This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E7D4F7AD9AE11F0AE6CD3ADDAE4EC9C.roa
File:                     3E7D4F7AD9AE11F0AE6CD3ADDAE4EC9C.roa (raw, json)
Hash identifier:          hmkcQcJxRSKLsZpMZWpfpLqjOAAV/gWnIWeaYNWdJkY=
Subject key identifier:   81:45:F9:9A:78:3A:1F:7F:76:7B:FD:A1:97:C8:AB:FD:AD:E1:10:91
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018E46
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E7D4F7AD9AE11F0AE6CD3ADDAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 12:04:45 +0000
ROA not before:           Mon 15 Dec 2025 12:04:40 +0000
ROA not after:            Sat 17 Jan 2026 12:04:40 +0000
asID:                     22773
IP address blocks:        45.192.24.0/21 maxlen: 24
                          45.194.72.0/23 maxlen: 24
                          45.206.80.0/20 maxlen: 24
                          45.206.96.0/19 maxlen: 24
                          45.207.27.0/24 maxlen: 24
                          45.207.29.0/24 maxlen: 24
                          45.207.31.0/24 maxlen: 24
                          45.207.45.0/24 maxlen: 24
                          45.207.166.0/24 maxlen: 24
                          45.207.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101958 (0x18e46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 15 12:04:40 2025 GMT
            Not After : Jan 17 12:04:40 2026 GMT
        Subject: CN=693ff95d-6219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:e4:c1:4c:04:b6:de:34:a1:af:8c:61:9d:
                    c2:ff:03:32:d2:97:0d:87:cb:22:cd:5f:43:9e:b5:
                    35:a7:51:55:9f:fa:54:83:e9:c0:f8:52:17:a0:a3:
                    f1:1c:b7:cc:06:d4:be:7b:e0:7d:d9:4d:50:f3:89:
                    dc:fe:c6:72:15:ef:9d:3e:56:cb:77:d8:bb:26:d9:
                    b2:41:d6:3c:c7:ab:3a:85:fa:dc:b3:f1:b4:b4:5e:
                    8e:e5:56:2f:ba:83:5d:e6:f3:8f:88:95:a9:19:72:
                    d5:27:80:da:a0:90:80:d5:3a:5a:6c:5b:8b:93:c9:
                    9e:e4:f0:3a:93:86:86:eb:fa:70:f4:95:16:a7:98:
                    97:2e:64:4a:25:6b:e9:e6:41:88:86:26:28:6e:9e:
                    f3:d7:23:88:29:a0:5f:03:a0:d0:b9:b2:ea:b1:71:
                    69:a7:47:60:82:6d:cc:80:17:d4:79:7b:d6:f6:6c:
                    83:e1:15:cf:5b:44:ae:0d:14:44:30:b6:f4:47:a2:
                    a4:c8:c3:81:37:2b:71:6a:e8:a3:54:98:93:50:2a:
                    5c:c0:78:91:15:b5:2a:2a:83:b8:e7:e6:ca:ac:37:
                    78:cb:93:77:2b:d5:84:9c:9c:65:40:cc:df:96:33:
                    9e:9e:3a:ea:64:f6:42:0f:9f:10:2b:44:34:d9:9e:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:45:F9:9A:78:3A:1F:7F:76:7B:FD:A1:97:C8:AB:FD:AD:E1:10:91
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E7D4F7AD9AE11F0AE6CD3ADDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.24.0/21
                  45.194.72.0/23
                  45.206.80.0-45.206.127.255
                  45.207.27.0/24
                  45.207.29.0/24
                  45.207.31.0/24
                  45.207.45.0/24
                  45.207.166.0/24
                  45.207.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:55:16:73:d1:e7:ea:1c:82:5b:bf:a9:b3:aa:49:b9:93:59:
         bd:46:32:a6:7e:4b:1d:12:f3:dc:88:d7:15:5e:93:d6:e8:b3:
         62:61:6e:d5:ff:85:98:6e:48:bc:f9:e2:9f:ff:c2:58:07:b2:
         82:cd:b7:68:0d:cc:8b:ab:32:62:d3:4b:11:0f:11:d8:38:e7:
         57:87:f4:50:16:5f:1a:22:77:11:3e:9f:cd:47:aa:bd:7c:47:
         00:a6:b7:88:6c:57:29:4c:d3:e3:55:fa:d6:e7:93:29:6a:e0:
         37:60:3d:5d:0e:fc:d2:5c:21:9d:7b:1b:6c:c5:54:25:fc:d9:
         3d:21:51:90:69:43:0a:9b:20:9c:d4:6b:b8:75:02:08:06:ae:
         ff:67:0f:8a:d1:b5:e4:a6:b8:c9:04:bc:fe:c1:9c:9a:e8:d4:
         18:41:4e:b9:e8:53:7a:da:60:d7:10:70:1c:9c:fd:8a:f3:f9:
         29:b0:4a:b1:fa:86:62:8b:a5:e5:de:8c:06:1b:0d:ac:00:d5:
         c4:c3:63:65:b0:a4:66:52:f7:81:01:52:bb:75:19:4b:60:8b:
         e0:a0:e3:03:0b:22:67:25:be:fc:ed:43:fc:4e:9f:aa:a4:9c:
         2e:47:2f:d6:53:48:6e:e1:ae:9d:f3:fe:67:64:1f:7f:7c:35:
         cd:8a:88:dc
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIDAY5GMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjE1MTIwNDQwWhcNMjYwMTE3MTIwNDQwWjAYMRYw
FAYDVQQDEw02OTNmZjk1ZC02MjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqWHkwUwEtt40oa+MYZ3C/wMy0pcNh8sizV9DnrU1p1FVn/pUg+nA+FIX
oKPxHLfMBtS+e+B92U1Q84nc/sZyFe+dPlbLd9i7JtmyQdY8x6s6hfrcs/G0tF6O
5VYvuoNd5vOPiJWpGXLVJ4DaoJCA1TpabFuLk8me5PA6k4aG6/pw9JUWp5iXLmRK
JWvp5kGIhiYobp7z1yOIKaBfA6DQubLqsXFpp0dggm3MgBfUeXvW9myD4RXPW0Su
DRREMLb0R6KkyMOBNytxauijVJiTUCpcwHiRFbUqKoO45+bKrDd4y5N3K9WEnJxl
QMzfljOenjrqZPZCD58QK0Q02Z5BkwIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFIFF
+Zp4Oh9/dnv9oZfIq/2t4RCRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRTdENEY3QUQ5QUUxMUYwQUU2Q0QzQUREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQDLcAYAwQBLcJIMAwDBAQtzlAD
BActzgADBAAtzxsDBAAtzx0DBAAtzx8DBAAtzy0DBAAtz6YDBAQtz7AwDQYJKoZI
hvcNAQELBQADggEBAIFVFnPR5+ocglu/qbOqSbmTWb1GMqZ+Sx0S89yI1xVek9bo
s2JhbtX/hZhuSLz54p//wlgHsoLNt2gNzIurMmLTSxEPEdg451eH9FAWXxoidxE+
n81Hqr18RwCmt4hsVylM0+NV+tbnkylq4DdgPV0O/NJcIZ17G2zFVCX82T0hUZBp
QwqbIJzUa7h1AggGrv9nD4rRteSmuMkEvP7BnJro1BhBTrnoU3raYNcQcByc/Yrz
+SmwSrH6hmKLpeXejAYbDawA1cTDY2WwpGZS94EBUrt1GUtgi+Cg4wMLImclvvzt
Q/xOn6qknC5HL9ZTSG7hrp3z/mdkH398Nc2KiNw=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:33:47 2025 by rpki-client