This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AD01D18DF4711F0B9FD37C8DAE4EC9C.roa
File:                     4AD01D18DF4711F0B9FD37C8DAE4EC9C.roa (raw, json)
Hash identifier:          lod7cBh+t7O/bdvczf2mdSsCOMEmPMnLu9M9YEs9+uo=
Subject key identifier:   AC:6A:4A:91:75:70:95:FA:8F:C5:A6:40:A1:71:58:AF:07:4F:2C:2F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01907F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AD01D18DF4711F0B9FD37C8DAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 15:02:54 +0000
ROA not before:           Mon 22 Dec 2025 15:02:49 +0000
ROA not after:            Wed 28 Jan 2026 15:02:49 +0000
asID:                     214238
IP address blocks:        45.192.59.0/24 maxlen: 24
                          45.192.63.0/24 maxlen: 24
                          45.195.161.0/24 maxlen: 24
                          45.199.209.0/24 maxlen: 24
                          45.199.210.0/24 maxlen: 24
                          45.199.211.0/24 maxlen: 24
                          45.199.212.0/24 maxlen: 24
                          45.199.213.0/24 maxlen: 24
                          45.199.214.0/24 maxlen: 24
                          45.199.215.0/24 maxlen: 24
                          45.199.216.0/24 maxlen: 24
                          45.199.217.0/24 maxlen: 24
                          45.199.218.0/24 maxlen: 24
                          45.199.219.0/24 maxlen: 24
                          45.199.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102527 (0x1907f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 22 15:02:49 2025 GMT
            Not After : Jan 28 15:02:49 2026 GMT
        Subject: CN=69495d9e-65df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:75:48:96:ff:9f:bc:7a:2a:3b:07:f6:9a:ae:
                    15:3c:7c:f1:7a:62:dd:01:60:33:87:c6:13:2a:b2:
                    71:08:97:fa:f5:fe:38:2b:2b:dc:30:d3:7c:c1:0a:
                    4e:12:19:d1:97:15:9f:fb:0d:03:c9:5a:54:3d:7e:
                    99:ec:7d:e8:5c:79:15:3f:29:b7:6f:78:b3:0b:a5:
                    55:fd:fb:27:38:00:1d:4e:76:63:d1:3b:6a:d4:d2:
                    44:15:22:5e:ed:e2:63:ef:57:77:cf:e4:d0:c7:98:
                    34:f2:ab:95:63:65:6d:e7:d5:74:80:93:43:91:65:
                    7e:de:3c:a1:ff:e6:a5:c6:fd:c3:71:3e:c7:bb:9f:
                    7f:8a:92:80:25:b6:b7:f3:e2:f0:3e:89:ea:6f:ae:
                    fc:a1:8d:ae:74:38:00:e0:57:75:e6:03:aa:7b:eb:
                    b5:d4:6d:25:d5:ed:26:0b:dd:cd:c6:3d:42:63:1a:
                    e7:23:28:2b:a5:c7:15:8b:ab:37:1f:f3:1f:53:bc:
                    51:fc:5f:6a:3a:08:a3:07:a4:9d:b4:2c:be:71:a1:
                    aa:7e:53:cb:ae:ec:ce:47:0f:d0:0b:0f:ad:bd:f1:
                    ad:43:4e:af:50:52:2c:5b:24:21:e5:64:45:99:2d:
                    79:79:6d:df:58:c1:f0:56:2c:a6:5b:f0:b5:f6:f8:
                    05:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6A:4A:91:75:70:95:FA:8F:C5:A6:40:A1:71:58:AF:07:4F:2C:2F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AD01D18DF4711F0B9FD37C8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.59.0/24
                  45.192.63.0/24
                  45.195.161.0/24
                  45.199.209.0-45.199.220.255

    Signature Algorithm: sha256WithRSAEncryption
         66:b0:67:d6:ea:38:a0:4d:81:15:8d:6b:92:33:7f:ea:4f:58:
         f5:42:a9:ce:58:16:04:47:15:45:ae:88:37:ca:71:59:c1:ae:
         58:02:89:9f:85:43:09:39:c4:7a:1a:6c:31:2e:51:26:17:6d:
         bc:cb:f2:05:eb:03:a6:b8:99:20:c3:d9:2d:50:0c:c2:d5:41:
         b6:1d:48:3e:79:42:26:7d:ff:ca:29:36:06:0a:0c:7c:ed:d0:
         3b:e9:91:4e:8b:db:36:5c:46:de:aa:27:d0:23:80:d7:5f:02:
         fd:0c:62:f0:fe:9c:ed:b0:ea:ca:49:68:02:6f:7c:7d:47:37:
         c8:6b:dd:33:a8:ac:6a:e2:02:8f:67:3d:03:e6:e3:7b:ad:4e:
         73:bd:36:a6:65:58:2a:82:7a:82:87:65:79:2f:30:4a:ab:4c:
         7a:7b:bc:45:16:1b:4a:37:0d:7c:b6:42:fb:6e:3a:cb:12:bf:
         3b:fd:cb:98:86:1f:cc:c1:2c:ee:31:0a:6b:84:59:c3:97:01:
         70:37:73:85:16:3e:bf:d2:93:78:2d:56:64:04:f5:12:bc:0d:
         e4:01:0f:be:bf:47:86:6e:3c:43:bd:e8:42:3b:bd:3b:8a:71:
         64:61:dc:68:b0:55:4f:0b:fc:3f:e1:f8:06:69:6f:e0:d7:c9:
         1e:07:31:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:04 2025 by rpki-client