This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FC4EDF0DB9211F0B136D584DAE4EC9C.roa
File:                     6FC4EDF0DB9211F0B136D584DAE4EC9C.roa (raw, json)
Hash identifier:          BbN+jz/9wYf1xXOz8Gfbj8KNODqUO+g4ZQmxoVrWYiM=
Subject key identifier:   D3:B3:4B:24:A7:7E:52:64:C7:4B:4F:B1:A8:A2:64:21:0A:EF:7C:B1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018FBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FC4EDF0DB9211F0B136D584DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 21:50:44 +0000
ROA not before:           Wed 17 Dec 2025 21:50:39 +0000
ROA not after:            Wed 24 Dec 2025 21:50:39 +0000
asID:                     395793
IP address blocks:        45.192.13.0/24 maxlen: 24
                          45.192.14.0/24 maxlen: 24
                          45.192.15.0/24 maxlen: 24
                          45.192.16.0/24 maxlen: 24
                          45.198.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102335 (0x18fbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 21:50:39 2025 GMT
            Not After : Dec 24 21:50:39 2025 GMT
        Subject: CN=694325b4-57d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8c:7a:dd:e0:ab:8e:ed:a1:62:d2:88:7e:aa:
                    64:c4:9f:8f:ed:22:42:53:b5:77:74:e9:48:24:de:
                    cc:15:82:c0:39:97:42:71:be:e0:bf:0d:a1:d0:33:
                    b2:9e:65:62:99:05:ff:c8:12:de:99:b8:e4:ff:8a:
                    e4:5e:24:78:73:59:a7:48:ac:d8:8e:09:80:5c:b5:
                    18:32:91:18:54:bf:c5:a0:26:7c:95:a4:e4:1f:47:
                    2e:3a:29:81:4e:95:95:cf:1b:2a:b4:df:6b:84:44:
                    d3:1e:3c:9c:b6:2f:48:9f:55:8b:26:75:b4:11:5a:
                    49:32:54:f3:97:fc:78:20:5b:6a:90:0c:2a:87:5f:
                    82:59:11:1a:a1:f1:02:0e:78:86:b1:f9:c5:6f:3f:
                    53:78:d9:43:1b:09:dd:65:82:38:30:9f:0d:4a:20:
                    49:23:46:fe:fa:c4:7c:9a:af:43:19:1c:76:c2:1f:
                    92:74:34:a2:bf:45:29:b9:c6:03:48:8c:55:65:c0:
                    f5:49:de:62:d9:96:fe:40:3b:40:5a:63:6f:a5:db:
                    ef:23:20:7e:74:c4:51:ed:5e:a0:41:d5:fa:fd:4c:
                    dd:30:44:67:70:f0:16:e2:b9:25:09:0f:e4:1a:37:
                    73:11:fb:ab:db:77:2f:53:5c:b7:27:a8:f0:66:27:
                    fd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B3:4B:24:A7:7E:52:64:C7:4B:4F:B1:A8:A2:64:21:0A:EF:7C:B1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FC4EDF0DB9211F0B136D584DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.13.0-45.192.16.255
                  45.198.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:9b:c1:c0:0b:be:74:eb:9c:c6:1e:ba:e0:2a:21:e5:16:09:
         3c:af:93:e3:37:9b:dd:42:e5:df:5d:ce:a1:38:a1:2f:17:b6:
         a3:bc:b5:39:4a:2c:04:2a:cd:47:ec:ac:60:82:a9:ca:35:74:
         c6:a5:70:57:d6:56:fd:ab:34:15:d7:d7:99:8c:9c:8b:34:3c:
         ff:5d:cd:fb:80:58:02:c5:cc:6e:88:f5:31:2c:73:09:9f:e1:
         88:e6:07:ac:e4:4b:e1:63:08:f1:f3:14:c6:99:c2:aa:c1:6c:
         83:9f:0c:dc:d8:25:07:36:55:12:51:2f:64:12:86:40:b5:db:
         e6:87:11:f5:b6:41:b0:9c:d1:b6:d4:f6:d5:20:0a:ea:b8:b5:
         f0:fb:77:32:f7:69:0b:96:d2:ca:dd:46:5c:af:12:49:40:81:
         9b:01:67:05:1b:31:70:45:d6:19:0e:7f:43:b8:01:75:1f:54:
         65:1e:44:10:47:52:c3:04:a3:28:78:ab:cb:f1:69:c3:01:8f:
         96:86:b0:73:86:1e:5b:2e:71:8a:eb:10:93:9b:54:48:10:27:
         0e:d6:8f:74:17:d7:f2:e4:f0:fd:f7:36:6f:dd:49:0d:9b:e1:
         6e:86:ad:29:4e:a3:2c:fc:cd:22:79:b7:3c:03:d3:9e:02:fc:
         3a:86:20:0b
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAY+/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjE3MjE1MDM5WhcNMjUxMjI0MjE1MDM5WjAYMRYw
FAYDVQQDEw02OTQzMjViNC01N2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA54x63eCrju2hYtKIfqpkxJ+P7SJCU7V3dOlIJN7MFYLAOZdCcb7gvw2h
0DOynmVimQX/yBLembjk/4rkXiR4c1mnSKzYjgmAXLUYMpEYVL/FoCZ8laTkH0cu
OimBTpWVzxsqtN9rhETTHjycti9In1WLJnW0EVpJMlTzl/x4IFtqkAwqh1+CWREa
ofECDniGsfnFbz9TeNlDGwndZYI4MJ8NSiBJI0b++sR8mq9DGRx2wh+SdDSiv0Up
ucYDSIxVZcD1Sd5i2Zb+QDtAWmNvpdvvIyB+dMRR7V6gQdX6/UzdMERncPAW4rkl
CQ/kGjdzEfur23cvU1y3J6jwZif9dQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFNOz
SySnflJkx0tPsaiiZCEK73yxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RkM0RURGMERCOTIxMUYwQjEzNkQ1ODREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtwA0DBAAtwBADBAAtxuIw
DQYJKoZIhvcNAQELBQADggEBAGubwcALvnTrnMYeuuAqIeUWCTyvk+M3m91C5d9d
zqE4oS8XtqO8tTlKLAQqzUfsrGCCqco1dMalcFfWVv2rNBXX15mMnIs0PP9dzfuA
WALFzG6I9TEscwmf4YjmB6zkS+FjCPHzFMaZwqrBbIOfDNzYJQc2VRJRL2QShkC1
2+aHEfW2QbCc0bbU9tUgCuq4tfD7dzL3aQuW0srdRlyvEklAgZsBZwUbMXBF1hkO
f0O4AXUfVGUeRBBHUsMEoyh4q8vxacMBj5aGsHOGHlsucYrrEJObVEgQJw7Wj3QX
1/Lk8P33Nm/dSQ2b4W6GrSlOoyz8zSJ5tzwD054C/DqGIAs=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:41:39 2025 by rpki-client