This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/663A3F7CD41911F0A62DB8B0DAE4EC9C.roa
File:                     663A3F7CD41911F0A62DB8B0DAE4EC9C.roa (raw, json)
Hash identifier:          zwTYUdXR1aExEY+GyyyQc9LNBTI8rls4uZ5LG8phkjY=
Subject key identifier:   E8:72:03:52:B3:49:B5:00:27:F2:B3:CB:83:31:D7:10:DB:89:54:79
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018D1A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/663A3F7CD41911F0A62DB8B0DAE4EC9C.roa
Signing time:             Mon 08 Dec 2025 09:36:41 +0000
ROA not before:           Mon 08 Dec 2025 09:36:36 +0000
ROA not after:            Sat 20 Dec 2025 09:36:36 +0000
asID:                     141883
IP address blocks:        45.200.24.0/21 maxlen: 24
                          45.200.32.0/19 maxlen: 24
                          45.201.214.0/23 maxlen: 24
                          45.201.216.0/21 maxlen: 24
                          45.201.224.0/21 maxlen: 24
                          45.201.240.0/20 maxlen: 24
                          45.204.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 09:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101658 (0x18d1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  8 09:36:36 2025 GMT
            Not After : Dec 20 09:36:36 2025 GMT
        Subject: CN=69369c29-bb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:50:2f:1d:1b:c8:2e:44:c4:ec:fc:0a:a0:
                    61:56:2e:fc:10:5e:4b:fb:06:e3:c9:89:41:89:04:
                    77:02:09:08:d2:ef:56:cc:90:52:2f:ec:cd:4b:69:
                    f2:94:73:c9:3a:da:14:18:58:18:a9:eb:ee:58:95:
                    f5:44:95:55:e7:1d:0f:86:f5:f2:30:8c:4d:b9:e3:
                    2c:89:cd:fc:85:49:5d:91:2b:42:55:3c:3f:e0:61:
                    03:e5:06:6b:2b:72:ea:b1:53:3c:e1:0b:e0:51:1f:
                    83:64:26:10:dc:30:2b:d6:f8:3f:c0:9f:a4:bd:93:
                    47:94:98:41:9e:ba:13:bf:e8:e0:e5:36:9c:87:ea:
                    fb:0f:8a:45:93:12:b1:25:84:0c:64:4a:46:f5:f1:
                    87:c3:ad:96:a9:d3:86:02:ba:10:39:0b:1f:ea:57:
                    f0:73:fe:4e:1a:04:2b:f1:d0:98:b9:cc:c0:d3:5e:
                    64:37:55:d7:9d:91:1a:cd:f9:db:46:cb:e9:23:7c:
                    31:82:13:26:de:10:5c:a7:57:27:25:a1:65:37:26:
                    bd:3b:3c:b7:26:cc:4f:a8:10:81:27:75:d5:2b:f1:
                    9f:fc:75:3e:5e:52:53:c9:d2:60:18:ac:7a:13:6d:
                    21:43:6a:85:ce:e7:39:ac:c5:51:d0:28:fd:ff:1f:
                    32:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:72:03:52:B3:49:B5:00:27:F2:B3:CB:83:31:D7:10:DB:89:54:79
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/663A3F7CD41911F0A62DB8B0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.24.0-45.200.63.255
                  45.201.214.0-45.201.231.255
                  45.201.240.0/20
                  45.204.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:48:43:f2:07:b6:01:5d:b1:be:36:82:e2:aa:af:c9:87:92:
         bb:93:6c:47:88:1b:c0:17:6b:13:4d:3d:f0:64:9f:af:33:e4:
         9a:4a:ea:95:08:32:37:9e:86:6f:5f:d1:19:48:f8:b2:e5:0b:
         96:fa:08:28:6e:12:fb:ef:d8:6d:c6:8e:b1:8f:b4:0a:86:86:
         1a:40:3d:26:93:da:49:f1:22:c3:a9:e6:30:90:87:48:be:74:
         cd:4d:a9:39:c2:ce:8f:e8:e9:cf:e1:66:ae:51:db:30:08:31:
         33:63:57:64:a7:bc:47:f3:90:1f:fd:bb:a0:0e:ea:7a:04:55:
         0a:53:a3:0a:61:5f:33:9b:fd:7a:1d:d0:fe:76:58:2c:d0:b1:
         a9:20:bc:6f:a1:83:49:c3:66:a4:f4:cd:d7:c1:fb:ed:1b:b4:
         ea:eb:b9:43:bc:24:84:3a:37:f7:17:1f:19:16:22:a7:c9:42:
         ef:a4:7c:31:24:da:c3:37:b6:30:34:5b:c7:1a:14:b6:4f:10:
         da:65:a2:b0:62:e2:63:67:35:fc:87:73:ba:38:0f:8f:af:9b:
         11:bc:2f:83:9f:10:43:55:be:7d:43:d9:6f:76:59:6f:c1:f4:
         6f:f9:71:4c:c0:72:4f:f0:97:36:5b:ba:0d:9f:fa:dc:ee:27:
         31:8f:43:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:33:59 2025 by rpki-client