This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F2139F6DC1411F087FBEBB9DAE4EC9C.roa
File:                     3F2139F6DC1411F087FBEBB9DAE4EC9C.roa (raw, json)
Hash identifier:          gx6Y1Iq1hLZHzCHXQkN4CQm0xylqaLCVts9HDRfzbvU=
Subject key identifier:   9C:2D:07:3D:E2:14:A3:24:67:14:30:B2:AE:8D:6D:61:EB:8F:2B:84
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018FF7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F2139F6DC1411F087FBEBB9DAE4EC9C.roa
Signing time:             Thu 18 Dec 2025 13:19:57 +0000
ROA not before:           Thu 18 Dec 2025 13:19:52 +0000
ROA not after:            Fri 09 Jan 2026 13:19:52 +0000
asID:                     54801
IP address blocks:        45.200.20.0/22 maxlen: 24
                          45.200.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102391 (0x18ff7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 18 13:19:52 2025 GMT
            Not After : Jan  9 13:19:52 2026 GMT
        Subject: CN=6943ff7d-918b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4c:42:53:9b:60:da:df:78:db:a5:2c:84:df:
                    6b:1a:03:5c:71:e5:ca:c9:c3:fc:f9:1f:82:d7:06:
                    56:dd:04:2a:38:c4:f4:c3:93:06:6e:90:53:80:18:
                    ae:9c:a2:5c:b1:29:33:01:55:98:39:7e:a8:af:71:
                    38:5b:0f:57:47:08:5c:5e:64:1b:4e:9a:c6:d3:d1:
                    ee:a5:e7:e8:c5:ae:70:d7:c6:ea:7e:6c:ef:e0:6f:
                    70:6b:e2:d6:dc:b3:e1:82:c0:dc:b5:39:b7:c4:b9:
                    ef:93:cd:fe:fe:fe:51:81:85:b0:d4:36:92:3e:91:
                    c4:41:cf:73:81:6c:51:48:c8:3d:75:2d:e3:32:7a:
                    6f:9d:73:db:ba:9c:b2:78:cf:c0:df:17:e0:a9:be:
                    5c:a1:c1:46:d4:6b:0b:01:b3:1d:94:24:40:bc:b3:
                    6f:27:9c:e8:f8:48:f6:0d:ff:f0:fa:cc:28:af:63:
                    de:cd:fa:f8:e3:8d:db:ec:24:e6:cd:dc:bf:7f:e4:
                    97:94:49:55:41:a3:4c:0f:0e:7a:89:11:21:b5:6d:
                    a9:9a:a7:ec:98:1b:95:20:00:a5:39:70:d0:29:4d:
                    e2:6c:c3:ad:15:03:d7:95:82:f2:fc:00:f8:42:68:
                    6c:ce:0f:1b:4d:b5:e8:5b:13:79:b4:ed:3a:9a:dc:
                    80:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2D:07:3D:E2:14:A3:24:67:14:30:B2:AE:8D:6D:61:EB:8F:2B:84
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F2139F6DC1411F087FBEBB9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.20.0-45.200.31.255

    Signature Algorithm: sha256WithRSAEncryption
         50:2f:b8:6f:02:38:94:22:52:be:da:e3:1a:2e:56:3a:00:63:
         8c:ff:0d:ac:e1:8b:0a:d7:76:c5:3d:0f:ce:b8:2a:ed:f0:29:
         4d:23:d1:58:b1:4d:9f:f7:9d:a6:4b:c6:05:dd:d9:46:30:49:
         dc:c4:cb:0e:28:3b:ca:0c:ef:e1:fc:77:ce:8c:27:e0:ea:c3:
         e4:17:4b:73:02:8b:62:01:3b:e8:a3:e7:92:71:2a:db:c7:52:
         05:f8:d9:ec:4b:9c:4d:a9:ba:f7:90:72:26:74:a8:c3:7c:90:
         01:70:23:5a:34:1e:40:8b:d0:d9:6a:0d:d6:5a:f9:6a:e5:7d:
         4b:7c:88:d4:74:42:b6:70:30:d4:10:6b:97:cc:f4:c6:b6:9b:
         fd:b2:9e:20:07:62:36:10:5d:15:64:5b:49:62:01:d1:88:bd:
         07:be:0a:df:20:4e:84:c9:ea:f3:9e:2e:e4:26:ca:fd:8b:a5:
         bb:31:a2:02:5a:dc:38:17:e8:57:9d:ac:0f:d3:66:43:7e:e0:
         84:6b:7c:a9:e7:0b:af:7b:c5:26:2e:7a:75:cb:e4:99:82:5e:
         c0:8e:85:89:e9:01:a4:33:7e:a3:d0:9d:8b:5f:51:c3:ad:a0:
         50:e8:82:7e:e6:a3:9e:37:94:98:7c:fc:1c:2c:13:6f:02:86:
         6f:98:de:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:34:08 2025 by rpki-client