This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47CA6EBEE31311F0A52F83AADAE4EC9C.roa
File:                     47CA6EBEE31311F0A52F83AADAE4EC9C.roa (raw, json)
Hash identifier:          cPTl4PzK31dcfn1tGSrgW28esnje7tECnsA0fpVs7PM=
Subject key identifier:   A1:1B:2E:B9:02:F9:CD:C6:A1:85:92:08:41:53:B9:6C:7A:AA:56:18
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019265
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47CA6EBEE31311F0A52F83AADAE4EC9C.roa
Signing time:             Sat 27 Dec 2025 11:00:40 +0000
ROA not before:           Sat 27 Dec 2025 11:00:35 +0000
ROA not after:            Tue 03 Feb 2026 11:00:35 +0000
asID:                     207901
IP address blocks:        45.197.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103013 (0x19265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 27 11:00:35 2025 GMT
            Not After : Feb  3 11:00:35 2026 GMT
        Subject: CN=694fbc58-770f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:85:2d:28:b3:e0:c9:71:48:53:d6:ae:60:
                    db:9f:c1:30:75:6d:59:92:dd:35:07:ef:6f:8a:66:
                    98:f4:e8:7a:d5:30:10:a3:b1:9b:a2:0c:c2:8d:d1:
                    10:a0:36:f4:65:a4:e4:70:97:ef:7b:aa:8c:ee:57:
                    5e:04:b4:da:a6:87:57:65:fd:37:9c:1d:9a:61:0a:
                    a0:0d:7b:7e:ed:be:61:ca:68:5d:24:61:db:73:7b:
                    fe:4e:b9:46:9e:ec:77:24:6c:3b:82:aa:a5:20:a2:
                    18:51:1e:61:d7:24:db:ed:3e:b9:e0:36:59:1f:3a:
                    1f:72:77:94:36:3d:4e:47:6d:dd:5e:e6:5b:96:51:
                    c5:6f:37:d0:b3:3c:a8:c6:c5:32:a0:a1:9a:a2:01:
                    96:0a:32:3a:00:b9:5d:2b:a4:55:40:bb:41:e6:c3:
                    77:60:89:2a:79:8e:57:a2:7a:c3:f7:8b:e9:a0:16:
                    67:b1:57:5d:d0:73:e1:dc:54:0a:e5:44:d3:1d:77:
                    b6:01:39:d3:28:de:43:3e:d7:fd:83:18:1c:48:7d:
                    93:ac:bd:bf:dd:18:55:09:7e:33:bf:4f:c6:39:68:
                    a5:b8:4c:3a:6f:8d:81:65:2a:66:24:f4:5d:16:14:
                    d6:57:02:d0:d0:95:f7:ca:f9:79:a9:7d:61:c3:8e:
                    65:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1B:2E:B9:02:F9:CD:C6:A1:85:92:08:41:53:B9:6C:7A:AA:56:18
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47CA6EBEE31311F0A52F83AADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:28:84:49:3d:c1:5d:a9:a0:e7:46:9d:e1:1d:60:80:59:73:
         38:c7:6e:91:d9:a6:3f:c3:67:ad:6b:cb:73:07:1b:50:d7:50:
         e1:d2:fa:4c:06:33:e1:f1:0e:f1:3b:d0:c1:24:5a:0b:86:8d:
         c0:44:1a:af:ae:4f:fe:93:3d:77:47:83:5e:16:5b:90:91:28:
         83:db:97:b9:f4:27:43:f7:82:e9:e7:ab:52:8d:e8:f4:c6:ee:
         ea:4f:d3:4d:c2:f2:4a:ee:17:2b:11:8c:98:66:b7:95:04:27:
         28:bb:c8:33:90:c2:d0:6a:4c:8d:db:6b:e0:7f:2c:e8:36:a5:
         2f:3b:98:4c:99:dd:44:b9:6a:6f:cc:98:f5:45:f4:f9:65:a4:
         12:53:b0:4e:77:d1:be:b8:e5:2f:8d:42:83:00:13:21:04:3f:
         b7:b9:45:5c:39:eb:93:b7:dd:ee:f5:fd:b5:99:b3:86:1b:6d:
         5b:49:c0:f2:93:c4:dd:ef:1c:45:ec:2f:a0:2b:b7:77:16:eb:
         86:26:b6:8b:76:4d:76:1c:a0:d0:13:38:1d:f2:91:24:16:3f:
         6b:c3:71:26:38:5c:fc:52:67:ac:c5:e8:71:02:73:5f:a5:76:
         4e:0b:51:21:04:f4:3c:fc:94:10:2f:ab:a5:1b:94:72:3d:00:
         a9:68:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:43 2025 by rpki-client