This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79FB250EDB9311F0A8B9488BDAE4EC9C.roa
File:                     79FB250EDB9311F0A8B9488BDAE4EC9C.roa (raw, json)
Hash identifier:          g5LRdJn+AEDJixYN04V0XWDo9MEI9aTjzgLwq57b8kc=
Subject key identifier:   25:B6:25:F6:30:F4:48:B8:81:2B:58:B1:11:65:74:DE:22:78:1D:F2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018FC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79FB250EDB9311F0A8B9488BDAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 21:58:11 +0000
ROA not before:           Wed 17 Dec 2025 21:58:05 +0000
ROA not after:            Wed 24 Dec 2025 21:58:05 +0000
asID:                     395793
IP address blocks:        45.207.138.0/23 maxlen: 24
                          45.207.140.0/23 maxlen: 24
                          45.207.142.0/23 maxlen: 24
                          45.207.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102341 (0x18fc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 21:58:05 2025 GMT
            Not After : Dec 24 21:58:05 2025 GMT
        Subject: CN=69432772-4fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:33:89:2f:7b:35:11:87:a5:67:f2:99:25:
                    d8:f8:c4:bf:cb:a8:4f:fa:9d:54:31:ad:a5:62:0f:
                    0a:9b:de:e8:82:2a:b6:11:48:1a:43:42:5d:8c:6b:
                    56:dc:ca:35:4f:d2:b8:f5:0e:d8:d4:2d:a2:cb:76:
                    03:9b:4b:21:fd:20:08:59:92:53:38:44:62:17:f0:
                    1d:94:eb:cb:8e:6f:78:bb:f9:6a:75:da:c5:cf:cc:
                    f6:7a:30:96:39:2c:76:9c:f2:08:90:2f:fe:c6:e4:
                    5c:55:63:99:fe:3b:43:20:7b:54:62:6f:6a:6a:6a:
                    f5:bd:49:c3:5b:1e:ca:a7:a4:bb:a1:77:85:b2:19:
                    3b:75:f1:4c:05:03:cf:50:0b:88:ee:96:24:88:80:
                    1f:1f:cd:cd:d3:84:42:cc:da:49:07:45:da:d2:07:
                    5f:4e:89:06:d4:9f:fe:63:f4:57:9a:06:67:21:e4:
                    e7:db:36:a4:3f:f2:a4:d2:30:81:8f:ca:7c:70:09:
                    b9:10:4e:87:2f:11:77:72:6a:36:4e:21:29:01:35:
                    e6:c8:d9:81:46:58:2c:3c:07:28:7a:2a:9d:52:12:
                    4a:bd:c5:56:6e:d8:50:1d:c6:71:a8:0b:05:5c:f6:
                    4e:10:cd:bc:f0:b2:f6:57:82:d4:a1:03:d4:20:cc:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B6:25:F6:30:F4:48:B8:81:2B:58:B1:11:65:74:DE:22:78:1D:F2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79FB250EDB9311F0A8B9488BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.138.0-45.207.147.255

    Signature Algorithm: sha256WithRSAEncryption
         78:48:68:d5:a2:53:33:f8:c5:a9:3a:e7:3e:2c:ef:58:12:54:
         10:51:f2:b1:57:1b:2d:09:48:28:55:f4:b4:95:df:57:e8:b1:
         eb:ef:60:2f:af:12:67:1a:80:69:a9:d0:d8:08:9b:a1:99:d0:
         aa:cc:c6:02:b8:21:52:60:93:27:9a:6b:45:8c:98:e0:9f:f1:
         a9:01:f9:a2:9d:85:c0:e0:75:ce:a1:d4:40:4f:ea:84:72:5e:
         3e:6f:2b:80:36:f1:63:82:8b:fa:ac:66:84:c1:ea:41:fb:1a:
         cb:2e:fe:01:fc:9f:ee:0d:71:36:50:4e:aa:ca:94:90:3c:2c:
         75:58:94:b2:ca:e6:b3:5c:27:2b:34:4c:15:27:47:b6:e3:66:
         68:a3:59:11:3f:8d:fe:31:a8:a0:28:09:5f:89:db:83:a4:84:
         7c:5d:b0:a4:76:a6:96:6c:3c:e2:31:87:bb:e6:51:e2:6c:11:
         5f:35:fa:53:30:80:07:d3:af:e7:47:ad:f8:a4:47:47:81:5f:
         f7:60:44:53:7f:09:6a:51:bd:13:f5:08:a8:52:1d:4e:e7:d0:
         b7:09:5c:d5:fa:f6:1b:f6:d7:dc:36:3a:6b:3d:e2:eb:e6:10:
         d6:ab:79:ca:4a:0e:28:91:e9:a0:c0:ad:82:b3:3e:d0:ef:df:
         94:2a:cb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:41:36 2025 by rpki-client