This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DA32BDAE0FA11F08EA93AF2DAE4EC9C.roa
File:                     3DA32BDAE0FA11F08EA93AF2DAE4EC9C.roa (raw, json)
Hash identifier:          VuRV2TvIwzs7ctmr6crUPF582SYZPvmdsK92cieENM0=
Subject key identifier:   6B:EB:91:84:0D:9A:48:CB:8A:E4:8D:58:4C:86:C6:2F:6F:27:11:80
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0191E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DA32BDAE0FA11F08EA93AF2DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 18:56:23 +0000
ROA not before:           Wed 24 Dec 2025 18:56:19 +0000
ROA not after:            Mon 09 Feb 2026 18:56:19 +0000
asID:                     401783
IP address blocks:        45.192.113.0/24 maxlen: 24
                          45.192.114.0/24 maxlen: 24
                          45.192.116.0/23 maxlen: 24
                          45.192.118.0/23 maxlen: 24
                          45.192.235.0/24 maxlen: 24
                          45.192.236.0/24 maxlen: 24
                          45.195.255.0/24 maxlen: 24
                          45.196.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102886 (0x191e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 18:56:19 2025 GMT
            Not After : Feb  9 18:56:19 2026 GMT
        Subject: CN=694c3757-fe23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:92:3b:26:3e:0c:14:2d:41:ec:6e:a0:b8:
                    1a:30:6d:97:27:62:44:90:bb:54:09:aa:dc:6f:13:
                    99:eb:3c:7d:f4:ad:f7:64:7a:58:c8:6a:93:07:08:
                    4a:50:d7:06:a2:20:ef:2c:23:0a:05:22:d1:b4:64:
                    4d:0d:73:1b:fc:65:49:80:aa:30:c0:15:1a:fb:59:
                    1e:18:a2:78:9c:a5:1d:40:55:f8:2d:e1:c7:c2:02:
                    3f:43:02:4c:19:88:4d:52:d3:06:01:6c:18:4d:1d:
                    b1:26:34:53:f3:a9:56:dd:a2:ec:a4:75:15:70:f6:
                    7b:41:74:0f:b1:31:20:6c:7f:8a:3d:b8:73:36:50:
                    17:1c:30:c5:95:c6:e4:37:be:0e:d4:37:52:73:cc:
                    37:9c:46:3a:f3:43:1b:d9:68:b6:39:aa:6b:31:36:
                    e4:d2:88:2a:45:7f:ed:84:06:b8:bb:94:90:f0:9b:
                    22:66:49:eb:80:5d:e0:20:d7:77:36:20:71:de:8a:
                    89:9d:e7:79:86:e4:14:66:d7:a8:b1:24:36:30:f4:
                    c6:d3:ed:e8:f4:e2:bf:4a:08:3d:32:68:ca:12:4d:
                    e8:b4:10:c1:70:ab:65:27:68:aa:37:b3:8a:8f:7f:
                    a0:39:ec:81:31:9a:19:6f:c5:83:a0:b8:66:4c:63:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EB:91:84:0D:9A:48:CB:8A:E4:8D:58:4C:86:C6:2F:6F:27:11:80
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DA32BDAE0FA11F08EA93AF2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.113.0-45.192.114.255
                  45.192.116.0/22
                  45.192.235.0-45.192.236.255
                  45.195.255.0/24
                  45.196.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:17:25:5b:1d:25:97:c8:1e:bb:88:32:61:2b:25:f7:c9:cc:
         85:f9:05:a1:0e:b1:83:84:b2:7f:81:64:ca:73:e0:57:e4:ea:
         2f:2e:5f:9e:db:c9:62:9c:1e:c2:9b:2a:e4:e3:8e:8f:0f:e2:
         d6:87:ab:78:02:5b:9a:b2:50:fe:86:bf:97:48:bc:95:e5:76:
         e8:94:71:4d:cb:7f:73:0f:60:41:91:b2:5b:68:c8:6f:52:04:
         77:55:77:4b:02:2d:fd:36:cc:b9:29:9b:19:1e:1a:af:11:ea:
         ed:45:6d:31:e4:d3:d2:62:64:22:14:d3:0b:1e:9c:4d:17:14:
         51:83:ef:78:d3:90:2b:e8:a5:5a:a9:4b:2a:0f:07:3a:99:6b:
         86:08:cc:c2:75:88:b4:32:37:d2:51:7a:cb:7b:d9:ee:30:60:
         53:61:d3:1f:06:83:f1:2f:a2:d9:17:66:bd:ec:a7:22:ff:3a:
         f0:ba:1c:5a:23:c1:24:c7:76:95:ae:2a:c7:93:c3:c3:ab:09:
         00:8b:dc:36:a1:87:42:1f:bc:10:04:9c:5c:bc:40:f7:7c:eb:
         29:03:cd:77:31:6d:b0:94:b8:da:7e:c1:07:94:45:48:df:b8:
         f5:f8:73:3e:a7:d8:3d:bb:4a:aa:05:73:76:da:ce:f2:3e:de:
         e7:d5:7f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:01 2025 by rpki-client