This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CF7830AE31511F0AF563AB7DAE4EC9C.roa
File:                     6CF7830AE31511F0AF563AB7DAE4EC9C.roa (raw, json)
Hash identifier:          aQP0Uudm/Zc5sCY1b9aMvOyLJK6Fa0SrNsvGMIQMTr0=
Subject key identifier:   0E:EC:A9:9A:0B:2D:CF:DA:A5:4E:03:51:B7:3C:F9:72:12:FB:F4:AD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01926B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CF7830AE31511F0AF563AB7DAE4EC9C.roa
Signing time:             Sat 27 Dec 2025 11:16:01 +0000
ROA not before:           Sat 27 Dec 2025 11:15:57 +0000
ROA not after:            Tue 06 Jan 2026 11:15:57 +0000
asID:                     152599
IP address blocks:        45.196.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103019 (0x1926b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 27 11:15:57 2025 GMT
            Not After : Jan  6 11:15:57 2026 GMT
        Subject: CN=694fbff1-25f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:76:74:6d:de:8e:2e:e2:80:a4:0d:7b:e7:
                    c0:9f:89:1a:2f:64:8d:2d:29:87:73:b3:9f:ff:36:
                    6b:e4:74:9e:1a:b2:34:d9:d0:c4:51:34:2f:b5:ac:
                    85:b9:57:e9:fa:71:f2:b1:7e:6c:4b:91:a9:fc:e5:
                    30:b3:f8:5b:21:a6:95:51:3d:a4:a7:67:c5:7a:16:
                    8e:5c:3a:8d:77:8e:ae:b5:86:0e:e6:2a:7e:be:c4:
                    36:9b:87:fa:58:89:1f:ca:af:cf:81:84:ca:f2:f2:
                    36:a4:6a:5b:63:72:7a:52:77:62:15:b4:76:e9:1c:
                    fb:47:bc:62:23:64:e3:f4:e7:53:3f:4c:af:cc:5d:
                    62:1e:4d:d1:b0:c7:85:09:5e:78:2b:de:09:5b:b5:
                    c0:a5:dd:fd:f1:86:eb:53:2f:9b:27:84:71:d9:2d:
                    9f:43:fd:cf:ac:16:64:5c:3d:c7:4f:62:f1:ec:50:
                    ed:ed:92:d8:81:26:bb:0a:8f:47:5c:f6:07:e0:f0:
                    da:f3:99:d8:58:98:d0:6c:c4:23:68:18:aa:93:0a:
                    a8:96:bd:88:ca:99:97:66:e9:56:6a:dd:8a:00:58:
                    b1:3e:9f:a3:03:cb:92:a1:f5:b1:b1:b6:27:05:70:
                    eb:38:fb:60:a9:4b:de:77:99:98:b8:e0:17:0f:fb:
                    f2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EC:A9:9A:0B:2D:CF:DA:A5:4E:03:51:B7:3C:F9:72:12:FB:F4:AD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CF7830AE31511F0AF563AB7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:c6:de:7f:78:60:5f:09:0a:da:31:28:42:fc:fc:16:bd:4e:
         4c:dc:f7:56:d1:ae:18:9f:f9:e6:cd:c2:9a:eb:70:0d:fd:4b:
         ba:fa:90:5f:dd:c9:5b:70:cf:47:ce:23:7f:14:be:d9:55:6e:
         ab:19:87:00:ae:33:2b:ce:cb:6b:3c:c8:45:bf:37:04:84:bb:
         38:91:5c:b4:92:e9:ad:00:ac:ab:6f:5a:37:06:0a:09:51:f4:
         43:30:54:78:e1:1a:14:bb:5e:99:82:52:40:7b:33:01:2e:3f:
         9f:fa:95:e9:40:20:99:a5:4a:49:c0:52:06:92:af:32:df:70:
         06:88:1d:2b:c4:28:6d:06:a9:5e:53:84:cb:1a:88:c0:34:81:
         45:f7:62:44:d7:d4:02:f4:0f:59:3d:ff:e1:b9:43:dc:27:34:
         c3:50:d5:95:de:9f:f6:3d:a0:4a:4b:d9:79:8c:15:c6:b4:88:
         71:79:ec:9e:96:59:d8:64:0c:b2:82:b5:7c:13:d3:af:f0:16:
         9b:1e:27:f1:07:2c:ef:e1:05:a2:77:0c:70:ad:56:ee:f2:c5:
         4f:a2:c1:d1:05:66:c1:64:12:87:2b:40:8f:62:52:39:6d:4e:
         91:d2:ce:16:3e:5c:a0:25:da:da:ea:80:9f:63:e3:01:80:ce:
         99:54:86:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 20:26:47 2025 by rpki-client