This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46C5DF4CE38811F09F7D1C79DAE4EC9C.roa
File:                     46C5DF4CE38811F09F7D1C79DAE4EC9C.roa (raw, json)
Hash identifier:          3Zv9bbZ2GxU2+JH9cZkzqObYEFTWHDAsTiOIJ1C0M9Q=
Subject key identifier:   EF:8F:3B:90:F1:7D:6B:19:6F:73:5F:2A:FE:C3:27:0A:98:86:96:7C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019286
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46C5DF4CE38811F09F7D1C79DAE4EC9C.roa
Signing time:             Sun 28 Dec 2025 00:58:09 +0000
ROA not before:           Sun 28 Dec 2025 00:00:03 +0000
ROA not after:            Sat 31 Jan 2026 00:00:03 +0000
asID:                     202656
IP address blocks:        45.195.208.0/24 maxlen: 24
                          45.195.209.0/24 maxlen: 24
                          45.199.135.0/24 maxlen: 24
                          45.199.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103046 (0x19286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 28 00:00:03 2025 GMT
            Not After : Jan 31 00:00:03 2026 GMT
        Subject: CN=695080a1-e85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:c0:70:c6:a4:18:7c:74:3f:d3:09:37:75:
                    e7:1d:de:c3:6e:43:f4:45:60:2c:53:89:30:5d:53:
                    b8:19:15:e8:e6:e0:28:27:1c:e1:1e:8e:2d:00:e7:
                    6e:9d:d8:d7:39:c1:99:14:79:a9:40:22:55:d3:e5:
                    69:db:9e:de:01:71:5e:d6:4e:4f:25:e2:0d:56:fe:
                    f5:11:7c:36:c0:56:7f:9e:8d:1f:bc:0d:c5:7b:66:
                    5d:5b:58:41:a1:d4:d1:0d:27:f0:62:23:39:d4:c4:
                    28:c4:87:f9:a5:d3:40:d2:fa:eb:71:54:3f:22:e5:
                    d7:8b:a8:ad:0e:ed:7d:1f:92:55:6f:56:87:ce:fc:
                    ab:ff:8c:dc:6b:80:34:6e:e2:8b:4a:81:c7:44:50:
                    59:b5:ef:b4:6e:99:31:d5:fb:cd:fc:9b:c7:bf:b9:
                    2e:7c:81:79:f1:47:c2:d5:41:d5:5b:85:ec:16:55:
                    42:46:2c:e9:cd:8a:4e:ae:e8:1c:29:8a:eb:3d:c6:
                    0b:d5:9a:39:dd:17:71:25:b4:91:7e:d0:8a:3c:b1:
                    9f:c4:01:8d:c2:ee:75:94:a1:b1:5c:42:83:41:84:
                    99:d3:3f:cd:42:d7:4b:47:19:a5:57:22:af:ea:43:
                    5a:90:dc:92:9c:ec:5d:f0:8a:34:6c:27:24:a2:4b:
                    c2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8F:3B:90:F1:7D:6B:19:6F:73:5F:2A:FE:C3:27:0A:98:86:96:7C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46C5DF4CE38811F09F7D1C79DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.208.0/23
                  45.199.135.0-45.199.136.255

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:42:19:8a:89:85:90:af:e9:b7:de:78:cc:4d:65:33:44:
         82:3d:62:d5:68:b0:97:00:1e:7a:1c:f4:6a:97:af:6e:55:20:
         37:d4:fc:2a:6b:a8:4d:06:91:b0:17:84:4a:4a:2b:32:0e:f0:
         bf:35:33:07:52:04:88:2f:27:19:16:6d:02:3a:3f:ae:d6:74:
         6c:2b:4a:c1:3d:af:66:f2:ae:30:0d:37:02:59:e1:10:e9:ab:
         06:c1:88:f0:7d:cb:5a:2f:1f:65:98:c8:d1:fa:1f:d7:ed:3a:
         a0:d7:43:2b:c8:68:83:c1:68:8f:2f:35:d4:82:af:6e:47:6d:
         99:e1:1b:f4:2e:d6:94:d2:1f:50:28:75:ae:6e:03:a2:81:30:
         c4:9a:e2:ce:c7:f1:e8:dd:a3:5d:65:19:26:d8:9c:05:92:ba:
         37:71:e3:1b:79:3f:34:c1:12:04:77:90:22:03:76:5b:8e:62:
         2f:53:c1:75:51:8f:0b:9d:15:5d:fd:91:9d:84:12:5f:87:72:
         cf:da:e0:0a:35:f5:fa:f4:b1:fa:58:f3:c8:9d:47:ca:0d:3c:
         ca:a0:a7:f3:3a:c1:63:cf:75:83:b4:69:30:16:00:52:14:6f:
         00:a1:a7:3a:1c:b1:39:6d:8f:b8:7b:39:09:2e:a8:05:4a:2f:
         3f:1f:d1:09
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAZKGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjI4MDAwMDAzWhcNMjYwMTMxMDAwMDAzWjAYMRYw
FAYDVQQDEw02OTUwODBhMS1lODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzJXAcMakGHx0P9MJN3XnHd7DbkP0RWAsU4kwXVO4GRXo5uAoJxzhHo4t
AOdundjXOcGZFHmpQCJV0+Vp257eAXFe1k5PJeINVv71EXw2wFZ/no0fvA3Fe2Zd
W1hBodTRDSfwYiM51MQoxIf5pdNA0vrrcVQ/IuXXi6itDu19H5JVb1aHzvyr/4zc
a4A0buKLSoHHRFBZte+0bpkx1fvN/JvHv7kufIF58UfC1UHVW4XsFlVCRizpzYpO
rugcKYrrPcYL1Zo53RdxJbSRftCKPLGfxAGNwu51lKGxXEKDQYSZ0z/NQtdLRxml
VyKv6kNakNySnOxd8Io0bCckokvCkQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFO+P
O5DxfWsZb3NfKv7DJwqYhpZ8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NkM1REY0Q0UzODgxMUYwOUY3RDFDNzlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBLcPQMAwDBAAtx4cDBAAtx4gw
DQYJKoZIhvcNAQELBQADggEBAGDIQhmKiYWQr+m33njMTWUzRII9YtVosJcAHnoc
9GqXr25VIDfU/CprqE0GkbAXhEpKKzIO8L81MwdSBIgvJxkWbQI6P67WdGwrSsE9
r2byrjANNwJZ4RDpqwbBiPB9y1ovH2WYyNH6H9ftOqDXQyvIaIPBaI8vNdSCr25H
bZnhG/Qu1pTSH1Aoda5uA6KBMMSa4s7H8ejdo11lGSbYnAWSujdx4xt5PzTBEgR3
kCIDdluOYi9TwXVRjwudFV39kZ2EEl+Hcs/a4Ao19fr0sfpY88idR8oNPMqgp/M6
wWPPdYO0aTAWAFIUbwChpzocsTltj7h7OQkuqAVKLz8f0Qk=
-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:01 2025 by rpki-client