This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3966BF04D1DD11F0B460F8AFDAE4EC9C.roa
File:                     3966BF04D1DD11F0B460F8AFDAE4EC9C.roa (raw, json)
Hash identifier:          XUOrNvtH/LDH+2VKUyklS5X8QmRCtgrxdNJ+ypnrB98=
Subject key identifier:   01:90:EA:CB:88:5A:5F:E8:81:25:04:BD:50:B3:E0:CE:46:C3:CB:FF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018CBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3966BF04D1DD11F0B460F8AFDAE4EC9C.roa
Signing time:             Fri 05 Dec 2025 13:20:53 +0000
ROA not before:           Fri 05 Dec 2025 13:20:46 +0000
ROA not after:            Thu 22 Jan 2026 13:20:46 +0000
asID:                     141159
IP address blocks:        45.205.16.0/21 maxlen: 24
                          45.205.16.0/24 maxlen: 24
                          45.205.17.0/24 maxlen: 24
                          45.205.18.0/24 maxlen: 24
                          45.205.19.0/24 maxlen: 24
                          45.205.20.0/24 maxlen: 24
                          45.205.21.0/24 maxlen: 24
                          45.205.22.0/24 maxlen: 24
                          45.205.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101565 (0x18cbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  5 13:20:46 2025 GMT
            Not After : Jan 22 13:20:46 2026 GMT
        Subject: CN=6932dc35-9273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:09:24:04:d5:be:9e:be:bb:38:30:a7:9f:
                    0d:31:13:cd:88:d0:dc:bc:d1:cc:03:d8:10:4e:8f:
                    ea:08:df:e9:a0:a7:41:04:5e:6f:79:5f:a8:09:54:
                    ad:04:36:ec:4d:40:6a:44:ee:71:eb:16:e5:24:4b:
                    f7:bc:46:3a:de:29:1f:cf:32:e6:a9:b4:42:b4:e0:
                    a8:93:2d:19:f7:b0:d1:41:35:00:8b:48:f8:09:98:
                    58:81:ad:47:b8:ba:81:fe:85:d2:09:a9:5f:72:f8:
                    0f:55:4e:d2:05:47:32:eb:c2:cc:33:35:01:2f:67:
                    e0:78:74:4d:ec:6a:bb:7f:f4:c5:a1:5c:f7:1c:87:
                    41:4f:2a:fe:a0:43:05:17:78:a1:fc:90:7b:d8:7e:
                    79:79:b8:12:66:14:ee:13:15:97:02:ea:be:04:80:
                    95:e9:bb:fc:28:3b:a0:25:6c:3a:88:b5:c3:83:90:
                    18:c3:db:53:b8:d7:29:a8:1a:6d:8e:af:ef:2f:ee:
                    b5:1a:16:db:5a:a1:8f:92:a1:8a:3e:cc:dc:52:9f:
                    bd:4f:eb:aa:29:43:70:4a:6d:47:d4:80:1b:d7:01:
                    a3:00:0d:06:99:66:4f:27:62:f0:e9:cb:07:ae:ff:
                    8c:00:de:0b:7a:01:a5:fc:59:c7:c5:66:f8:38:7e:
                    51:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:90:EA:CB:88:5A:5F:E8:81:25:04:BD:50:B3:E0:CE:46:C3:CB:FF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3966BF04D1DD11F0B460F8AFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:46:74:31:4e:ba:b8:fe:d0:96:c6:c6:6f:0a:af:19:ed:a4:
         d8:ab:ff:c7:27:e2:ec:a4:2d:58:5f:4a:c9:c4:ed:ad:80:32:
         27:e7:2f:47:68:31:ce:4b:e7:14:c6:3b:45:8d:4f:83:81:66:
         57:d7:32:a9:64:27:d3:d2:a2:da:c4:ed:42:43:3a:73:d4:4a:
         41:ae:08:74:04:b9:f9:e2:bc:1a:1d:1b:a7:8a:c5:f0:de:ae:
         bf:4c:f7:d2:08:6e:84:ca:ce:c0:a2:44:13:93:64:8f:9a:83:
         83:73:63:a3:17:f5:5a:da:82:ab:77:0f:eb:a2:d0:e3:7f:87:
         40:7d:6f:d9:17:1c:1b:d8:cb:e4:c7:28:f1:ca:df:dc:f4:e1:
         b7:1c:c1:93:6c:9f:9e:95:0a:9a:eb:a4:b8:b4:c0:1b:6f:cc:
         db:c3:4b:e5:ed:96:dd:b0:14:9a:40:51:95:ae:9e:05:71:0b:
         1e:0d:ef:f5:d1:23:d5:5e:18:e5:3d:67:2f:7d:46:62:95:14:
         75:ed:3a:04:4b:25:65:84:e4:04:39:28:d3:47:99:5d:3e:03:
         b8:c6:db:7e:7c:71:3b:d7:b2:2f:ea:4a:bc:81:00:97:ef:1d:
         30:7a:1a:a3:25:30:f8:cf:b0:56:91:58:38:20:ed:c5:21:5d:
         b5:6f:7b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 00:03:42 2025 by rpki-client