This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/604F6102E03D11F099D137CBDAE4EC9C.roa
File:                     604F6102E03D11F099D137CBDAE4EC9C.roa (raw, json)
Hash identifier:          YIqtbbcyLecexHSDqexjpXXTnKp3V8ZIo9QFh4Mn1rA=
Subject key identifier:   BE:F0:4D:78:67:82:4B:77:90:12:A9:36:1A:C0:92:00:0B:BF:CB:7C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019119
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/604F6102E03D11F099D137CBDAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 20:24:27 +0000
ROA not before:           Tue 23 Dec 2025 20:24:21 +0000
ROA not after:            Wed 28 Jan 2026 20:24:21 +0000
asID:                     44559
IP address blocks:        45.195.170.0/24 maxlen: 24
                          45.195.174.0/24 maxlen: 24
                          45.195.175.0/24 maxlen: 24
                          45.195.176.0/24 maxlen: 24
                          45.195.177.0/24 maxlen: 24
                          45.195.179.0/24 maxlen: 24
                          45.195.181.0/24 maxlen: 24
                          45.195.186.0/24 maxlen: 24
                          45.199.209.0/24 maxlen: 24
                          45.199.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102681 (0x19119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 20:24:21 2025 GMT
            Not After : Jan 28 20:24:21 2026 GMT
        Subject: CN=694afa7a-798f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:c2:58:af:42:26:10:30:ce:65:3d:c6:ab:
                    c7:90:3e:15:e8:ed:f6:7b:fd:40:cb:e0:c5:15:40:
                    2c:01:be:b4:d8:b3:15:4c:b3:c3:e7:80:db:9b:81:
                    68:ba:6b:87:0b:71:1b:76:f8:60:55:e4:9a:17:9f:
                    b3:07:9a:3a:03:bd:a4:5d:2c:ca:28:17:e1:2e:c1:
                    a0:bf:32:bb:63:14:69:35:25:98:f5:fe:be:de:eb:
                    2d:fc:70:e6:cb:b2:a6:36:8c:89:8f:d4:13:8b:f0:
                    a2:59:95:51:b1:fd:be:aa:b3:17:4e:89:91:33:d2:
                    15:f6:89:cf:8e:01:37:c5:7e:71:f2:b5:09:04:bb:
                    92:04:ce:7c:7b:d6:6e:08:6c:e0:be:a9:87:73:9f:
                    ec:f3:70:26:36:d5:7d:e5:9a:22:e3:37:94:57:4b:
                    fe:bf:4a:8d:23:12:be:0a:59:08:15:6c:4a:ee:2f:
                    5c:dc:68:f3:f9:f6:20:bb:1c:dc:9d:21:40:7e:43:
                    e1:3e:77:76:2a:74:9e:8f:92:c3:2e:68:90:c7:ff:
                    74:e6:36:34:44:c8:2d:75:6c:a5:92:c7:82:93:9a:
                    6d:6c:ae:5a:4e:1d:e0:e4:7d:67:f4:ac:54:40:44:
                    1d:04:51:7e:47:23:46:8b:45:d5:18:bd:20:05:b2:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F0:4D:78:67:82:4B:77:90:12:A9:36:1A:C0:92:00:0B:BF:CB:7C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/604F6102E03D11F099D137CBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.170.0/24
                  45.195.174.0-45.195.177.255
                  45.195.179.0/24
                  45.195.181.0/24
                  45.195.186.0/24
                  45.199.209.0-45.199.210.255

    Signature Algorithm: sha256WithRSAEncryption
         7e:04:b4:3e:66:98:35:c6:fb:b8:72:73:12:a5:45:7a:98:7d:
         3a:0d:11:22:bd:3f:6c:8c:c2:00:08:86:75:cb:35:85:25:38:
         bf:3f:2f:6e:d1:c3:54:86:7a:63:f6:a1:94:21:7a:83:5a:45:
         94:2d:8d:50:b9:ec:2b:26:6c:0d:3a:ed:57:9c:ae:65:0f:03:
         b1:c3:04:3b:41:9c:a2:0f:99:ef:2c:f6:14:f4:90:10:a9:5e:
         36:d7:4a:29:6f:53:7e:77:ab:d5:85:ed:4c:48:66:2b:7d:5a:
         63:d2:b6:b6:a8:97:c7:2f:97:a5:54:ef:29:a1:79:c8:69:62:
         8d:1b:db:c9:52:51:fb:b5:a5:f3:9f:3d:7e:20:be:7a:98:79:
         3c:6d:85:08:c2:8b:59:a0:5f:29:c0:b4:4e:46:e9:61:a4:3e:
         a6:88:9d:72:b9:20:44:2d:27:5e:a4:2d:da:80:a7:09:a4:64:
         01:d7:ff:d2:b3:5c:15:d2:63:bc:56:01:0e:6a:5d:7b:25:f4:
         d2:e1:7c:21:e5:e7:73:ae:aa:37:c0:7d:8a:df:14:74:d1:54:
         47:2f:95:98:73:be:f2:05:2b:76:da:b1:e8:40:27:77:00:40:
         70:e8:5b:9b:d5:14:3c:3f:95:e7:1a:52:f4:21:3a:fc:0d:f9:
         a1:38:a2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:28:28 2025 by rpki-client