This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43D13E72E0AD11F087025C98DAE4EC9C.roa
File:                     43D13E72E0AD11F087025C98DAE4EC9C.roa (raw, json)
Hash identifier:          1simIyIQi/Zzo7bVEuBGI/84q7Q8/z62MvCYnWvMrLo=
Subject key identifier:   10:2F:6A:FF:0A:CD:46:C4:A6:3C:30:68:D0:E2:43:05:49:E3:92:2F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019154
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43D13E72E0AD11F087025C98DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 09:45:22 +0000
ROA not before:           Wed 24 Dec 2025 09:45:18 +0000
ROA not after:            Tue 27 Jan 2026 09:45:18 +0000
asID:                     6079
IP address blocks:        45.197.208.0/20 maxlen: 24
                          45.198.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102740 (0x19154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 09:45:18 2025 GMT
            Not After : Jan 27 09:45:18 2026 GMT
        Subject: CN=694bb632-6b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:15:d3:33:03:d6:f6:f8:96:05:b8:8d:0d:
                    ab:bb:a0:07:8b:df:ca:e0:9e:f9:70:5c:0d:00:f8:
                    7b:44:a0:03:55:02:31:7e:a5:83:23:4f:56:a8:0f:
                    cd:7b:f4:c4:c8:51:c2:80:a5:13:88:92:24:2c:74:
                    5b:c6:6b:c4:f3:b7:77:5d:fc:33:17:01:86:39:09:
                    ac:6c:30:cb:b7:27:e1:e2:27:95:6a:00:6f:ac:65:
                    f8:d3:ed:cb:b3:37:49:b4:2d:a6:27:6a:d9:08:c1:
                    5a:df:1b:a4:35:de:27:0e:d0:23:86:02:25:fb:ae:
                    66:80:97:45:07:2c:31:c0:e1:04:45:fd:10:dc:a0:
                    b4:8c:85:5e:1d:6c:9b:fe:01:bc:b8:16:b8:f0:74:
                    44:8a:34:29:74:11:fd:01:02:48:85:49:3e:82:de:
                    0e:64:ad:e6:36:4e:ff:fb:29:4c:17:bf:b8:ec:af:
                    c2:08:ff:c9:e4:de:af:5f:e7:f7:2e:a6:68:73:83:
                    57:cc:0b:24:bc:bc:e0:7e:b1:e9:22:f0:74:f0:e7:
                    d8:28:b0:1f:ff:6a:af:75:e5:40:e5:92:84:ad:83:
                    78:c4:b0:02:c0:71:62:dd:7c:1c:96:6e:51:d8:ef:
                    29:ac:32:7a:b9:fd:13:eb:31:52:6a:39:11:b0:bd:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2F:6A:FF:0A:CD:46:C4:A6:3C:30:68:D0:E2:43:05:49:E3:92:2F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43D13E72E0AD11F087025C98DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.208.0/20
                  45.198.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:c9:7e:b9:cd:28:a0:79:fe:ff:98:f8:04:ec:fa:2f:db:50:
         c3:9f:fd:9d:08:b5:4f:5b:83:f9:11:33:ca:c7:51:78:58:47:
         0f:6c:16:19:06:d5:e7:06:d8:fb:e2:7b:1e:73:b1:9b:e9:7d:
         f7:a0:32:01:5d:6e:3c:1b:58:5a:a7:e2:14:6f:ca:a6:ec:4d:
         65:34:f8:d2:ac:81:dc:a3:6e:66:5a:6c:52:b2:e5:c0:6b:a3:
         ec:df:3b:e7:0e:51:11:7f:d0:33:21:ba:b8:54:d9:17:96:6c:
         cb:48:72:44:4b:9e:ea:54:f7:9a:c0:88:8b:3f:ed:50:a3:36:
         be:1e:18:02:9b:af:ed:d7:60:29:85:74:78:c1:65:d6:53:7b:
         58:17:ff:db:8d:f2:4f:83:ac:d8:4f:ef:26:4a:49:c4:88:40:
         70:b7:a2:81:e2:a4:d2:54:8a:7a:9f:ab:83:01:8f:28:5d:7c:
         b6:8c:8b:b5:e9:45:a6:8f:ee:3c:c5:1c:b8:c7:d2:47:5c:14:
         41:03:89:6a:cb:02:48:a2:ae:19:24:3e:a0:2c:6e:a0:7d:a1:
         0a:9d:3f:7e:1a:4b:3d:ce:32:59:be:62:73:68:d9:87:a7:5c:
         47:0f:60:bf:9e:35:bc:6a:ab:ac:2c:6b:66:e0:a9:46:3d:28:
         86:c9:64:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:28:27 2025 by rpki-client