This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8565C60ADB6211F0986F5FDDDAE4EC9C.roa
File:                     8565C60ADB6211F0986F5FDDDAE4EC9C.roa (raw, json)
Hash identifier:          b0RY8Jnl3j2sJMndVxOgN2ePSrtzNDM/EgeC4aIsjZs=
Subject key identifier:   4C:AA:E2:B0:08:CD:22:3E:93:91:58:EC:14:52:B0:52:CF:3F:05:28
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018F95
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8565C60ADB6211F0986F5FDDDAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 16:07:44 +0000
ROA not before:           Wed 17 Dec 2025 16:07:40 +0000
ROA not after:            Fri 26 Dec 2025 16:07:40 +0000
asID:                     63139
IP address blocks:        45.197.64.0/24 maxlen: 24
                          45.197.65.0/24 maxlen: 24
                          45.197.66.0/24 maxlen: 24
                          45.197.76.0/24 maxlen: 24
                          45.197.77.0/24 maxlen: 24
                          45.197.78.0/24 maxlen: 24
                          45.197.79.0/24 maxlen: 24
                          45.197.80.0/24 maxlen: 24
                          45.197.81.0/24 maxlen: 24
                          45.197.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102293 (0x18f95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 16:07:40 2025 GMT
            Not After : Dec 26 16:07:40 2025 GMT
        Subject: CN=6942d550-2ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:82:58:f8:5c:e9:00:fa:f2:15:0c:53:fd:34:
                    78:e8:43:88:79:56:ac:28:17:8f:3e:65:77:2c:9b:
                    3f:cc:73:0c:2b:78:e1:ee:2a:f7:37:c0:42:8d:01:
                    ff:71:09:6f:bd:23:51:7e:43:78:0b:d6:09:85:0a:
                    92:0c:2e:8e:fc:65:d4:69:e7:5d:22:25:83:38:fe:
                    71:35:42:aa:5c:96:d1:32:31:42:d0:a6:f2:06:c6:
                    91:5b:59:e0:0f:a6:15:51:08:87:07:8a:65:f7:8f:
                    aa:c6:8c:ed:75:8e:75:72:0f:5a:17:0b:66:40:6f:
                    7a:1f:67:6b:24:58:cb:07:eb:6c:6b:3d:68:6e:4f:
                    40:9b:44:d1:7d:42:2d:d9:2c:ee:1d:7e:a8:b5:9a:
                    9f:6d:8f:1a:ff:72:17:c7:7a:52:96:c1:30:9a:b5:
                    0f:ca:28:7f:6f:1e:dc:17:c1:17:d9:0f:5b:b6:40:
                    74:f7:8f:87:67:b9:d5:b4:aa:7b:d9:e3:20:28:93:
                    5b:e4:0c:c3:ac:52:52:1e:4a:2d:b7:72:63:5a:b4:
                    82:52:47:85:c6:6b:67:e4:56:16:46:c1:67:25:48:
                    17:df:a1:51:fa:f8:82:33:3c:a5:2d:ff:2b:e5:4f:
                    70:ed:b4:4f:93:a6:37:9d:5a:d8:94:e2:34:45:e3:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AA:E2:B0:08:CD:22:3E:93:91:58:EC:14:52:B0:52:CF:3F:05:28
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8565C60ADB6211F0986F5FDDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.64.0-45.197.66.255
                  45.197.76.0-45.197.82.255

    Signature Algorithm: sha256WithRSAEncryption
         38:ff:dd:5d:83:d9:ac:18:24:d2:a3:3d:2e:dd:9b:0c:55:93:
         4f:5c:61:5f:b0:4e:d2:88:4d:c5:24:26:9a:77:4d:83:e5:37:
         e9:c7:7e:20:04:7e:43:81:7c:da:f0:cc:29:a8:94:22:66:ce:
         7f:a7:5b:79:38:8b:c4:9d:c6:96:1f:dc:f1:64:8f:cc:76:9a:
         fd:5e:ec:e6:da:67:ad:ca:19:2e:48:e1:8e:8a:d1:e7:61:cb:
         9c:1d:d1:45:e4:15:7c:ee:17:50:a9:86:79:92:49:1c:6b:3a:
         bc:64:6d:49:cb:d3:21:37:b7:01:67:a6:d5:67:7c:ac:b9:51:
         72:24:b5:72:de:b4:7f:8c:32:f1:6f:ea:a1:10:c1:3a:b2:e2:
         0d:68:61:a9:a6:40:f2:dd:b7:c3:30:8e:05:9e:01:7b:e8:71:
         c5:66:82:8d:38:5e:f4:23:56:29:15:28:60:77:16:3c:4b:5f:
         d4:0a:2c:51:5c:e6:35:22:69:40:00:a0:c2:c8:94:fa:a2:54:
         2b:b0:63:33:43:22:6d:24:fe:41:42:33:4f:d3:55:5e:8e:b9:
         5d:a6:96:29:1e:c5:b3:9c:14:19:0a:40:4a:96:12:ed:1c:25:
         b5:41:4a:41:17:a1:ef:21:c6:45:7d:ac:a2:cb:2c:93:52:55:
         91:cb:3f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:14 2025 by rpki-client