.163.0/24 maxlen: 24
                          45.198.168.0/24 maxlen: 24
                          45.198.176.0/24 maxlen: 24
                          45.198.181.0/24 maxlen: 24
                          45.206.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102707 (0x19133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 22:39:16 2025 GMT
            Not After : Jan 29 22:39:16 2026 GMT
        Subject: CN=694b1a1d-b933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:12:ef:a3:b2:85:22:46:87:61:0e:f9:c3:0a:
                    8e:ab:0d:8e:78:82:75:4f:32:1e:04:57:6b:51:38:
                    c8:d4:f7:7c:18:70:b9:77:b1:fb:c3:ad:4f:2c:e5:
                    49:67:54:a0:64:c7:39:13:5c:a4:c2:fd:9d:f4:f3:
                    7c:7c:40:b3:fb:30:b0:24:05:d9:b9:cf:fd:59:35:
                    41:60:97:27:2d:5f:12:eb:dd:08:d0:3d:c0:e4:ce:
                    66:39:bb:9c:88:da:7a:b2:ad:f3:74:c2:e4:bc:e0:
                    11:a9:67:03:41:46:98:a1:f4:5d:ed:b3:0b:03:62:
                    7c:c6:ec:ef:94:2c:af:6d:ac:6c:e0:d8:97:f6:ea:
                    22:3e:cd:de:f2:cf:a0:c7:a1:a2:4c:8e:d7:ac:df:
                    4e:fc:15:77:ef:e7:dc:e6:fa:26:03:62:11:b5:e2:
                    7c:b6:62:d9:b5:7e:f2:d1:32:16:13:0c:93:fa:2d:
                    37:b7:ca:36:45:19:39:d3:55:4d:a7:ec:e5:08:f8:
                    fa:2a:83:e7:f8:f3:d0:25:79:fa:4e:e3:0e:07:09:
                    cc:1c:89:76:93:e7:95:2c:3b:1b:e8:43:20:80:90:
                    5e:28:d2:d6:63:4a:cb:ee:2f:1f:31:bf:3d:05:db:
                    a3:3f:b0:a7:14:44:9f:31:15:59:f1:8c:96:0d:99:
                    40:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:60:8F:DC:B6:7F:37:B1:F4:8D:22:20:79:D9:5D:A9:86:F9:78:67
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39268D0EE05011F084B9B5BFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.3.0/24
                  45.198.97.0/24
                  45.198.109.0/24
                  45.198.112.0/24
                  45.198.138.0/24
                  45.198.163.0/24
                  45.198.168.0/24
                  45.198.176.0/24
                  45.198.181.0/24
                  45.206.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:9b:68:ba:ad:20:79:71:49:fe:47:81:e1:c3:cf:a9:ba:c7:
         42:d1:8f:96:15:64:6c:fe:87:93:e0:b7:50:cc:9c:2a:17:ba:
         54:35:bc:ff:4e:ad:5b:be:fb:2b:91:1f:f5:66:1d:77:6a:7d:
         76:e7:cb:76:c5:e9:94:89:1e:26:a8:aa:04:38:cd:9b:42:31:
         16:4e:1b:37:06:bc:15:63:b2:e0:40:7b:51:86:8b:c9:55:0a:
         a7:f5:71:ea:a8:a6:be:0d:eb:de:be:45:93:06:6b:01:e2:f3:
         c6:82:3c:3e:2d:30:18:4a:1a:33:03:c6:ee:df:c3:d6:e8:7d:
         d5:a4:91:73:17:68:71:98:49:36:94:df:59:40:77:73:2d:85:
         5f:2f:f2:60:cf:17:14:80:b6:cd:3c:6d:79:47:ba:0b:b7:89:
         47:35:cf:01:7e:8c:88:41:c9:a2:c8:75:7a:d0:de:0c:f5:fc:
         82:e2:b8:bb:3b:d7:66:e7:04:1b:dc:97:51:d4:1d:a4:ad:38:
         27:44:f4:2c:f2:d3:99:e7:9b:b9:28:45:33:e1:9e:7d:c1:ab:
         4e:ce:ca:04:7c:b6:50:dc:ef:9e:76:69:a9:10:12:f1:22:60:
         07:cf:89:99:77:32:eb:0c:3d:6d:8e:e9:79:98:e8:b8:50:61:
         04:03:1d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:36 2025 by rpki-client